RE: expr in SQL not working

2005-10-03 Thread Gunther
Gunther wrote: I then compiled and installed 1.0.5 ... with the same result. One correction: Yes, I installed 1.0.5, but I did not update the startup script and therefore I was still using 1.0.4. When I tried to use 1.0.5, the first request caused a segmentation fault. Probably has to be

Re: working rlm_perl example

2005-10-03 Thread ricklim
Quoting Abdul Lateef [EMAIL PROTECTED]: I did the following configuration and it is working well with me. Try it, and let me it is working or not. user file: --- DEFAULT Auth-Type := perl --- radiusd.conf - modules area:

RE: cannot return access accept from proxy to client

2005-10-03 Thread Wilson Lie
Dear Alan, Thanks for your help. Maybe I should ask the question in another way. Host B acted as both proxy/server. for realm A , - proxy to other server for realm B - process locally When the auth-accept is returned to proxy ( Host B) , it will process section [post-auth] in

Control user logins by NAS

2005-10-03 Thread Shane Hart
Hi all, How can I control what groups can authenticate on what nas. I would like to create a batch of users and assign those users to only sucessfully login from a particular nas (or list of nas's) I have freeradius 1.04 and use sql for the user/password combinations Group 30 mins

RE: Proxy of accounting message (Ashwin Gobind)

2005-10-03 Thread Ashwin Gobind
Radiator required a valid Authenticator to be part of the Accouning Request. I am proxying from freeradius to radiator. How can this be resolved ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 30 September 2005 06:12 PM To:

TLS establishment

2005-10-03 Thread Juan Daniel Moreno
Hi, It's me again with my little problem. I have freeRadius 1.0.4 and I work at this moment with PEAP protocol. I have generated a certificate with a 128 byte length key. This is the server's certificate. The certificate is sent by the server, with server hello end to establish the TLS. By my

Re: Control user logins by NAS

2005-10-03 Thread Christian Meutes
Create a group in your sql database, then assign the the users to this group and give the group a check-item. insert into radgroupcheck (GroupName,Attribute,op, Value) values ('your_group_name',NAS-IP-Address','==','ip_address'); If you want that a group can itself successfully authenticate

pam_radius_auth threading issues

2005-10-03 Thread Rich Graves
I've inherited a setup with authentication information on a local freeradius 1.0.5 server and OpenLDAP (with pthreads) configured to authenticate to SASL (v1 interface), which in turn uses PAM, which in turn is configured to check passwords with pam_radius_auth 1.3.16. All of this is on Linux

Re: Proxy of accounting message (Ashwin Gobind)

2005-10-03 Thread Alan DeKok
Ashwin Gobind [EMAIL PROTECTED] wrote: Radiator required a valid Authenticator to be part of the Accouning Request. A Message-Authenticator? I doubt that VERY much. Radiator works with multiple RADIUS implementations, very few of which send Message-Authenticator in Accounting-Request. I

What's Up Gold and Freeradius

2005-10-03 Thread Linda Pagillo
Hi everyone: I'm using Ipswitch's What's Up Gold to monitor my network. I have it set to notify me when certain things in my network go down etc... I have it set to monitor Freeradius. I put an entry into my clients.conf file to give the What's Up Gold computer access to send a request to

Re: What's Up Gold and Freeradius

2005-10-03 Thread Lewis Bergman
Linda Pagillo said: Hi everyone: I'm using Ipswitch's What's Up Gold to monitor my network. I have it set to notify me when certain things in my network go down etc... I have it set to monitor Freeradius. I put an entry into my clients.conf file to give the What's Up Gold computer access to

question on dialup_admin

2005-10-03 Thread radius . unime
le migliori marche a prezzi imbattibili Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=879d=20051003 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: working rlm_perl example

2005-10-03 Thread Thor Spruyt
[EMAIL PROTECTED] wrote: It seems that I missed the user file entry and the Auth-Type Perl { perl } entry in the radiusd.conf file. That shouldn't be necessary, just calling the module in the authorize section should be sufficient. -- Groeten, Regards, Salutations, Thor Spruyt M: +32

Re: What's Up Gold and Freeradius

2005-10-03 Thread Alan DeKok
Linda Pagillo [EMAIL PROTECTED] wrote: Mon Oct 3 10:22:44 2005 : Auth: Login incorrect: = [TEST/L\200\212\3101\215\277\320\350\345\373\351\201\031\215] (from = client old port 0) The shared secret on the RADIUS client is wrong. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: FreeRadius Logging Abilities

2005-10-03 Thread Alan DeKok
Chuck [EMAIL PROTECTED] wrote: What i want to see in radius.log is an entry like this showing the nas-ip host/node name instead of radius client: Fri Sep 30 20:04:37 2005: Auth: Login OK: [EMAIL PROTECTED] (from nas nas5.tempe1.az.us.da.qwest.net/S7428) socket 0 (0 sec) For now, source

Re: rlm_sql (sql): Unsupported Acct-Status-Type = 15

2005-10-03 Thread Alan DeKok
Cameron Beattie [EMAIL PROTECTED] wrote: When I run radiusd -X and watch what happens when I try to pass a record to FreeRadius, I see the following: rlm_sql (sql): Unsupported Acct-Status-Type = 15 modcall[accounting]: module sql returns noop for request 1 The RADIUS client is sending

Re: expr in SQL not working

2005-10-03 Thread Alan DeKok
Gunther [EMAIL PROTECTED] wrote: Anyhow, if I can get within the rad_reply table e.g. `%{expr:10+100)` working to set my Session-Timeout ... I would be quite happy. Post the complete debug log for one Accounting-Request packet. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: cannot return access accept from proxy to client

2005-10-03 Thread Alan DeKok
Wilson Lie [EMAIL PROTECTED] wrote: Q1. Any method such that host B won't goes into [post-auth] when it is receiving result from another server ? I'm not sure what you mean here. Perhaps you could try using complete sentences. I *think* the answer is source code edits. Q2. In case

Re: pam_radius_auth threading issues

2005-10-03 Thread Alan DeKok
Rich Graves [EMAIL PROTECTED] wrote: This setup regularly fails under any sort of concurrency. Threading issues seem one likely reason. pam_radius_auth.c hasn't been touched in a while an d hasn't had the same attention to thread safety as the core freeradius code. The PAM modules really

radgroup mysql question

2005-10-03 Thread John (yt) Hogenmiller
Hi, About two years ago I setup a freeradius server (as well as integration with their accounting system) with a mysql backend. Now, I need to make a change and I'm looking at either rewriting the programs or (hopefully) just making some changes to the configuration/database data. Basically I

Re: FreeRadius Logging Abilities

2005-10-03 Thread Chuck
On Monday 03 October 2005 08:18 pm, Alan DeKok wrote: Chuck [EMAIL PROTECTED] wrote: What i want to see in radius.log is an entry like this showing the nas-ip host/node name instead of radius client: Fri Sep 30 20:04:37 2005: Auth: Login OK: [EMAIL PROTECTED] (from nas

RE: MSCHAPv2, MySQL, Freeradius

2005-10-03 Thread Dan Russell
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, 3 October 2005 2:48 PM To: FreeRadius users mailing list Subject: Re: MSCHAPv2, MySQL, Freeradius Dan Russell [EMAIL PROTECTED] wrote: If I used a third party

RE: expr in SQL not working

2005-10-03 Thread Gunther
Hi Alan, the following is a packet which is not recognizeing the expr value in rad_reply or rad_groupreply: radreply: 5 gunther Session-Timeout = `%{expr: 3600 - 400}` Should be 3200 seconds ... but results into 0 seconds.

Re: MSCHAPv2, MySQL, Freeradius

2005-10-03 Thread Alan DeKok
Dan Russell [EMAIL PROTECTED] wrote: Because you put it into the NT-Password attribute, instead of the User-Password attribute. Okay, I've tried that and not found it to work for me. Sorry, it *does* work. Since you didn't provide any debug logs or config examples, I can only suggest

RE: MSCHAPv2, MySQL, Freeradius

2005-10-03 Thread Dan Russell
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Tuesday, 4 October 2005 3:17 PM To: FreeRadius users mailing list Subject: Re: MSCHAPv2, MySQL, Freeradius Dan Russell [EMAIL PROTECTED] wrote: Because you put it