Forcing authorization access-reject depending on attribute

Hi there. I am using freeradius to authenticate users to a ChilliSpot wireless hotspot. It's backended by a SQL database and communicating using stored procedures. My problem is as follows. On authentication, the user enters their username and password. This calls a stored procedure which

Postgresql+freeradius configuration

Good morning! I have successfully configured freeradius server with using postgresql database to storage users which i want to authenticate. when i put it in debug mode to test he works well. But when I run it as deamon the server radius don't see the postgresql server. In the radius's log

Freeradius and Postgresql configuration

Good morning! I have successfully configured freeradius server with using postgresql database to storage users which i want to authenticate. when i put it in debug mode to test he works well. But when I run it as deamon the server radius don't see the postgresql server. In the radius's log

Re: Installing FR 1.05

Hi, Install mysql (client or server) first.. then recompile the freeradius it will build with mysql module.. make sure you have the mysql development libraries and includes in place, eg mysql-devel package alan - List info/subscribe/unsubscribe? See

fixed - patch included: custom variable in config files

hi - below is a patch for a small change to conffile.c which enabled me to expand variables in $INCLUDED files, which are defined in the main radiusd.conf or earlier included files. *** static CONF_SECTION *cf_section_read(con *** 669,675 DEBUG2(

radutmp

hi :: Is radutmp attributes can added ? What I need to do if I want called-station-id attribute to be display when run radwho -R ? Thank for any reply. Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Cant make in openbsd3.7 freeradius 1.0.5

Alan, Here are the errors. gmake[5]: Leaving directory `/home/lou/freeradius-1.0.5/src/modules/rlm_files' Making static dynamic in rlm_ippool... gmake[5]: Entering directory `/home/lou/freeradius-1.0.5/src/modules/rlm_ippool' gmake[5]: Nothing to be done for `static'. gmake[5]: Nothing to be

Re: Postgresql+freeradius configuration

[EMAIL PROTECTED] wrote: Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked Info: rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:/radiusdb Error: rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server [EMAIL PROTECTED]:radiusdb Error:

Re: Forcing authorization access-reject depending on attribute

Mike Chamberlain wrote: Hi there. I am using freeradius to authenticate users to a ChilliSpot wireless hotspot. It's backended by a SQL database and communicating using stored procedures. My problem is as follows. On authentication, the user enters their username and password. This calls a

Re: How to deal with this ...

On Fri, 2005-23-09 at 15:01 -0300, Ezequiel O. Block wrote: Guy Fraser wrote: On Fri, 2005-23-09 at 11:55 -0300, Ezequiel O. Block wrote: Hi Guys, Using Freeradius for authorization, accounting and ip pools management. By mistake i turned off my NAS, and when this NAS came back

Re: Freeradius and Postgresql configuration

On Mon, 2005-26-09 at 11:22 +0100, [EMAIL PROTECTED] wrote: Good morning! I have successfully configured freeradius server with using postgresql database to storage users which i want to authenticate. when i put it in debug mode to test he works well. But when I run it as deamon the

PEAP Protocol

Hi everyone, I have a little problem with freeradius 1.0.4. It's maybe something I don't understand but I really need help. With PEAP protocol, I have a user test with its own password. The first 8 packets are fine but as I send the 9th, radius says Length in packet header doesn't match actual

RE: Maximum size Input-Octets/Output-Octets

On Fri, 2005-23-09 at 19:42 +0200, Jonathan De Graeve wrote: What radacct are you talking about? The Acct-Input-Octets stops at 2G because the RFC dictates that it's a 32-bit integer. That's why the Acct-Input-Gigawords attribute was defined. It goes past 2G. I'm talking about the

RE: Maximum size Input-Octets/Output-Octets

So is it 2147483648 or 2147483647? J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Guy Fraser Verzonden: maandag 26 september 2005 17:45

RE: Maximum size Input-Octets/Output-Octets

2147483647 it is :))) -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Jonathan De Graeve Verzonden: maandag 26 september 2005 17:49 Aan:

Re: Wrong sequence of packets during re-authentication

Bilal Shahid [EMAIL PROTECTED] wrote: Can someone please help me this? I am clueless as how to solve this problem. As always, the RADIUS conversations are driven by the client. Given the same input packets, the server behaves the same. So if theserver is doing two different things, it's

Re: Forcing authorization access-reject depending on attribute

Mike Chamberlain [EMAIL PROTECTED] wrote: The problem arises on the authorization. Even though the user may have supplied the correct username and password, they may not have enough credit to use the service. The problem is that there is no radius attribute that I can pass back to the

Re: radutmp

TK Lew [EMAIL PROTECTED] wrote: Is radutmp attributes can added ? What I need to do if I want called-station-id attribute to be display when run radwho -R ? radutmp doesn't do that. You will need to write your own version of radutmp if you want to store that information. Alan DeKok. -

Re: Cant make in openbsd3.7 freeradius 1.0.5

Lou Goddard [EMAIL PROTECTED] wrote: -I../../include -I/usr/include/et -c rlm_krb5.c -o rlm_krb5.o rlm_krb5.c:39:18: krb5.h: No such file or directory If you don't need rlm_krb5, just delete the whole directory. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: PEAP Protocol

Juan Daniel Moreno [EMAIL PROTECTED] wrote: With PEAP protocol, I have a user test with its own password. The first 8 packets are fine but as I send the 9th, radius says Length in packet header doesn't match actual length. Does it means that the length in the first packet (when I send a two

Dictionary include error.

I am trying to include the dictionary.starent and getting the following error: Errors reading dictionary: dict_init: /etc/freeradius/dictionary.starent[41]: dict_addattr: ATTRIBUTE has invalid number (larger than 255). Any ideas on what would cause this? Here is the line in my dictionary file:

Freeradius LDAP

Cris Boisvert wrote: I'm setting up freeradius to talk to a Ipswitch Imail server for authetication. Just needs to do the basic User Pass... Ok. [..] A snippet of the config. --- ldap { server = 192.168.77.6

LDAP Radius -x help...

Running Freeradius on fedora core 4 When I use Radiusd -X I can authenticate via the ldap server I have running.. But when I start radius normally service radiusd start it starts but the error log says It can't talk to The ldap server.. Ideas? Why would it working in debug but not normally?

RE: Maximum size Input-Octets/Output-Octets

On Mon, 2005-26-09 at 17:49 +0200, Jonathan De Graeve wrote: So is it 2147483648 or 2147483647? 2147483648 / 2147483648 = 1 2147483648 mod 2147483648 = 0 The range is 0 through 2147483647. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Dictionary include error.

Joseph [EMAIL PROTECTED] wrote: I am trying to include the dictionary.starent and getting the following error: Errors reading dictionary: dict_init: /etc/freeradius/dictionary.starent[41]: dict_addattr: ATTRIBUTE has invalid number (larger than 255). The Starent dictionaries aren't

problem with MD5 EAP Radius

hi all, I wanted to make an AP with MD5 eap auths on the linux kernel 2.4.20,hostapd 0.4.2,madwifi 20050629,chip 5212.I have execessed in the wpa-psk mode.But when I tried the MD5 and Radius,the user can't pass the authorization.I didn't know where is the mistake.I hoped to find the same cases

separate accounting to two modules based on NAS-IP-Address

Dear Sirs, how can I organize radiusd.conf in order to put accounting coming from nas1 to one module and from nas2 to another module ? Cheers, Ilia Chipitsine - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to run CA.all script to generate EAP-TLS certifiate

Hi,all: I am new to freeradius world. I am trying to setup EAP-TLS using freeradius server. Would you pls tell me which cisco access point is preferred for the EAP-TLS setup? I have installed openssl-0.9.8 and freeradius-1.0.5 on Redhat 9.0.I tried several times to generate certificate by

Re: Bus error - core dumped on freeradius 1.0.5

So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ?? --haizam - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Friday, September 23, 2005 02:29 Subject: Re: Bus error - core dumped on

Re: problem with MD5 EAP Radius

dongyining [EMAIL PROTECTED] wrote: I wanted to make an AP with MD5 eap auths on the linux kernel 2.4.20,hostapd 0.4.2,madwifi 20050629,chip 5212.I have execessed in the wpa-psk mode.But when I tried the MD5 and Radius,the user can't pass the authorization.I didn't know where is the mistake.I

Re: Bus error - core dumped on freeradius 1.0.5

Rohaizam Abu Bakar [EMAIL PROTECTED] wrote: So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ?? For MySQL, perhaps. Or, find out what's causing the problem in FreeBSD 4.x, and fix it. It doesn't happen on other platforms, so I suspect it's an issue specific to FreeBSD 4.x.