Re: rlm_tcl module

2005-04-15 Thread Alexei Chetroi
On Thu, Apr 14, 2005 at 12:52:32PM -0400, Alan DeKok wrote: Date: Thu, 14 Apr 2005 12:52:32 -0400 From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: Re: rlm_tcl module Alexei Chetroi [EMAIL PROTECTED] wrote: Is there rlm_tcl module available anywhere?

Problems with pptp / freeradius / ppp / pam...

2005-04-15 Thread Bob Mancker
Ok, I have the following files available here: http://xhost.ath.cx:81/list/ [ ] dictionary 15-Apr-2005 02:07 7.5K [ ] dictionary.microsoft14-Apr-2005 23:07 2.6K [ ] options.pptpd 14-Apr-2005 23:07 178 [ ] radiusd.conf14-Apr-2005 23:07 56K

Re: Problems with pptp / freeradius / ppp / pam...

2005-04-15 Thread Stefan Winter
Hello! I added a user test via adduser test. Then I changed the password to testpass. Ok, cool, now let me try it from my windows xp box and the built in vpn client.. doesn't work: In radiusd -X I get: Processing the authenticate section of radiusd.conf modcall: entering group

issues with proxy to same ip address but different port

2005-04-15 Thread Tariq Rashid
is there an issue with freeradius proxying to a home radius server which is in fact on the same IP address that the proxy is listening on, but on a different port. that is the proxy and backend servers are on the same hardware listening on the same interface. the proxy (using a realm in

Re: Attribute User-Password is required for authentication.

2005-04-15 Thread Alexandre Coninx
On Thu, Apr 14, 2005, Bob Mancker wrote: I am currently working on a vpn server, and I use pptpd with freeradius and trying to get pam authentication working. I want to setup freeradius with pam authentication because I want to limit simulatenous logins per user to 1. The two odd things I

TLS not tunneled inside TLS

2005-04-15 Thread Riccardo Veraldi
Hello, I am using Secure W2 trying to use TTLS. Everything went fine and smooth using TLS with XP default supplicant. I configured Secure W2 properly and TTLS has problems. here is my tls and ttls configuration: eap { default_eap_type = ttls timer_expire =

Re: [Serusers] Strange problems

2005-04-15 Thread Alex
sorry for the question, but i have ser 0.8.14 freeradius-1.0.2 it's require radiusclient-ng-5.0 Thanks for help. On 4/14/05, Klaus Darilion [EMAIL PROTECTED] wrote: http://mail.iptel.org/pipermail/serdev/2005-March/004040.html Klaus Darilion wrote: AFAIK new ser requires new

Radius performance

2005-04-15 Thread Emil Wilmanski
I'm runing freeradius 1.0.2 (on Debian) with chillispot 1.0rc3 (on WRT54G) and I have some performance question. To help authorize users I use my own scripts with sql module: 1) to set sql_user_name (it map username from database table) sql_user_name = %{exec:/etc/freeradius/scripts/UserRealName}

vlan attribute through proxy

2005-04-15 Thread bmathieu
hi i have two questions on vlan attribute with proxy we are proxying request with realms and the remote radius server send vlan attribute stored in an openldap first : how can we prevent this server to give vlan attribute it is not allowed to use ( we don t manager this remote server ) second

The usual: Could not find clear text password for user .....

2005-04-15 Thread Simon.Mullis
Hello All, Just a bit of a preamble... We have a Cisco NAS device sending CHAP auth requests from DSL devices to our radius server. We currently auth fine using Steel-Belted Radius but wish to migrate to FreeRadius. I cannot for the life of me successfully authenticate the devices using

Re: SNMP with net-snmp

2005-04-15 Thread Hoppál Felicián
On Thu, 14 Apr 2005, Kevin Bonner wrote: You're using Net-SNMP in RHAS4. FreeRADIUS 1.0.2 doesn't have the net-snmp compatibility fix. You can find the patch at http://lists.freeradius.org/archives/freeradius-users/2004/10/frm00210.html Thanks Kevin, it worked. After applying the patch the snmp

test new installation

2005-04-15 Thread Alex
hi guys , I installed radiusclient-ng-0.5.0 with freeradius-1.0.2 i trying to test the setup by running this command: radclient -f digest localhost auth testing123 I receiving this error: radclient:No token read where we expected an attribute name any help will be appreciated. - List

ERROR: No Digest-Nonce Cannot perform Digest authentication

2005-04-15 Thread Alex
I have installed freeradius 1.0.2 and radiusclient-ng.0.5.0 after the installation i am trying to run the test : radtest test test localhost 1649 testing123 User-Name = test User-Password = test NAS-IP-Address = MAINSIP NAS-Port = 1649 rad_recv: Access-Reject packet

RE: The usual: Could not find clear text password for user .....

2005-04-15 Thread Simon.Mullis
Many thanks Scott... H - Good point about PAP / CHAP. I'll look into it. I thought that my user config was wrong or not being associated with the incoming user request correctly. Does the config look OK to you? Yes - plaintext secret key. validate makes me again think it's not reached

Re: rlm_tcl module

2005-04-15 Thread Alan DeKok
Alexei Chetroi [EMAIL PROTECTED] wrote: Any reasons to not include? beside that rlm_perl and rlm_python exists. Unless you're careful, TCL has memory leaks. That's a terrible thing to do to a RADIUS server. Memory leaks don't matter when you're running TCL as a separate process. When

Re: Problems with pptp / freeradius / ppp / pam...

2005-04-15 Thread Alan DeKok
Bob Mancker [EMAIL PROTECTED] wrote: Ok, cool, now let me try it from my windows xp box and the built in vpn client.. doesn't work: In radiusd -X I get: Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_unix: Attribute User-Password

Re: issues with proxy to same ip address but different port

2005-04-15 Thread Alan DeKok
Tariq Rashid [EMAIL PROTECTED] wrote: is there an issue with freeradius proxying to a home radius server which is in fact on the same IP address that the proxy is listening on, but on a different port. I do it all of the time. It's one of my testing scenarios. tcpdump shows no traffic on

RE: The usual: Could not find clear text password for user .....

2005-04-15 Thread Simon.Mullis
Thanks Alan... You're right - the user entry is not on the named lines I'll keep looking. Cheers SM -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: 15 April 2005 17:33 To: freeradius-users@lists.freeradius.org Subject: Re: The

new installation of freeradius.1.0.2

2005-04-15 Thread Alex
Hi all Hi Alan , i have hard time to get freeradius work properly with authentication of ser/sip users. i have new installation of freeradius-1.0.2 radiusclient-ng.0.5.0 i trying to check the installation and i am receiving this error: radclient -f digest localhost 1645 auth testing123

Re: ERROR: No Digest-Nonce Cannot perform Digest authentication

2005-04-15 Thread Alan DeKok
Alex [EMAIL PROTECTED] wrote: I have file digest: --- User-Name = test, Digest-Response = 631d6d73147add2f9e437f59bbc3aeb7... ... in the debug of the radius server i receive that error: --

Re: ERROR: No Digest-Nonce Cannot perform Digest authentication

2005-04-15 Thread Alex
Alan thanks for fast replies. I installed again freeradius-0.9.3 radiusclient -4.8 i have created file digest: inside this file i have : User-Name = test, Digest-Response = 631d6d73147add2f9e437f59bbc3aeb7, Digest-Realm = testrealm, Digest-Nonce = 1234abcd , Digest-Method = INVITE, Digest-URI

Re: ERROR: No Digest-Nonce Cannot perform Digest authentication

2005-04-15 Thread Alan DeKok
Alex [EMAIL PROTECTED] wrote: inside raddb/users i have : test Auth-Type := Digest, User-Password == test Reply-Message = Hello, test with digest DO NOT SET Auth-Type. I am running just installation test: radclient -f digest localhost 1645 auth testing123 radclient:No token read

Re: ERROR: No Digest-Nonce Cannot perform Digest authentication

2005-04-15 Thread Alex
Yes Alan i am using the same dictionary files which coming with the installation, i also add to the end of the dictionary file dictionary.sip file and another dictionary.ser file which include another attributes. totaly i have original dictionary + dictionary.sip + dictionary.ser btw i have the

Re: ERROR: No Digest-Nonce Cannot perform Digest authentication

2005-04-15 Thread Alex
Alan when i am running radclient -f digest localhost auth testing123 this is the debug from the radius. rad_recv: Access-Request packet from host 127.0.0.1:32843, id=101, length=140 User-Name = test Digest-Response = 631d6d73147add2f9e437f59bbc3aeb7 Digest-Attributes =

accounting file

2005-04-15 Thread Jacques VUVANT
Hi Someone can tell me if thre is a accounting file to registrer all sessions ? Thanks Jacques - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

CISCO-AVPairs

2005-04-15 Thread Alex Vishnev
All, Forgive me if this has been addressed before. I searched the archive and only found similar questions, but no answers so here it goes again. I would like to parse CISCO-AVPairs and insert them into MySql. I am getting voip vsa from cisco and would like to append them into my sql table. I

EAP-TLS Certificate Failure with CMC Emulation Engine

2005-04-15 Thread Adam Gibson
Background: I am utilizing CMC’s Emulation Engine to perform multi-client testing on a wireless access point, which is configured for WPA 802.1x. I am running EAP-TLS on FreeRADIUS 1.0.0-5 and OpenSSL 0.9.7d-25 on SuSE Linux Professional 9.2. Before testing the access point with the Emulation

Re: EAP-TLS Certificate Failure with CMC Emulation Engine

2005-04-15 Thread Luis Daniel Lucio Quiroz
Did you sign your certificates with OID extensions for user and server use? Le Vendredi 15 Avril 2005 20:14, Adam Gibson a écrit : Background: I am utilizing CMC’s Emulation Engine to perform multi-client testing on a wireless access point, which is configured for WPA 802.1x. I am running

Re: Problems with pptp / freeradius / ppp / pam...

2005-04-15 Thread Bob Mancker
Ok, here is my output from radiusd -X when I try to connect to it from win xp client: rad_recv: Access-Request packet from host 127.0.0.1:32849, id=100, length=145 Service-Type = Framed-User Framed-Protocol = PPP User-Name = test MS-CHAP-Challenge =