Re: howto reset rlm_sqlcounter

2005-09-23 Thread Bjørn Mork
Bart van Daal [EMAIL PROTECTED] writes: thanks for your reply Alan, I didn't mean the max-all-sessions value but the actual counter value. If a user has 15600seconds of online time ad is online for e.g. 3600 seconds, where do these 3600 seconds get stored with rlm_sqlcounter? It doesn't.

Re: No appropriate error message (rlm_ldap: could not start TLS Connect error)

2005-09-23 Thread Linus van Geuns
Alan DeKok wrote: Linus van Geuns [EMAIL PROTECTED] wrote: _And_ maybe this mail inspires some of the developers to report the appropriate error message instead of rlm_ldap: could not start TLS Connect error. You just volunteered to write the patch. Please mail it to the list when

Wrong sequence of packets during re-authentication

2005-09-23 Thread Bilal Shahid
Hello all, During my 802.1X Supplicant's re-authentication (using EAP-TTLS) with FreeRADIUS using DLINK switch, I face the following scenario: Sometimes during re-authentication, one of the FreeRADIUS's replies does not reach the DLINK switch. When DLINK's RADIUS timer expires, it re-starts

Maximum size Input-Octets/Output-Octets

2005-09-23 Thread Jonathan De Graeve
Is it 2^32 or (2^32 - 1) I'm programming a radius client and i'm at the gigawords stuff... J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] - Always read the manual for the correct way to do things because the number of

Re: No appropriate error message (rlm_ldap: could not start TLS Connect error)

2005-09-23 Thread Alan DeKok
Linus van Geuns [EMAIL PROTECTED] wrote: Please mail it to the list when it's ready. I'm sorry, but I am bound to another software project atm. That's terrible! When can we expect a fix? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Maximum size Input-Octets/Output-Octets

2005-09-23 Thread Alan DeKok
Jonathan De Graeve [EMAIL PROTECTED] wrote: Is it 2^32 or (2^32 - 1) 2^32 can't be represented in a 32-bit number. It has 33 bits of data... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to deal with this ...

2005-09-23 Thread Ezequiel O. Block
Hi Guys, Using Freeradius for authorization, accounting and ip pools management. By mistake i turned off my NAS, and when this NAS came back online then freeradius began rejecting my users as if they were still connected, should my NAS send some kind of Accounting restart let's start again

RE: Maximum size Input-Octets/Output-Octets

2005-09-23 Thread Jonathan De Graeve
Ok, I also have another question: Freeradius seems to use signed integers for the Acc-Input/Output-Octets Fri Sep 23 16:59:03 2005 Service-Type = Login-User User-Name = jonathan NAS-Identifier = hotspot-2.wlan.imz.be NAS-Port = 0 NAS-Port-Type = Ethernet

Re: How to deal with this ...

2005-09-23 Thread Guy Fraser
On Fri, 2005-23-09 at 11:55 -0300, Ezequiel O. Block wrote: Hi Guys, Using Freeradius for authorization, accounting and ip pools management. By mistake i turned off my NAS, and when this NAS came back online then freeradius began rejecting my users as if they were still connected,

Re: Maximum size Input-Octets/Output-Octets

2005-09-23 Thread Alan DeKok
Jonathan De Graeve [EMAIL PROTECTED] wrote: I also have another question: Freeradius seems to use signed integers for the Acc-Input/Output-Octets Nope. The debug log you posted doesn't show that, and the server source uses unsigned ints. The source really sends unsigned 32bit. Any idea

Authorization how to

2005-09-23 Thread Mahesh S Kudva
Hi I have setup radius to have authentication. How do I authorize users to access specific resources for some and allow full access to others. Regards Thanks Mahesh S Kudva --- Robosoft Technologies - Partners in Product

RE: Maximum size Input-Octets/Output-Octets

2005-09-23 Thread Jonathan De Graeve
What radacct are you talking about? The Acct-Input-Octets stops at 2G because the RFC dictates that it's a 32-bit integer. That's why the Acct-Input-Gigawords attribute was defined. It goes past 2G. I'm talking about the detail file from freeradius. This is what I found in RFC2869 5.1.

Re: How to deal with this ...

2005-09-23 Thread Ezequiel O. Block
Guy Fraser wrote: On Fri, 2005-23-09 at 11:55 -0300, Ezequiel O. Block wrote: Hi Guys, Using Freeradius for authorization, accounting and ip pools management. By mistake i turned off my NAS, and when this NAS came back online then freeradius began rejecting my users as if they were still

Cant make in openbsd3.7 freeradius 1.0.5

2005-09-23 Thread Lou Goddard
Greetings, Is anyone else having issues compiling freeradius under openbsd? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: No appropriate error message (rlm_ldap: could not start TLS Connect error)

2005-09-23 Thread Linus van Geuns
Alan DeKok wrote: Linus van Geuns [EMAIL PROTECTED] wrote: Please mail it to the list when it's ready. I'm sorry, but I am bound to another software project atm. That's terrible! When can we expect a fix? I'm working on a daemon that aims to implement PXE 2.1 and to be easily

Freeradius Ldap

2005-09-23 Thread Cris Boisvert
I'm setting up freeradius to talk to a Ipswitch Imail server for authetication. Just needs to do the basic User Pass... Ok. LDAP Server is 192.168.77.6 (this is all private testing) (the imail server) Domain on the server is pork.com A snippet of the config.

Re: No appropriate error message (rlm_ldap: could not start TLS Connect error)

2005-09-23 Thread Alan DeKok
Linus van Geuns [EMAIL PROTECTED] wrote: Did I forget to tell you, I'm very sorry for intending to help others and mentioning that the error message is not appropriate? It was my fault, I should not even think of saving other peoples' time without getting payed for it. The issue was that

Re: Cant make in openbsd3.7 freeradius 1.0.5

2005-09-23 Thread Alan DeKok
Lou Goddard [EMAIL PROTECTED] wrote: Is anyone else having issues compiling freeradius under openbsd? Can you say what the errors are? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeRadius with LDAP for MSCHAP mac auth

2005-09-23 Thread Seferovic Edvin
Hello everyone... Ive set up a freeradius server with LDAP backend for MSCHAP, but now I have to set up a mac based auth on the same server also with the same LDAP backend ( but the mac info is found in another subtree ). So I have made two ldap instances under modules including MSCHAP...

Re: No appropriate error message (rlm_ldap: could not start TLS Connect error)

2005-09-23 Thread Linus van Geuns
Alan DeKok wrote: Linus van Geuns [EMAIL PROTECTED] wrote: Did I forget to tell you, I'm very sorry for intending to help others and mentioning that the error message is not appropriate? It was my fault, I should not even think of saving other peoples' time without getting payed for it.

Re: Freeradius Ldap

2005-09-23 Thread Linus van Geuns
Cris Boisvert wrote: I'm setting up freeradius to talk to a Ipswitch Imail server for authetication. Just needs to do the basic User Pass... Ok. [..] A snippet of the config. --- ldap { server = 192.168.77.6

Re: No appropriate error message (rlm_ldap: could not start TLS Connect error)

2005-09-23 Thread Alan DeKok
Linus van Geuns [EMAIL PROTECTED] wrote: 3.) Did I claim someone _has_ to fix it, because I don't 'like' it? Pretty much, yes. And you then got upset when I said you could fix it. 4.) I think, the error message from freeradius does obviously contain no useful degub information. laughs

Installing FR 1.05

2005-09-23 Thread Bill Neely
Am installing Free Radius 1.0.5 on Free BSD 5.4 OS Installation went alright, but when I fire it up, it fails to load the sql module. Here is the radiusd -x string: radiusd -xStarting - reading configuration files ...Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you

Usage of pam_radius_auth

2005-09-23 Thread Nagaraj Venkatapuram
All, Has anybody had the experience using pam_radius_auth for authenticating services like http/https, ssh, telnet. I tried running the sample application but authentication failed. my configuration is like this. /etc/raddb/server # server[:port] shared_secret timeout (s) # 127.0.0.1