Re: wifi / mac authentication

2005-10-20 Thread Nick B
tnx Edward, i knew the ap-500 did the same so was curious if i could set a specific password per mac address but its looking as if im going to be using one default password for all clients. - Original Message - From: "Edward Rempala" <[EMAIL PROTECTED]> I know with the AP-600 the p

return ALL the AVPs for a username that belongs multiple groups

2005-10-20 Thread Lenir
Hello list, I have a user that belongs to multiple groups, lets say in the usergroup table, I have username Paul_S that belongs to Group1, Group2 and Group3 (using a different row for each group membership). In the radgroupreply table, I have multiple different attributes for each group. When I d

RE: wifi / mac authentication

2005-10-20 Thread Edward Rempala
I know with the AP-600 the password is the same as the NAS password. Edward -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Thursday, October 20, 2005 8:01 PM To: FreeRadius users mailing list Subject: Re: wifi / mac authentication "Ni

Re: wifi / mac authentication

2005-10-20 Thread Alan DeKok
"Nick B" <[EMAIL PROTECTED]> wrote: > Im quite aware of what is being sent and what is shown via debug mode. > unfortunatly i dont have access to the specific NAS in question so i cant > see what attributes are being sent Uh, no. Debug mode shows you what attributes are being sent. > My ques

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Duane Cox
If you can't change the shared secret in WUG then change the secret in your clients.conf to match what is in WUG. Or better yet, abandon WUG and it's windows platform and use www.intermapper.com It is a MUCH better product and works just fine with freeradius, I'm doing so here. It also runs

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Duane Cox
If you can't change the shared secret in WUG then change the secret in your clients.conf to match what is in WUG. Or better yet, abandon WUG and it's windows platform and use www.intermapper.com It is a MUCH better product and works just fine with freeradius, I'm doing so here. It also runs

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Linda Pagillo
Thank you once again Mr.DeKok. I have already added the secret to my clients.conf entry. I also already checked into adding the shared secret to WUG and there is no way to do this, so i'm told. Is there another way around this problem? Perhaps i have my clients.conf entry incorrect. Here is what

PAM radius client usage

2005-10-20 Thread nagaraj
Hi, Does PAM radius client need shared library support to be able to work ? I could port successfully PAM radius client to Router platform which has shared library support. However I need to port the same PAM radius client to other router platforms which do not have shared library support. Has anyb

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Alan DeKok
"Linda Pagillo" <[EMAIL PROTECTED]> wrote: > This is how Ipswitch explains how it works: > > "What we specified for a test is an INVALID test for the userid TEST as > it not encoded using the secret key. Then what we expect back is a > response telling us the userid doesn't exist. This isn't ho

Re: wifi / mac authentication

2005-10-20 Thread Nick B
Im quite aware of what is being sent and what is shown via debug mode. unfortunatly i dont have access to the specific NAS in question so i cant see what attributes are being sent so im restricted to testing from computer to computer instead of the actual NAS to radius. and My personal nas/rou

Freeradius and What's Up Gold Question

2005-10-20 Thread Linda Pagillo
Hi everyone:   I'm going to try to explain this as best I can. I'm using Freeradius 1.0.5 on a Linux Redhat 9 server. I have a network monitoring program on another computer called What's Up Gold. It is made by a company called Ipswitch. There is a setting in the WUG program that lets you mon

Preside RADIUS Export

2005-10-20 Thread Samson Martinez
Hello,   We have an older NT 4 server running an installation of Preside RADIUS with a multitude of users & profiles. I’ve exported the users to a .rif file – is this something that can somehow be imported into a freeRADIUS install? I’ll search for the “how” if it is possible.   Many th

Re: accounting scripts ?

2005-10-20 Thread Miguel
Frank Bonnet wrote: Hello I'm searching for scripts that are able to parse the radacct/xxx.xxx.xxx.xxx/detail-xxx file to perform some simple statistics ? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html what do you mean with parsing?, i got thi

Re: accounting scripts ?

2005-10-20 Thread Alan DeKok
Frank Bonnet <[EMAIL PROTECTED]> wrote: > I'm searching for scripts that are able to parse the > radacct/xxx.xxx.xxx.xxx/detail-xxx file to perform > some simple statistics ? radiusreport. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

counter with Session Octet Limit

2005-10-20 Thread Seferovic Edvin
Hello,   I am using freeRadius 1.0.2, and I would like to limit weekly bandwidth for my VPN ( pptp ) users. So Ive changed the example counter part in my radiusd.conf   counter weekly_traffic {     filename = ${raddbdir}/db.weekly     key = User-Name      

accounting scripts ?

2005-10-20 Thread Frank Bonnet
Hello I'm searching for scripts that are able to parse the radacct/xxx.xxx.xxx.xxx/detail-xxx file to perform some simple statistics ? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Vendor Specific Attributes

2005-10-20 Thread Guy Davies
Which VSAs are you sending in the accounting packet? Are they correctly enumerated in a dictionary file? Is the dictionary file referenced in the main dictionary file? Can you send us the accounting packet you're seeing? Rgds, Guy -Original Message- From: [EMAIL PROTECTED] [mailto:[E

Vendor Specific Attributes

2005-10-20 Thread Daniel Corbe
Hello, How do you get FreeRADIUS to stop ingoring VSAs? I have a box that's sending them and FreeRADIUS is simply ignoring them in rad_recv rad_recv: Accounting-Request packet from host 10.10.0.90:1068, id=0, length=58 NAS-Identifier = "acme-sd" Acct-Status-Type = Accounting-On

Many thanks

2005-10-20 Thread Iandc Davies
To all, Well, after months of trying to get this working and integrated into our system, guess what .. I've managed it with the help of you lovely people to finally get this working with the aide also of lots and lots of full strength coffee and severe lack of excercise. Many thanks to the li

getting this in error log

2005-10-20 Thread Global Net, LLC
Error: Invalid operator for item Password: reverting to '==' New setup using a text file for auth   when doing a test login from the console with the radtest login seems to go ok.   but when the nas is sending the users info I am getting entrys like above in the log file and not sure where to

Re: ntlm_auth and machine authentication (workaround)

2005-10-20 Thread Michael Griego
See the list postings from earlier in the day... If you grab the latest CVS snapshot, you don't have to use the Perl wrapper as the rlm_mschap module will do the name rewriting for you. --Mike Roy Hooper wrote: After spending a fair bit of time searching list archives and google results, I'

Re: DB Server Advice

2005-10-20 Thread Nicolas Baradakis
Abdul Lateef wrote: > We have very big voip traffic, and currently we were > using mysql DB with the following server > configurations, But we are getting lot of problems > some time the devise are failed, some time the > database is slow…. Etc. I don't think that buying expensive hardware is a l

Re: DB Server Advice

2005-10-20 Thread A . L . M . Buxey
Hi, > The current configuration is: > OS: Red Hat Enterprise Linux ES 3 > PROCESSOR: Dual 3.2 GHz Intel Xeon > MEMORY : 2GB DDR RAM > Hard Drive: 2 x 36.4GB SCA Ultra 160 SCSI Hard Drive > (RAID 1) > RAID CONTROLLER > CHASSIS: 2U > BACKUP AGENT: Legato Managed Backup Agent > NETWRK: Aggreg

DB Server Advice

2005-10-20 Thread Abdul Lateef
Hi all, We have very big voip traffic, and currently we were using mysql DB with the following server configurations, But we are getting lot of problems some time the devise are failed, some time the database is slow…. Etc. The current configuration is: OS: Red Hat Enterprise Linux ES 3 PROCESSOR

Re: + in Usernames?

2005-10-20 Thread jesk
Yes thanks, that was it! --On Wednesday, October 19, 2005 04:55:01 PM +0200 Nicolas Baradakis <[EMAIL PROTECTED]> wrote: Christian Meutes wrote: Either i have a problem with my authorize section or the username shouldnt include an "+" i think. Anybody with an idea? Look for the directiv

RLM_IPPOOL bug?

2005-10-20 Thread magmike
my radiusd uses rlm_ippool. Sometimes ippool gives one ip for two different users simultaneously. here output of rlm_ippool_tool. # rlm_ippool_tool -va /etc/raddb/pools/db.pool-1-pool1* | grep X.Y.Z.170 NAS:192.168.0.1 port:0xde - ipaddr:X.Y.Z.170 active:1 cli:0 num:1 NAS:192.168.0.1 port:0xad

Re: Realm users authentication failure

2005-10-20 Thread Luca Corti
On Thu, 2005-10-20 at 09:17 +0200, Luca Corti wrote: > On Wed, 2005-10-19 at 19:28 -0400, Alan DeKok wrote: > > > +-+-+---+--++ > > > | id | UserName| Attribute | Value| op | > > > +-+-+---+--++

Re: wifi / mac authentication

2005-10-20 Thread A . L . M . Buxey
Hi, > Now when a wireless client trys to connect will the NAS sends the mac > address and does it append the NAS password or do you supply a specific > password for the mac address? > when it authenticates the Wireless client will they have internet access > (obtained ip/dhcp etc all thru the

Re: Realm users authentication failure

2005-10-20 Thread Luca Corti
On Wed, 2005-10-19 at 19:28 -0400, Alan DeKok wrote: > > +-+-+---+--++ > > | id | UserName| Attribute | Value| op | > > +-+-+---+--++ > > | 376 | [EMAIL PROTECTED] | User-Password | password | =