Re: add a realm to a User-Name if no realm

2005-10-05 Thread Lewis Bergman
I wasn't quite specific enough on my post. The NULL match in the realm module would probably work for the "no realm at all" situation. I was hoping to look for a specific %{NAS-Identifier} and based on that AND the fact that a user does not have an "@" in the username, add the realm. -- Lewis Be

add a realm to a User-Name if no realm

2005-10-05 Thread Lewis Bergman
I am in need of rewriting a username in a request to include a domain. Basically, if a user comes in as "user" add the realm "@dom.com" so it is checked as "[EMAIL PROTECTED]". I found this in the archives which seems to be close. http://www.mail-archive.com/freeradius-users@lists.freeradius.org/ms

Re: Call-Check

2005-10-05 Thread Alan DeKok
Ivo <[EMAIL PROTECTED]> wrote: > So, how can I tell FR not to look for password and to "accept call" from > some phone number if that number is in some sql table? Auth-Type := Accept Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Call-Check

2005-10-05 Thread Ivo
On Sri, 2005-10-05 at 17:28 -0300, Paolo Rotela wrote: > so Cisco normally > lets you put the DNIS or ANI or something in the UserName field and > password). > The only two details is this and the fact that from FR's point of view, the > NAS will be doing Auth twice, one for the "preauth" fase o

Re: Which Operating System is best for freeRADIUS

2005-10-05 Thread Dusty Doris
Building my FR server, I have the choice of a number of operating system for my FreeRADIUS server. Anybody with a suggestion which operating system is best suited for FR? I like to run FR on a VPS (virtual private server) using one of the following OS: - FreeBSD 4.9 (jail) - FreeBSD 5.2 (jail) -

Re: access for 24 hours after first login?

2005-10-05 Thread Alan DeKok
Markus Krause <[EMAIL PROTECTED]> wrote: > i set up freeradius succesfully for authentification against pam and users > file > :-) Please don't use "authentification". It's "authentication". > now i want to enhance the functionality about the following feature: > setting up several predefined

access for 24 hours after first login?

2005-10-05 Thread Markus Krause
hello list, i set up freeradius succesfully for authentification against pam and users file :-) now i want to enhance the functionality about the following feature: setting up several predefined (guest) accounts with a generated username and password. this account should be valid from the first ti

Re: Accounting and Cisco devices

2005-10-05 Thread Kevin Bonner
On Wednesday 05 October 2005 15:07, Guy Fraser wrote: > On Wed, 2005-05-10 at 09:56 -0500, Ryan Klinkhammer wrote: > > Is it possible receive accounting information for cisco devices. When > > I go to my log files I can see the start and stop of my session but > > don’t see the commands I entered

Re: Call-Check

2005-10-05 Thread Paolo Rotela
I'm using Cisco preauth feature on an AS5300 series acting as standard modem RAS against a FreeRADIUS. I use it to blacklist some ANIs that aren't allowed to put a call on my gear, and I need to do it before the call gets answered. It is working great in the sense that I get the blacklisted nu

Re: Wireless Provisioning Service Protocol

2005-10-05 Thread Josh Howlett
I read the 132 page spec last night. Personally, I wasn't terribly impressed. josh. King, Michael wrote: Has any thought been given on adding the WPS (Wireless Provisioning Service) Protocol to FreeRADIUS? http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/p rotocol/portal

Re: Wireless Provisioning Service Protocol

2005-10-05 Thread Michael Griego
Hey, Michael, From my recollection, implementing WPS would require first implementing PEAPv2, and there hasn't been any movement there yet. --Mike King, Michael wrote: Has any thought been given on adding the WPS (Wireless Provisioning Service) Protocol to FreeRADIUS? http://msdn.microsoft

Wireless Provisioning Service Protocol

2005-10-05 Thread King, Michael
Has any thought been given on adding the WPS (Wireless Provisioning Service) Protocol to FreeRADIUS? http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/p rotocol/portal_wireless_provisioning_service_protocol.asp It sounds really cool in theory. From: http://www.microsoft.com

Re: Accounting and Cisco devices

2005-10-05 Thread Guy Fraser
On Wed, 2005-05-10 at 09:56 -0500, Ryan Klinkhammer wrote: > Is it possible receive accounting information for cisco devices. When > I go to my log files I can see the start and stop of my session but > don’t see the commands I entered on the device. Or does freeradius > not log accounting inform

Re: Call-Check

2005-10-05 Thread Alan DeKok
"Jonathan De Graeve" <[EMAIL PROTECTED]> wrote: > >From the site: > RADIUS Debugging File > FreeRADIUS server does not support preauthentication. There is no > example for this case. I'm not sure it's true. Please configure the pre-authentication as they describe, run FreeRADIUS in debugging

RE: Call-Check

2005-10-05 Thread Jonathan De Graeve
>From the site: RADIUS Debugging File FreeRADIUS server does not support preauthentication. There is no example for this case. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [

RE: Call-Check

2005-10-05 Thread King, Michael
I wonder if it's this one? http://www.cisco.com/univercd/cc/td/doc/product/voice/sipproxy/radiusps/ radpreau.htm > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Alan DeKok > Sent: Wednesday, October 05, 2005 2:01 PM > To: FreeRadius users maili

Re: Accounting and Cisco devices

2005-10-05 Thread Alan DeKok
"Ryan Klinkhammer" <[EMAIL PROTECTED]> wrote: > Is it possible receive accounting information for cisco devices. When I go > to my log files I can see the start and stop of my session but don't see the > commands I entered on the device. See the FAQ. If the NAS doesn't send the data, FreeRADIU

Re: request->proxy & request->proxy_reply

2005-10-05 Thread Alan DeKok
Massimiliano Liccardo <[EMAIL PROTECTED]> wrote: > My doubt is: the AV request->proxy are still valid during post-proxy stage > of > a rlm_module? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple Connections for One UserID

2005-10-05 Thread Alan DeKok
"Samson Martinez" <[EMAIL PROTECTED]> wrote: > Can someone point me to the place where I can modify the number of > simultaneous connections that are allowed per user? I've just now > noticed that I am currently only allowed a single connection and I'd > like to increase that value. The default

Re: TLS Question

2005-10-05 Thread Alan DeKok
Juan Daniel Moreno <[EMAIL PROTECTED]> wrote: > but I would like to know how to change some parameters (like > rsa_key_exchange = yes) Add it to the configuration section for tls. > and, even more important, if the > rsa_key_length is given in Bytes or bits. Bits. > Does it mean that the

Re: Call-Check

2005-10-05 Thread Alan DeKok
Ivo <[EMAIL PROTECTED]> wrote: > Can someone tell me is it possible to get freeradius respond to > Service-Type==Call-Check requests? I don't see why niot. > I have read on cisco's web pages that it is not possible. Please post the URL. > Namely, I would like to check for valid caller-id be

RE: Which Operating System is best for freeRADIUS

2005-10-05 Thread Gunther
Nicolas Baradakis wrote: >I'd suggest Debian, because several members of the project are developping or testing FreeRADIUS under Debian. >Moreover the Debian package is directly maintained by one the developpers who regularly adds the major bugfixes >into the Debian package between two releases o

Re: Which Operating System is best for freeRADIUS

2005-10-05 Thread Nicolas Baradakis
Gunther wrote: > Building my FR server, I have the choice of a number of operating > system for my FreeRADIUS server. > Anybody with a suggestion which operating system is best suited for FR? I'd suggest Debian, because several members of the project are developping or testing FreeRADIUS under De

Success Story (A tribute to the FreeRADIUS project)

2005-10-05 Thread Lefteris St
Hello everyone, I am writing this -long overdue- letter to express my gratitude to all FR developers and other people who help through this mailing list. I may not be an active poster, but this list's archive has been a tremendous help during my involvement with FreeRADIUS. Thanks to the intense s

Accounting and Cisco devices

2005-10-05 Thread Ryan Klinkhammer
Is it possible receive accounting information for cisco devices.  When I go to my log files I can see the start and stop of my session but don’t see the commands I entered on the device.  Or does freeradius not log accounting information.  I am using version 1.0.5   Thanks, Ryan  

Re: No updates with radiusd log

2005-10-05 Thread john
Thanks Alan. I was trying to debug but not in full debugging mode. I'll give that a shot. Thanks again, John > -Original Message- > From: Alan DeKok [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 5, 2005 01:07 AM > To: 'FreeRadius users mailing list' > Subject: Re: No updates with

Which Operating System is best for freeRADIUS

2005-10-05 Thread Gunther
Building my FR server, I have the choice of a number of operating system for my FreeRADIUS server. Anybody with a suggestion which operating system is best suited for FR? I like to run FR on a VPS (virtual private server) using one of the following OS: - FreeBSD 4.9 (jail) - FreeBSD 5.2 (jail) - F

request->proxy & request->proxy_reply

2005-10-05 Thread Massimiliano Liccardo
hi folks, I should write a module that strips/modifies AV pairs from a proxy reply according to the AV pairs prior sent into the originated request. My doubt is: the AV request->proxy are still valid during post-proxy stage of a rlm_module? -- Massimiliano Liccardo (maX) <[EMAIL PROTECTED]>

RE: PID variable

2005-10-05 Thread Jonathan De Graeve
Pidof freeradius will also do -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] - Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite - -Oor

Multiple Connections for One UserID

2005-10-05 Thread Samson Martinez
Let me preface this with the required “I’m pretty much a newbie to freeRADIUS”…   Can someone point me to the place where I can modify the number of simultaneous connections that are allowed per user? I’ve just now noticed that I am currently only allowed a single connection and I’d like

TLS Question

2005-10-05 Thread Juan Daniel Moreno
Hi, I'm using freeRadius 1.0.4 and I would like to know something about tls config. When I launch radius en debug mode I get this messages: tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)"

Re: Crashes with 1.0.4/1.0.5, perhaps connected with slow LDAP backend?

2005-10-05 Thread Martin Pauly
Alan, > > Thu Sep 29 20:33:19 2005 : Error: Assertion failed in modcall.c, line 68 > If you can get a core dump, and do 'bt' in gdb, and also do 'print > *p' at the point of the assertion, that would help a lot. > > But my main suspect right now is bad memory. The code hasn't > changed in a l

Re: PID variable

2005-10-05 Thread Josh Howlett
[EMAIL PROTECTED] ~]# cat /var/run/radiusd.pid 10163 josh. Abdul Lateef wrote: Hi all, How i can retrive the current pid value of freeradius in Shell script. I wanted to create one shell script to run in linux corn commond. because our database is very slow and always radius is going to crash

PID variable

2005-10-05 Thread Abdul Lateef
Hi all, How i can retrive the current pid value of freeradius in Shell script. I wanted to create one shell script to run in linux corn commond. because our database is very slow and always radius is going to crashed when it receives more than 1000 request. so my script will check if the radius i

RE: Tru64 again

2005-10-05 Thread Adharsh P
Hello Tim Winders, When you run configure in Tru64, configure sets GETHOSTBYADDRRSTYLE and GETHOSTBYNAMERSTYLE to GNUSTYLE in src/include/autoconf.h Modify the two lines in src/include/autoconf.h -#define GETHOSTBYADDRRSTYLE GNUTYPE -#define GETHOSTBYNAMERSTYLE GNUTYPE to +#undef GETHOSTBYADDR

Re: Cannot start Cisctron radius server

2005-10-05 Thread A . L . M . Buxey
Hi, > I have installed cistron 1.6.7. When I tried to run it,t it gives me an well done. now join the Cistron mailing list. This is the FreeRADIUS mailing list - a completely different program (!) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Call-Check

2005-10-05 Thread Ivo
Hi, Can someone tell me is it possible to get freeradius respond to Service-Type==Call-Check requests? I have read on cisco's web pages that it is not possible. I am using PM3 RAS with "set call-check on" option set. Namely, I would like to check for valid caller-id before answering the call and g