Problems with pptp / freeradius / ppp / pam...

2005-04-14 Thread Bob Mancker
Ok, I have the following files available here: http://xhost.ath.cx:81/list/ [ ] dictionary 15-Apr-2005 02:07 7.5K [ ] dictionary.microsoft14-Apr-2005 23:07 2.6K [ ] options.pptpd 14-Apr-2005 23:07 178 [ ] radiusd.conf14-Apr-2005 23:07 56K

Re: rlm_tcl module

2005-04-14 Thread Alexei Chetroi
On Thu, Apr 14, 2005 at 12:52:32PM -0400, Alan DeKok wrote: > Date: Thu, 14 Apr 2005 12:52:32 -0400 > From: Alan DeKok <[EMAIL PROTECTED]> > To: freeradius-users@lists.freeradius.org > Subject: Re: rlm_tcl module > > Alexei Chetroi <[EMAIL PROTECTED]> wrote: > > Is there rlm_tcl module availabl

Attribute "User-Password" is required for authentication.

2005-04-14 Thread Bob Mancker
I am currently working on a vpn server, and I use pptpd with freeradius and trying to get pam authentication working. I want to setup freeradius with pam authentication because I want to limit simulatenous logins per user to 1. The two odd things I notice are this in /var/log/messages: Apr 15 11:12

Regarding pppd with pam authentication and pptpd

2005-04-14 Thread Bob Mancker
I am currently working on a vpn server, and I use pptpd with pppd and trying to get pam working. I want to setup pam authentication because I want to limit simulatenous logins per user to 1. [root box pam.d]# pptpd --version Poptop v1.2.1 pppd version 2.4.3 /etc/pam.d/ppp contains: #%PAM-1.0 #aut

Strange problems

2005-04-14 Thread Alex
Hi guys thanks for any help, i got a lot of useful information from this list. I will try to explain my problem. i have 2 linux servers : 1- server Red Hat Linux release 9 ser + freeradius 0.9.3 + radius client 2-server Red Hat Enterprise Linux AS release 3 ser + freeradius 1.2 + radius client 4

Re: SNMP with net-snmp

2005-04-14 Thread Kevin Bonner
On Thursday 14 April 2005 12:05, Hoppál Felicián wrote: > On Thu, 14 Apr 2005, Kevin Bonner wrote: > > Do you have the net-snmp-devel RPM installed? > > yes Any messages during the build about snmp? Check the config.log file, or the output from configure. Your debug messages not showing up migh

Re: Freeradius with postgresql (Login incorrect)

2005-04-14 Thread Thor Spruyt
Title: Freeradius with postgresql (Login incorrect) Please send mail in PLAIN TEXT! I don't know where YOU see an error message, but I don't see any. I would suggest turning SQL traces on (see postgresql.conf)   --Groeten, Regards, Salutations,   Thor SpruytM: +32 (0)475 67 22 65E: [EMAIL PROT

Re: Freeradius with postgresql (Login incorrect)

2005-04-14 Thread Alan DeKok
"Brian Gao" <[EMAIL PROTECTED]> wrote: > Login incorrect: [radius/radius] (from client 47.135.123.0 port 1812) So... the password is wrong. > This looks to me like the connection is established already, the > error that is being thrown looks like it is coming from the > PostgreSQL. No. It's

Re: Problem with authenticate module, Had sent TLV failure and MSCHAP-response

2005-04-14 Thread Alan DeKok
=?ISO-8859-1?Q?F=E9licien_TALLA?= <[EMAIL PROTECTED]> wrote: > I tring to set up freeradius with mysql using EAP PEAP on FreeBSD. I > have the message "Had sent TLV failure" I noticed there is already a > subject concerning my problem but it didn't help. Read the REST of the debug log. It's tel

Problem with authenticate module, Had sent TLV failure and MSCHAP-response

2005-04-14 Thread Félicien TALLA
Message-Authenticator = 0x1e1506be92e65107c9d2c45dca2e8e1f Processing the authorize section of radiusd.conf modcall: entering group authorize for request 7 modcall[authorize]: module "preprocess" returns ok for request 7 radius_xlat: '/var/log/radacct/192.168.0.253/auth-detail-200504

Freeradius with postgresql (Login incorrect)

2005-04-14 Thread Brian Gao
Title: Freeradius with postgresql (Login incorrect) Hi, all I am trying to configure postgresql 7.4 as a backend of freeradius server. After I run " radtest radius radius 47.135.23.217 1812 testing123 "The debug file shows: rad_recv: Access-Request packet from host 47.135.123.217:32782,

Re: RADIUS attributes

2005-04-14 Thread Alan DeKok
vicky <[EMAIL PROTECTED]> wrote: > You are not the one confused, it is more likely that I'm speaking > gibberish. Describing exactly what you see, and what you want would help a lot. If you describe your problem in only one sentence, then most people have no idea what you mean. And using phrase

Re: Authentication via Scripting

2005-04-14 Thread Alan DeKok
Roman Medina-Heigl Hernandez <[EMAIL PROTECTED]> wrote: > I've been testing Exec-Program(-Wait) but I don't get it to work. My > goal is to authenticate via external perl script (I want to test this > method first, and then I'll try the rlm_perl module). ... > DEFAULT Exec-Program-Wait = > "/usr/lo

Re: proxy reply attributes

2005-04-14 Thread Alan DeKok
Tiago Fernandes <[EMAIL PROTECTED]> wrote: > what i want to know, is if it's possible to configure the freeradius in > que "proxied servers" to only send "necessary" attributes in replies, > even if que attr_filter is configured in the server that is going do > send back only allowed attributes.

Re: rlm_tcl module

2005-04-14 Thread Alan DeKok
Alexei Chetroi <[EMAIL PROTECTED]> wrote: > Is there rlm_tcl module available anywhere? No. I'm not sure I'd want to include one, even if it existed. Try rlm_perl or rlm_python. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authentication problem with ntlm_auth

2005-04-14 Thread Alan DeKok
Sylvain Clerc <[EMAIL PROTECTED]> wrote: > My real problem is here. I think the username and the password are ok > for Active Directory ( Exec-Program output: NT_STATUS_OK: Success > (0x0) ) but I don't understand why the rlm_mschap expects a NT_KEY. It is required for the module to finish the M

Re: SNMP with net-snmp

2005-04-14 Thread Hoppál Felicián
On Thu, 14 Apr 2005, Kevin Bonner wrote: Do you have the net-snmp-devel RPM installed? yes - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SNMP with net-snmp

2005-04-14 Thread Kevin Bonner
On Thursday 14 April 2005 09:33, Hoppál Felicián wrote: > I've just compiled freeradius (--with-snmp=yes), and i'm trying to enable > SNMP support (Red Hat AS4). It compiles without any errors. Do you have the net-snmp-devel RPM installed? Kevin Bonner pgplztesgkwc9.pgp Description: PGP signatu

RE: mssql

2005-04-14 Thread Lucas Aimaretto
> > rlm_sql (sql): Driver rlm_sql_unixodbc (module > > rlm_sql_unixodbc) loaded and linked > > > > rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:1433/radius > > You have that use the name of de pc no the ip > > rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:1433/radius Th

Re: Post-Proxy-Type + rlm_rewrite + rlm_ippool does not work

2005-04-14 Thread Pasi Kärkkäinen
On Thu, Apr 14, 2005 at 05:19:46PM +0300, Pasi Kärkkäinen wrote: > On Tue, Apr 12, 2005 at 06:07:02PM -0400, Alan DeKok wrote: > > Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= <[EMAIL PROTECTED]> wrote: > > > If I'm trying to do something that won't work, please tell me.. :) > > > > I have no idea why y

Re: Post-Proxy-Type + rlm_rewrite + rlm_ippool does not work

2005-04-14 Thread Pasi Kärkkäinen
On Tue, Apr 12, 2005 at 06:07:02PM -0400, Alan DeKok wrote: > Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= <[EMAIL PROTECTED]> wrote: > > If I'm trying to do something that won't work, please tell me.. :) > > I have no idea why you're using attr_rewrite to search for nothing, > and add Pool-Name. > >

SNMP with net-snmp

2005-04-14 Thread Hoppál Felicián
Hello, I'm new to freeradius (and this list) but not to radius servers. I've just compiled freeradius (--with-snmp=yes), and i'm trying to enable SNMP support (Red Hat AS4). It compiles without any errors. my snmpd.conf: smuxpeer .1.3.6.1.4.1.3317.1.3.1 secret raddb/radiusd.conf: snmp = yes $INCL

Re: Determine modem utilization?

2005-04-14 Thread Matthew Crocker
Why don't use use MRTG/RRDTOOL and poll the modem pool with SNMP? (www.mrtg.org, www.rrdtool.org) -Matt On Apr 14, 2005, at 8:19 AM, Carl Davis wrote: Is there a program that will analyze out mysql accounting logs and give us an idea if we are peaking out anywhere and need to consider order anoth

Determine modem utilization?

2005-04-14 Thread Carl Davis
Is there a program that will analyze out mysql accounting logs and give us an idea if we are peaking out anywhere and need to consider order another 24 channels? Carl - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS attributes

2005-04-14 Thread vicky
Exactly, what I meant by client is NAS not PC. You are not the one confused, it is more likely that I'm speaking gibberish. If my server receives the (all!) attributes from any NAS in the request then problem solved. But, the request piece in the debugger is so small, I had a doubt that I could

Re: RADIUS attributes

2005-04-14 Thread Michael Mitchell
Maybe I'm just really confused, but the attributes that the client has "set" are the ones that the server receives in the request... Maybe you need to define what you mean by client... A "client" is something that sends RADIUS requests to a radius server, eg a Network Access Server (NAS) of some

Re: RADIUS attributes

2005-04-14 Thread vicky
Mitchell (and all the rest), Thanks for your answer but what I meant was : Of all freeRADIUS attributes that exists, I want to know exactly witch once the "client" (the one on the other side who is trying to connect to my server) has set (configured) and to which value. Is this feasible? Thanks

Re: Cisco WDS, WLSE and FreeRADIUS (SOLUTION!)

2005-04-14 Thread Martin Hamilton
On Thu, Apr 14, 2005 at 12:23:04AM +0200, Holger Steppke wrote: | do you know if this is fixed in the wlse in the meantime ? I'm running 2.9 on the eval unit, but 2.9.1a doesn't mention anything like this in the release notes that I could see. Raise a TAC case if it's still not working for you..

RE: Accounting without authorization?

2005-04-14 Thread Mitchell, Michael J
The radius server can process accounting without processing authentication (and vice versa), there is nothing wrong with that... Simplistically, if you want to use the Simulatenous-Use features built into freeRADIUS, then yes the server must process RADIUS authentication and accounting streams. B

Re: Authentication via Scripting

2005-04-14 Thread Roman Medina-Heigl Hernandez
Hello, I've been testing Exec-Program(-Wait) but I don't get it to work. My goal is to authenticate via external perl script (I want to test this method first, and then I'll try the rlm_perl module). * My "users" file: pepeAuth-Type:= Local, User-Password == "manolo" DEFAULT Exec-Program-Wait

Accounting without authorization?

2005-04-14 Thread Bram
e accounting section of radiusd.conf modcall: entering group accounting for request 3 radius_xlat: '/usr/local/var/log/radius/radacct/127.0.0.1/detail-20050414' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.

RE: RADIUS attributes

2005-04-14 Thread Mitchell, Michael J
>Hi Alan, >Thanks for your answer but that is unfortunately not what I >had hoped for. What I'm actually looking for is a way to >retrieve the configured attributes of some one that is trying >to connect to my freeRADIUS server. Is that possible? Configured where? Do you mean you want to see

Re: proxy reply attributes

2005-04-14 Thread Tiago Fernandes
On Wed, 2005-04-13 at 12:51 -0400, Alan DeKok wrote: > Tiago Fernandes <[EMAIL PROTECTED]> wrote: > > I know that it's possible in freeradius to set attributes to a default > > value when a local freeradius is proxying an auth request (attr_filter). > > Ok... > > > But what i want to do, is t

to match attributes in a request packet

2005-04-14 Thread Neptune Neptunchik
Hello all! For authentification VoIP users I want to use RRQ and ARQ messages auth via Freeradius via [RadAliasAuth] GnuGK feature. For RRQ auth I want to use Cisco-AVPair check attribute, for ARQ auth I want to use Calling-Station-Id check attribute. radcheck table: ++--+-

Issue with Cisco and CHAP PW

2005-04-14 Thread Christian Hahn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list, I have a problem with a Cisco and authentication using CHAP passwords. I use a very basic freeradius config with only one server (no realm setup) and all the stuff saved in the users file. I've double checked and yes, the user has an entry in t

Authentication problem through radius.

2005-04-14 Thread Alex
Hi all. Hi Alan. I am trying to authenticate ser users through freeradius. I installed freeradius-1.0.2 radiusclient-4.8 It's seems like i don't sending the requests to radius,( I don't see anything on the radius logs). I checked the config files, it's looks correct. The goal is to authenticate u

Re: RADIUS attributes

2005-04-14 Thread vicky
Hi Alan, Thanks for your answer but that is unfortunately not what I had hoped for. What I'm actually looking for is a way to retrieve the configured attributes of some one that is trying to connect to my freeRADIUS server. Is that possible? Best, Vicky Alan DeKok wrote: vicky <[EMAIL PROTECTE