Realms setup

2005-03-08 Thread Radius
We are trying to set up a pass through radius to send requests for another domain to a different server. The main server kingmanaz.net and the second server freedomnetusa.com We want all requests for freedomnetusa.com to be forwarded from the kingmanaz.net machine when the request to authenticat

Re: FreeRadius 1.0.1 Compile Error

2005-03-08 Thread Ryan Bourgeois
Ryan Bourgeois wrote: Hiya guys. I'm having an odd error when compiling FreeRadius on my Gentoo machine (using the Gentoo emerge package system). The error occurs when trying to compile the rlm_unix module. Here's the full output from this: snip I'm not entirely sure why it's doing this. I

Manip.pm can't be located??

2005-03-08 Thread zack musa
When I try to run the log_badlogins script (perl log_badlogins) the following output appear: _ [EMAIL PROTECTED] bin]# perl log_badlogins Can't locate Date/Manip.pm in @INC (@INC contains: /usr/local/lib/perl5/5.8.6/i686-linux /usr/local/lib/perl5/5.

RE: dialupadmin

2005-03-08 Thread Janakan Rajendran
Thx for the comments. The following link made me to think that dialupadmin comes with freeradius. http://www.nwfusion.com/links/Downloads/Security/Remote_access/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marcin Jessa Sent: Tuesday, March 08, 2005 8

Re: dialupadmin

2005-03-08 Thread Marcin Jessa
Freeradius is not dialupadmin. Check freshmeat for the project site and the doc is most propably in the dir of dialupadmin when you unpack it. Use your head, will you? And google.com as well.. On Tue, 8 Mar 2005 19:45:46 -0500 "Janakan Rajendran" <[EMAIL PROTECTED]> wrote: > Kostas, > > You

RE: dialupadmin

2005-03-08 Thread Janakan Rajendran
Kostas, You mean the doc folder in the local machine or on the free radius page? I couldn't find anything called dialup admin on the local server and also the website is not opening (www.freeradius.org/doc: Page can not be displayed). Am I looking in the right place? Thx in advance. Regards, Janak

Compile problem

2005-03-08 Thread Serg Shipaev
quest_list.o mainconfig.o request_process.o -Wl,--export-dynamic -L/root/archives/radius/freeradius-snapshot-20050308/src/lib -lnsl -lresolv /root/archives/radius/freeradius-snapshot-20050308/src/lib/.libs/libradius.s o /usr/lib/libsnmp.so /usr/lib/libltdl.so -lcrypt -L/usr/lib -lssl -lcrypto -Wl,-

Upgrade problems.

2005-03-08 Thread Peter Nitschke
I have an old Freeradius 0.8.1-1 server on RH 7.2 which I wisd to upgrade to 1.02 on Whitebox EL3.1 Freeradius is just being used as a proxy, the setup on 0.8 seems quite simple, but using similar settings with 1.02 it keeps reporting an error with huntgroups which exists but is the default file.

FreeRadius 1.0.1 Compile Error

2005-03-08 Thread Ryan Bourgeois
Hiya guys. I'm having an odd error when compiling FreeRadius on my Gentoo machine (using the Gentoo emerge package system). The error occurs when trying to compile the rlm_unix module. Here's the full output from this: Making static dynamic in rlm_unix... gmake[6]: Entering directory `/var/

quick question

2005-03-08 Thread Chris Knipe
Lo everyone, Just a quick question... Whilst I know and use simultaneous use based on username authentication, is there any way to only allow one login from one CLI? We use PPPoE on a Wireless scenario. Basically, I want to allow any MAC address to connect, but I want to limit one login per MA

Re: Can't get rlm_sql to authorize, what's wrong with my query?

2005-03-08 Thread Matthew Schumacher
Matthew Schumacher wrote: Can someone look at my query and tell me what is wrong? --- db=> select id, username, attribute, value, op from radstart('username'); id | username |attribute| value | op +--+-+

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread Raúl Tamayo Fernández
Hi, I had a similar problem and the solution was the mapping, such as Edvin says. I add the following entries to ldap.atrrmap: checkItem LM-Password lmPassword checkItem NT-Password ntPassword checkItem User-Password lmPa

RE: DialupAdmin and Usernames

2005-03-08 Thread tfischer
That did it! Thank you very much. I'd like to thank you all for the hard work that you have put in to both DialupAdmin and FreeRadius. They are both excellent programs! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kostas Kalevras Sent: Tuesday, Mar

Can't get rlm_sql to authorize, what's wrong with my query?

2005-03-08 Thread Matthew Schumacher
Can someone look at my query and tell me what is wrong? --- db=> select id, username, attribute, value, op from radstart('username'); id | username |attribute| value | op +--+-+--+ 1 | user

Re: FreeRadius logging lots of duplicates?

2005-03-08 Thread Scott Baker
re. Thanks!! - radius_xlat: '/var/log/radacct/10.45.0.9/detail-20050308' rlm_detail: /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radacct/10.45.0.9/detail-20050308 modcall[accounting]: module "detail&q

RE: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread Seferovic Edvin
Hi, probably you are using MS CHAP? Right? Well MS CHAP protocol asks for User-Password attribute which cannot be found in your LDAP directory. You probably have attribute called userPassword. This attribute may be encrypted or in clear text. But what you actually need is sambaNTPassword attribute

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
I think Steve is right ... This damned ppp-radius-plugin sends bad packets to my radiusserver ... packets without the required user-password ... And so it must be this damned plugin ... I testet a little bit with the windows radius test program and I sent packets with and without user-password to

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Sébastien Cantos wrote: >So maybe it's a NAS problem. Are you sure that the NAS is sending the >userpassword in the request ? > > > hm, maybe, how can I test that? I am currently trying some tests with the windowsxp radius test program ... But I am not very optimistic - List info/subscribe/u

RE: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread Sébastien Cantos
So maybe it's a NAS problem. Are you sure that the NAS is sending the userpassword in the request ? -- Sebastien Cantos <[EMAIL PROTECTED]> Network / System Manager Neopost DIVA > -Message d'origine- > De : [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] De la > part de guest01 > Envoyé

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Hi Thxs for your fast and informative answer ... Indeed, a very good argument! So I think I have to try another ppp version ... A strange problem, damned ppp radiusplugin!! Why can't life be easier? ;-) thxs peda - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Sébastien Cantos wrote: >>I had the same problem a few weeks ago. In fact the ldap wasn't returning >>the user-password so it wasn't working. Chack with ldapsearch to make the >>querry directly to the ldap as if you were the radius and I think that you >>will see that the userpassword is not retur

Re: DialupAdmin and Usernames

2005-03-08 Thread Kostas Kalevras
On Mon, 7 Mar 2005 [EMAIL PROTECTED] wrote: I've run in to a snag with dialupadmin 1.0.1. Our usernames have spaces. I did not see that as a limitation in the docs. The only place it seems to be a problem is when administering group membership. A space as well as a new line defines the username t

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread Stefan Winter
Hello, you already got this reply earlier, but here goes... > this is the logfile output after testing with radexample: > > rad_recv: Access-Request packet from host 127.0.0.1:1025, id=40, length=66 > User-Name = "testuser" > User-Password = "123456" > Service-Type = Authe

RE: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread Sébastien Cantos
I had the same problem a few weeks ago. In fact the ldap wasn't returning the user-password so it wasn't working. Chack with ldapsearch to make the querry directly to the ldap as if you were the radius and I think that you will see that the userpassword is not returned. > rlm_ldap: bind as / to

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
hm, radius is very strange Can anyone please help me? this is the logfile output after testing with radexample: rad_recv: Access-Request packet from host 127.0.0.1:1025, id=40, length=66 User-Name = "testuser" User-Password = "123456" Service-Type = Authenticate-Only

Re: FreeRadius logging lots of duplicates?

2005-03-08 Thread Kenneth Grady
Do you have logdir = syslog? On Mon, 2005-03-07 at 15:12, Alan DeKok wrote: > Scott Baker <[EMAIL PROTECTED]> wrote: > > errors. Maybe someone on the list can help me. The only thing I see > > is that it's complaining about no NULL realm, and that the module > > "unix" returns "fail" What should

eDirectory and FreeRadius HowTo version 0.

2005-03-08 Thread Dennis Comeaux
This is version 0 because well... my technical writing skills are a bit lacking. Those of you trying to implement this, please feel free to give me a shout via email. This is a procedure that works with the following: 1. Red Hat Enterprise Server 3 (but this SHOULD work with any linux distro) 2.

Re: checkrad.pl & MT Routers

2005-03-08 Thread Chris Knipe
diff for checkrad.pl -- Chris. - Original Message - From: "Chris Knipe" <[EMAIL PROTECTED]> To: Sent: Tuesday, March 08, 2005 3:55 PM Subject: Re: checkrad.pl & MT Routers I'll try and make a diff later on and send it through... Newer MT's changed the commands for ppp active print... ch

Re: checkrad.pl & MT Routers

2005-03-08 Thread Chris Knipe
I'll try and make a diff later on and send it through... Newer MT's changed the commands for ppp active print... checkrad.pl should be sending 'ppp active print without-paging detail', not 'ppp active print column name detail'. The column parameter does not exist anymore. -- Chris. - Origi

Re: Cisco CLID AAA Preauth

2005-03-08 Thread Kostas Kalevras
On Tue, 8 Mar 2005, Thomas Boettge wrote: Hello, does anyone has some experience or could tell me if I can use freeradius for Cisco CLID AAA Preauthentication ? Yes it can be used just fine. We 've tested it in our installation (with callerids stored in ldap) and we 'll be puting it in production

checkrad.pl & MT Routers

2005-03-08 Thread Chris Knipe
Lo all, Something strange going on here (or I am forgetting something). clients.conf: client x.x.x.6 { secret= mysecret shortname = myshortname nastype = mikrotik } Client is working, successfully authenticating and running accounting and no problems with it what so ever. nas

Cisco CLID AAA Preauth

2005-03-08 Thread Thomas Boettge
Hello, does anyone has some experience or could tell me if I can use freeradius for Cisco CLID AAA Preauthentication ? Any information is welcome. Thank's, Thomas - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: dialupadmin

2005-03-08 Thread Kostas Kalevras
On Mon, 7 Mar 2005, Janakan Rajendran wrote: Hello, I couldn't find out any documentation on how to configure/run dialupadmin on free radius. Would appreciate any links or info on this. You just need to take a look at the doc folder in dialupadmin Thank you, Regards, Janakan Rajendran -- Kostas Kal

Error: rlm_sql (sql)

2005-03-08 Thread Edgars
*Can someone tell me how to fight with the following error?: Error: rlm_sql (sql): failed after re-connect Thank you! Edgars * - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
hm, ok, and that means? Do you any suggestions how to make it work? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread Michael Mitchell
guest01 wrote: Hi I have a problem with Radius-LDAP Authentication for PPTP, the log says: rad_recv: Access-Request packet from host 127.0.0.1:1025, id=61, length=54 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "testuser" NAS-IP-Address = 69.25.27.17

Re: ppp radius-plugin

2005-03-08 Thread guest01
Hi I just upgraded to an actual unstable version, only for testing purposes ... ppp (2.4.3-20041231+1) has already built in this modul! With this package, it works. But now I have authentication problems ... It seems this is a neverending story! ;-) - List info/subscribe/unsubscribe? See http:

rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Hi I have a problem with Radius-LDAP Authentication for PPTP, the log says: rad_recv: Access-Request packet from host 127.0.0.1:1025, id=61, length=54 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "testuser" NAS-IP-Address = 69.25.27.170 NAS-

Re: ppp radius-plugin

2005-03-08 Thread Scott Edwards
On Tue, 08 Mar 2005 08:23:44 +0100, guest01 <[EMAIL PROTECTED]> wrote: > Hi > > I want to use radius authentication for pptp. Therefor I need the > radius.so-plugin, which isn't included > in the Debian default installation of ppp 2.4.2b3. So I compiled it > manually (thank god there was > a makef

Acct-Status-Type and Exec-Program-Wait

2005-03-08 Thread Abdul Lateef
HI, I am using mySQL db to accounting and authuntication. I want to run one perl script when the Accounting will be STOP. to calculate time and rate. But i don't where i should put Exec-Program-Wait to run my script. Already i had run one script to return h323-credit-time value from the the