Re: PAP + MD5 problems

2005-02-08 Thread Neil Craig
On Mon, 07 Feb 2005 18:59:39 -0500, Alan DeKok [EMAIL PROTECTED] wrote: Neil Craig [EMAIL PROTECTED] wrote: WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the NAS! That is a pretty definitive message. How does Chilli pass the

Additional Characters in Accounting When Inserting to MySQL

2005-02-08 Thread Neil Quiogue
Hello, I hope someone can point me in the right direction. I'm having some problems in that additional characters '3D' are being inserted in a MySQL database. I've enabled debugging and here's a snippet: rad_recv: Accounting-Request packet from host

how to store log entries in freeradius server

2005-02-08 Thread Suresh
Hi, I am new to freeradius server . I have installed freeradius server 1.0.1 and radius client as pyrad 0.8 in my linux machine . I have tested both the client and the server . The communication between the client and the server is working fine. But the log entries are not appended in the

Re: Dynamic IP Allocation for multiple Radius Servers

2005-02-08 Thread Kostas Kalevras
On Mon, 7 Feb 2005, Ken Doyle wrote: Hi, I've been working on building and configuring a cluster which will, amongst other things, run Freeradius (I hope). Currently everything is okay, but now I appear to be stuck. At the moment I'm dymanically allocating IP's using the IPPool module, which is

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Kostas Kalevras
On Mon, 7 Feb 2005, Jason Howk wrote: I'm wondering if anyone has ever tried to put an NT hash password directly into the LDAP userPassword field, and have it authenticated through free radius. Here's the situation: We have a working configuration that is setup as EAP-LEAP and LDAP where the

Re: how can freeradius log the transaction and failed logins?

2005-02-08 Thread Kostas Kalevras
On Tue, 8 Feb 2005, Marendra Nutriaji wrote: Thank you for your reply, I see there is a script in dialupadmin that is able to parsing the radius.log when there are some failed logins. If i want to use this script, what do i need to set in radiusd.conf? Nothing much, just log_auth = yes Thank you

xpextensions not understood when running CA.all

2005-02-08 Thread Ketjes Jette
Versions: freeradius-1.0.1 openssl/stable 0.9.6c-2.woody.7 (Debian) Hi, I'm trying to generate the necessary certificates for freeradius (to authenticate XP with my freeradius with EAP/TLS), using CA.all. The problem is that it always gives an error on

Re: database/ldap for configuration?

2005-02-08 Thread Michael Mitchell
Also on the roadmap (soon) for ldap... Stefan Winter wrote: Hello! I use freeradius to manage administrative sessions on a large number of routers and switches. For redundancy, I have two boxes. I'd like to use some sort of a database or directory to configure all of the clients devices rather

MD5 Password into SQL

2005-02-08 Thread Neil Craig
Does anyone know how to create the MD5 password using the secret to insert into MySQL? I will be using a PHP frontend to do this and have tried PHP's md5() function but can't get it to create the correct hash using the secret. Any help appreciated :) - List info/subscribe/unsubscribe? See

RE: Problems with ttls using SecureW2

2005-02-08 Thread Øystein Gåsdal
Anyway, have you been able to authenticate at a very early stage, so logon scripts can be used with SecureW2? If not, are there other supplicants that support that? I had no need for that, but it is documented in the new

FreeRadius Documentation

2005-02-08 Thread Martin Tejerina
Hy, i am new in the use of freeradius, are there any documentation in spanish about installation and configuration about freeradius. Thanks a lot. Este mensaje ha sido analizado por C4I Mail Server en busca de virus y otros contenidos peligrosos, y se considera que esta limpio. - List

RE: MTU Settings

2005-02-08 Thread Jon Matias Fraile
Let me explain because it could be a terminology problem: The MTU is usually set when a device driver initializes an interface and the MTU represents the payload portion of a datagram (its length less header length). The maximum length of the data field is 1500 bytes. From Ethernet

Re: MD5 Password into SQL

2005-02-08 Thread Stefan . Neis
Neil Craig schrieb: Does anyone know how to create the MD5 password using the secret to insert into MySQL? Sorry, I'm completely failing to understand what you're trying to do. What relation do you see between MD5 hash of the password and the secret? Is that referring to the radius secret used

Redundant mysql authorize not working

2005-02-08 Thread Gilbert Otingen
Hi I'm set up redundant authorization using mysql database back end and i'm running two mysql servers. I setup the following lines in radiusd.conf and setting include statements redundant { sql1 sql2 } And i can see the successful connect in the log

Re: MD5 Password into SQL

2005-02-08 Thread Neil Craig
I have entered a MD5 password into SQL created using PHP MD5 function - it never authenticates to this - do I need to use the secret as the key for the encryption? On Tue, 08 Feb 2005 17:00:56 +0100 (CET), [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Neil Craig schrieb: Does anyone know how to

bequeath connection

2005-02-08 Thread Nader Sayeh
Hi Can I configure radius to connect to the local database without using tns names? (both radius oracle database are on the same server) In the same way as connecting with sqlplus username/password Regards, Nader

Re: MD5 Password into SQL

2005-02-08 Thread Alan DeKok
Neil Craig [EMAIL PROTECTED] wrote: I have entered a MD5 password into SQL created using PHP MD5 function - it never authenticates to this - I have no idea what you mean by that. Can you use *descriptive* words, and not it and this? Makign people play guessing games is annoying. do I

Re: Additional Characters in Accounting When Inserting to MySQL

2005-02-08 Thread Alan DeKok
Neil Quiogue [EMAIL PROTECTED] wrote: What do I need to look for in order for the insertion of additional characters to be prevented? Thanks. sql.conf See safe-characters Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: xpextensions not understood when running CA.all

2005-02-08 Thread Alan DeKok
etjes Jette [EMAIL PROTECTED] wrote: 15168:error:02001002:system library:fopen:No such file or directory:bss_file.c:104:fopen('xpextensions','rb') There is an xpextensions file included with the server. Are you using it? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Redundant mysql authorize not working

2005-02-08 Thread Alan DeKok
Gilbert Otingen [EMAIL PROTECTED] wrote: redundant { sql1 sql2 } And i can see the successful connect in the log and everything works as expected... but until i shutdown the first database. Then... what happens? Any ideas on what the problem

Re: MD5 Password into SQL

2005-02-08 Thread Neil Craig
I have resolved this..it..that..whatever On Tue, 08 Feb 2005 12:56:00 -0500, Alan DeKok [EMAIL PROTECTED] wrote: Neil Craig [EMAIL PROTECTED] wrote: I have entered a MD5 password into SQL created using PHP MD5 function - it never authenticates to this - I have no idea what you mean by

Re[2]: Additional Characters in Accounting When Inserting to MySQL

2005-02-08 Thread Neil Quiogue
Hello Alan, Thanks. That did it. I migrated from an older version which didn't have safe-characters. Thanks again. Regards, Neil Quiogue Wednesday, February 9, 2005, 1:56:54 AM, you wrote: AD Neil Quiogue [EMAIL PROTECTED] wrote: What do I need to look for in order for

Re: Redundant mysql authorize not working

2005-02-08 Thread Gilbert Otingen
what happens... The connection to the second mysql database it takes three minutes! It look likes a bug i search on google and see same problems but no solutions! I set max_request_time to 5 seconds, so it's faster for testing: Gilbert Gilbert Otingen [EMAIL PROTECTED] wrote: redundant

Sucsessfully installed rlm_sqlippool

2005-02-08 Thread Alfred H. Dahl
Hello all, I have downloaded and compiled rlm_sqlippool from http://www.onlinebilling.ru/freeradius/rlm_sqlippool.tar.gz on the freeradius-1.0.1-platform. Unzip the tar-file to the freeradius-1.0.1-catalog and run rlm_sqlippool.sh. Then only one modification has to be made: change all

post-proxy

2005-02-08 Thread Joe H
I have proxying setup for a realm and when I recieve the reply back from the radius server, I want to set the Filter-Id attribute. I believe I have it working properly based on radtest replies but in the logs I see Error: rlm_attr_filter: Authorize method will be deprecated. Has this, or will

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Jason Howk
OK. I think I found my issue... When mapping the NT-Password to the userPassword, freeRadius is not reading beyond the first character of the attribute when it's a {. Subsequently all that I see is, Adding userPassword as NT-Password, value { op=21. To see if it was just this attribute or

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Kostas Kalevras
On Tue, 8 Feb 2005, Jason Howk wrote: OK. I think I found my issue... When mapping the NT-Password to the userPassword, freeRadius is not reading beyond the first character of the attribute when it's a {. Subsequently all that I see is, Adding userPassword as NT-Password, value { op=21. To

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Kostas Kalevras
On Tue, 8 Feb 2005, Kostas Kalevras wrote: On Tue, 8 Feb 2005, Jason Howk wrote: OK. I think I found my issue... When mapping the NT-Password to the userPassword, freeRadius is not reading beyond the first character of the attribute when it's a {. Subsequently all that I see is, Adding

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Jason Howk
Thanks. I Appreciate it. --Jason. On Feb 8, 2005, at 2:10 PM, Kostas Kalevras wrote: On Tue, 8 Feb 2005, Jason Howk wrote: OK. I think I found my issue... When mapping the NT-Password to the userPassword, freeRadius is not reading beyond the first character of the attribute when it's a {.

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Jason Howk
Great, I'll give it a shot. Thanks a bunch. --Jason. On Feb 8, 2005, at 2:40 PM, Kostas Kalevras wrote: On Tue, 8 Feb 2005, Kostas Kalevras wrote: On Tue, 8 Feb 2005, Jason Howk wrote: OK. I think I found my issue... When mapping the NT-Password to the userPassword, freeRadius is not reading

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Jason Howk
I'm not getting it to work. I did just an LDAP rebuild and I didn't see a change, so I did a full checkout and compile with no results there either. Am I missing something? Thanks, J. Relevant parts of the radiusd.conf: ldap { ... password_header = {NT} password_radius_attribute = NT-Password

Re: post-proxy

2005-02-08 Thread Nicolas Baradakis
Joe H wrote: Error: rlm_attr_filter: Authorize method will be deprecated. [...] I'm just wondering about that error. Don't bother about it, this is always printed at module initialization. -- Nicolas Baradakis - List info/subscribe/unsubscribe? See

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Kostas Kalevras
On Tue, 8 Feb 2005, Jason Howk wrote: I'm not getting it to work. I did just an LDAP rebuild and I didn't see a change, so I did a full checkout and compile with no results there either. Am I missing something? Thanks, J. Relevant parts of the radiusd.conf: ldap { ...

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Alan DeKok
Kostas Kalevras [EMAIL PROTECTED] wrote: ... On a related note, I've been talking with someone who's been working on auto-discovery of passwords. This should minimize configuration. e.g. {nt}blah - NT-Password = blah {crypt}blah - Crypt-Password = blah ... I've updated rlm_pap

Re: NT hashed password in userPassword attribute.

2005-02-08 Thread Jason Howk
Removed the checkItem mapping, and re-ran but unfortunately no go. Also tried commenting out the password_header directive and then re-writing to a 0x. Unfortunately nothing there either... Here's the output: rad_recv: Access-Request packet from host 10.160.111.240:21645, id=157, length=124

Re: Dialupadmin port number

2005-02-08 Thread Eric Gregory
You need to be running a seperate webserver which serves the dial-up admin pages, set the web server to whatever port you like Eric On Saturday 22 January 2005 21:44, Ed Engelking II wrote: I'm new to FreeRadius. I've recently setup a FreeRadius server, noting that ports 1645, 1812, and 1813

Can we run radius server in background

2005-02-08 Thread Suresh
Dear Sir, I have installed freeradius server 1.0.1 version .Can I run the radiusd daemon in the background in the server machine .If possible kindly assist me how to do it . Can we run the server in one machine in the background and run the radius client in another machine . Kindly

Re: Can we run radius server in background

2005-02-08 Thread Justin Guidroz
rc.radiusd start and freeradius will run in the background. On Tue, 08 Feb 2005 21:19:32 -0800 (PST), Suresh [EMAIL PROTECTED] wrote: Dear Sir, I have installed freeradius server 1.0.1 version .Can I run the radiusd daemon in the background in the server machine .If possible

How to check authentication and accounting request

2005-02-08 Thread Suresh
Hi, I am using radius server 1.0.1 and pyrad 0.8 as radius client .How can I send the authentication request and accounting request to the radius server from the radius client. If anyone knows kindly assist me. Thanks in advance

Freeradius 1.0.1 with multiple EAP type

2005-02-08 Thread Jacques VUVANT
Hello Someone know if it is possible to activate multiple EAP-type authentication ? I need to activate, on same freeradius LEAP,PEAP,MSCHAPV2,TLS and TTLS. Thanks for any answer. jacques VUVANT

Re : Re: Can we run radius server in background

2005-02-08 Thread Suresh
Thanks justin . The server is running in background . I need one more help .Can we run the server in one machine in the background and run the radius client in another machine . Kindly assist me how to do it if anyone knows . Suresh -

Re: how can freeradius log the transaction and failed logins?

2005-02-08 Thread Marendra Nutriaji
cool, everything runs well. I can log all failed logins into database and display them in failed logins. Thank you all of youReally appreciated Cheers Marendra On Tue, 8 Feb 2005 13:12:42 +0200 (EET), Kostas Kalevras [EMAIL PROTECTED] wrote: On Tue, 8 Feb 2005, Marendra Nutriaji wrote:

Authorisation and Authentication throught Active Directory?

2005-02-08 Thread Matthias . Goetz
Hi, I conquered a problem as I wanted to authenticate und authorise users against the active directory. What is to do, if I want to get this working? ` Just configure LDAP in the .conf file and that is all ? Didn't find good information, so I ask here. Thx - List