Re: EAP/TLS, EAP-TTLS with LDAP

2004-12-23 Thread Tomasz Wolniewicz
Alan, could you be a LITTLE bit more specific about that? Its Christmas :). How can I tell define conditions which will notice that it is the EAP-TTLS case and not EAP/TLS? Perhaps there is no way, as at the beginning it is simply an EAP message, so the server has no way of telling which way to

Radius server + Billing server

2004-12-23 Thread prabhan
Hello, What is the protocol for communication between Radius server and Billing server ? How does Radius server get details from Billing server ? Thanks, Prabha N - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

CHAP and PAP

2004-12-23 Thread prabhan
Hello, What is CHAP and PAP ? I know that they are mechansims to authenticate users. Since there are several ways of authenticating ... For eg. Calling number authentication , called number authentication (as used in terms of a VOIP gateway), how to take a decision on which authentication scheme

Re: Radius server + Billing server

2004-12-23 Thread Josh Howlett
http://www.oreilly.com/catalog/radius/ --On Thursday, December 23, 2004 12:49:30 +0530 prabhan [EMAIL PROTECTED] wrote: Hello, What is the protocol for communication between Radius server and Billing server ? How does Radius server get details from Billing server ? Thanks, Prabha N - List

Authentication and accountinmg reruest details

2004-12-23 Thread prabhan
Hello, I am using freeradius 1.0.1 to authenticate users for a voip gateway. Suppose voip gateway A wants to make a call to voip gateway B. In order to authenticate A,the calling number,the details of user A has to be listed in the users file. Similarly if user B , the called number also needs

Server crashes at high load situations

2004-12-23 Thread Stephan Jaeger
() from /lib/tls/libc.so.6 #1 0x40362fcc in ?? () from /lib/tls/libc.so.6 #2 0x40065520 in PADDING () from /radius/daemon/freeradius-snapshot-20041223/lib/libradius-1.1.0-pre0.so #3 0x40256771 in abort () from /lib/tls/libc.so.6 #4 0x in ?? () #5 0x0020 in ?? () #6 0x

Post authorization status = FAIL

2004-12-23 Thread Nagesh Boyina
Hi, I am not able to telnet to cisco router using cisco av pairs. I am getting message like Access Accept in radius debug, but I am not able to login with privilige levels. I am using Mysql db. Pls help him out to configure AV pairs syntax in mysql db Can anyone help me. thanks in advance

Authorization Process?

2004-12-23 Thread Chris Wolf
I was wondering where at in the code are the value pairs entered into the packet. E.G. If I send a packet where the User-Name is blah and the Calling-Station-Id is blah2, when can I first use the method pairfind(vp, paired) to find the valuepair. Any help would be great. Thanks,

Re: mysql seg fault

2004-12-23 Thread Mathias Röhl
Am Mi, den 22.12.2004 schrieb Mathias Röhl um 14:51: Hi Hi after rebuilding openssl and fr from the sources now the radiusd -X has no error, I don't know exactly why but it works have a few fine days and all the best for 2005... regards [EMAIL PROTECTED] -- TANK!!! I need an

Re: CHAP and PAP

2004-12-23 Thread neeraj kharbanda
Hi, yes chap and pap are authentication protocol. To make sure that the password is not sniifed by sniffer.Whereas calling number is used to prevent account being misused. As the calling stations is unique (phone numbe or mac address) --- prabhan [EMAIL PROTECTED] wrote: Hello, What is CHAP

Authorizing user to assign a particular VLAN

2004-12-23 Thread Cool Man
Hi all, I have successfully setup freeradius (version 1.0.1) auhentication. Now at the second step I want to limit the user activities in my network. In other words I want to authorize the users. Depending upon their authorization level I want to assign them a different VLAN. Now my question

Freeradius 1.0.1 build problems on RH9

2004-12-23 Thread bdehn
I am attempting to build FR 1.0.1 on a RH9 system and receive the following error: /usr/bin/libtool --mode=link gcc -release 1.0.1 \ -module -export-dynamic -O2 -g -march=i386 -mcpu=i686 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow

Re: Freeradius 1.0.1 build problems on RH9

2004-12-23 Thread Pete Conkin
- Original Message - From: [EMAIL PROTECTED] I am attempting to build FR 1.0.1 on a RH9 system and receive the following error: -lmysqlclient -lz -lcrypt -lnsl -lm -Wl,-soname -Wl,rlm_sql_mysql-1.0.1.so -o .libs/rlm_sql_mysql-1.0.1.so /usr/bin/ld: cannot find -lz Looks like

Re: Freeradius 1.0.1 build problems on RH9

2004-12-23 Thread L.C. (Laurentiu C. Badea)
Install zlib-devel If you are building vanilla 1.0.1 you should instead rebuild it from Fedora 3 src rpm. Just download freeradius-1.0.1-1.src.rpm and rpmbuild --rebuild freeradius-1.0.1-1.src.rpm -- L.C. (Laurentiu C. Badea) [EMAIL PROTECTED] wrote: I am attempting to build FR 1.0.1 on a RH9

Re: that is what i had done

2004-12-23 Thread Alan DeKok
zack musa [EMAIL PROTECTED] wrote: OK...it's seems that I'm not good in explaning this.. Your explanation was clear. The response to your explanation was also clear. realm 200.200.230.136 { type= radius authhost= radius.200.200.230.136:1812

Re: EAP/TLS, EAP-TTLS with LDAP

2004-12-23 Thread Alan DeKok
Tomasz Wolniewicz [EMAIL PROTECTED] wrote: could you be a LITTLE bit more specific about that? Its Christmas :). How can I tell define conditions which will notice that it is the EAP-TTLS case and not EAP/TLS? Perhaps there is no way, as at the beginning it is simply an EAP message, so the

Re: Authorization Process?

2004-12-23 Thread Alan DeKok
Chris Wolf [EMAIL PROTECTED] wrote: I was wondering where at in the code are the value pairs entered into the packet. E.G. If I send a packet where the User-Name is blah and the Calling-Station-Id is blah2, when can I first use the method pairfind(vp, paired) to find the valuepair. Any help

Re: Authorizing user to assign a particular VLAN

2004-12-23 Thread Zoltan A. Ori
On Thursday 23 December 2004 12:41, Cool Man wrote: Hi all, I have successfully setup freeradius (version 1.0.1) auhentication. Now at the second step I want to limit the user activities in my network. In other words I want to authorize the users. Depending upon their authorization level I

Re: Server crashes at high load situations

2004-12-23 Thread Alan DeKok
Stephan Jaeger [EMAIL PROTECTED] wrote: I'm still experiencing server crashes under some high load situations. Error: Assertion failed in threads.c, line 285 What's probably happening is that the server is CPU starved, and the request is being deleted after cleanup_delay, even though the

Compile trouble on RH AS 2.1

2004-12-23 Thread Bruce Garlock
I am trying to compile freeradius 1.0.1 on RH AS 2.1, and it seems to die out with make on something to do with unixodbc: Making static in rlm_sql_unixodbc... gmake[10]: Entering directory `/usr/src/freeradius-1.0.1/src/modules/rlm_sql/drivers/rlm_sql_unixodbc' gcc -g -O2 -D_REENTRANT

one day accounts

2004-12-23 Thread Carl Peterson
I am currently using freeradius as the authentication method for a chilli hotspot. I use a Max-All-Session attribute to give prepaid users X amount of discontinuous time. One of the users of some software I wrote to create and monitor prepaid cards would like a daily card feature that will

How to authenticate Mac users

2004-12-23 Thread Amit Gupta
Hi, I wish to authenticate user laptops (coming in our network) by Radius server on basis of MAC addresses. I am using SQL authentication and accounting. How can I achieve it? Please help. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html