freeradius auth logging (rlm_detail)

2006-03-10 Thread ???????, ?? ????????
Hi! Is it possible to log more detailed information about radius response packet for authorization? At the moment it looks like: Packet-Type = Access-Accept Wed Mar 8 10:25:57 2006 Auth-Type = Accept But how can I know, for which request it has responsed? Can I log the Authenticator? (Both, in

perl scripts

2006-03-10 Thread debik
Could somebody share with some scripts that authorize users in radius. Im trying to write my own script, but i don't find any docs. Could somebody help me. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[freeradius-users]dialup_admin can't connect to the Sql server!!

2006-03-10 Thread 刘杰
Hi,there. I'm configuring the dialup_admin but it always tell can't connect to the sql.Anything wrong with?I've configured the admin.conf as follows:sql_debug: truesql_type: mysqlsql_server: 2*.4*.2*.5* sql_port: 3306sql_username: rootsql_password: **sql_database: radiussql_accounting_table:

RE: freeradius newbie

2006-03-10 Thread mnisay
how about Is there a good document that I can follow that will give me step-by-step instructions to install freeradius on Fedora 4? I would even do FreeBSD if need be but I am more familiar with the FC 4 processes. yum install freeradius Is there a GUI front-end that will

RE: perl scripts

2006-03-10 Thread mnisay
Could somebody share with some scripts that authorize users in radius. Im trying to write my own script, but i don't find any docs. Could somebody help me. authorize users inradius? freeradius can authorize usersby default. --No virus found in this incoming message.Checked by AVG Free

Re: Reload on freeradius 1.1.0

2006-03-10 Thread André Lemos
No dice... I've chowned and chmoed and still I get the same problem. Any more sugestions? Alan DeKok wrote: =?ISO-8859-1?Q?Andr=E9_Lemos?= [EMAIL PROTECTED] wrote: doesn't anyone also have this problem? It works in my tests. Hmm... the code prints the SSL errors to stderr.

Re: Reload on freeradius 1.1.0

2006-03-10 Thread André Lemos
Do you see anything in here? write(6, Fri Mar 10 10:32:38 2006 : Info:..., 86) = 86 close(6)= 0 munmap(0xb7fb6000, 4096)= 0 open(/etc/raddb/certs/cert-srv.pem, O_RDONLY) = 6 fstat64(6, {st_mode=S_IFREG|0644, st_size=2439, ...}) = 0 old_mmap(NULL,

Re: Reload on freeradius 1.1.0

2006-03-10 Thread André Lemos
copied over vanila configurations from another freeradius 1.1.0 configuration, and now it seems to work fine. odd... Alan DeKok wrote: =?ISO-8859-1?Q?Andr=E9_Lemos?= [EMAIL PROTECTED] wrote: doesn't anyone also have this problem? It works in my tests. Hmm... the code prints

Re: Reload on freeradius 1.1.0

2006-03-10 Thread André Lemos
nevermind... the tls/ttls was just commented out by default Alan DeKok wrote: =?ISO-8859-1?Q?Andr=E9_Lemos?= [EMAIL PROTECTED] wrote: doesn't anyone also have this problem? It works in my tests. Hmm... the code prints the SSL errors to stderr. They're lost when running in

Re: Reload on freeradius 1.1.0

2006-03-10 Thread André Lemos
Works: 10218 open(/etc/raddb/certs/cert-srv.pem, O_RDONLY) = 6 10218 fstat64(6, {st_mode=S_IFREG|0644, st_size=2439, ...}) = 0 10218 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f22000 10218 read(6, Bag Attributes\nlocalKeyID: 0..., 4096) = 2439 10218

need info regarding Reply-Message

2006-03-10 Thread Vishwanath Srikant Pattanshetti
Title: need info regarding Reply-Message Hello All I am using Freeradius 1.1.0 with Oracle. I want to return a reply-message for all failed authentications. How should I configure this? Do I need to handle it through the query select the reply-message if password does not match? Any

Encrypted passwords

2006-03-10 Thread Vishwanath Srikant Pattanshetti
Title: Encrypted passwords Hello All I am using Freeradius1.1.0 with Oracle 10 in my project for user authentication. I need to store encrypted passwords in the database I would be using Java code to access the database for this purpose. However, I will be sending the password in clear

Duplicate Entry error

2006-03-10 Thread MHumphries
I am having errors with logins from my dialup users. I bounced my server and ever since these errors are coming up. i have attached the log snippet but i am at a loss. any help you have would be great. i already cleared all open sessions from the Db. i also noticed that there is no

RE: Freeradius-Users Digest, Vol 11, Issue 39

2006-03-10 Thread Atkins, Dwane P
/ Virus Database: 268.2.1/278 - Release Date: 3/9/2006 -- next part -- An HTML attachment was scrubbed... URL: https://list.xs4all.nl/pipermail/freeradius-users/attachments/20060310/d91620fc/attachment-0001.html -- Message: 2 Date: Fri, 10 Mar

multiple constraints

2006-03-10 Thread kimmi raikonen
Hello all!Maybe I heaven't read ehough, but here is question:Is it possible to have two "if"for one rule in users file: DEFAULT NAS-IP-Address == 192.168.2.5, NAS-Port-Id == 0, Proxy-To-Realm := 'bla'If not, how can I do it??TIA Yahoo! Mail Bring photos to life! New PhotoMail

Re: Realms allowed to some huntgroup

2006-03-10 Thread Walter Reynolds
Is this possible? I still am not finding documentation that points me to if I can or how. On Tue, 7 Mar 2006, Walter Reynolds wrote: I am not quite finding the setup I am looking for and hope someone can point me to the files I should be updating. Currently I am running version 1.0.4

Re: Encrypted passwords

2006-03-10 Thread Alan DeKok
Vishwanath Srikant Pattanshetti [EMAIL PROTECTED] wrote: ... Do NOT send the same message to freeradius-users freeradius-devel. If you continue to do so no one will respond. Can I instruct FreeRadius to execute some code(java preferably) before comparing the passwords?? Yes. See

Re: Welcome to the Pls Reply me --- urgent need

2006-03-10 Thread Alan DeKok
HariHaran [EMAIL PROTECTED] wrote: The problems are, 1)I am not able to locate what is happening between Fedora DS and Radius. Run the server in debugging mode. 2)How to test whether Fedora DS accepting the RADIUS attributes are not 3)How to add RADIUS Attributes and user defined to

Re: perl scripts

2006-03-10 Thread debik
I have got onother mysql base and i wont to write perl script to tel the radius server to use the data in that database. - Original Message - From: mnisay To: 'FreeRadius users mailing list' Sent: Friday, March 10, 2006 11:26 AM Subject: RE: perl scripts

Can we use RSA-Token to Freeradius?

2006-03-10 Thread kevin
Does freeradius support RSA-Token? Kevin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CVS down

2006-03-10 Thread Thor Spruyt
Chris Parker wrote: No, that's just CVSWEB, due to webbots that ignore 'robots.txt' and cane the server recursing through 80+ simultaneous CVS diffs via CVSWEB. I meant CVSWeb :) Disabled the CGI while working out a way to better throttle it's use. Maybe require a login like with the bugs

Re: Can we use RSA-Token to Freeradius?

2006-03-10 Thread Alan DeKok
kevin [EMAIL PROTECTED] wrote: Does freeradius support RSA-Token? No. But it shouldn't be too hard to leverage their command-line tool. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: perl scripts

2006-03-10 Thread Thor Spruyt
First of all: READ http://www.freeradius.org/list/users.html = please send PLAIN TEST mails! For your question: read the docs about rlm_exec and rlm_perl -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be

Re: Can we use RSA-Token to Freeradius?

2006-03-10 Thread Jeff Stout
If I'm not mistaken you can also use a pamd mod to accomplish this Jeff Stout Alan DeKok wrote: kevin [EMAIL PROTECTED] wrote: Does freeradius support RSA-Token? No. But it shouldn't be too hard to leverage their command-line tool. Alan DeKok. - List

HOW TO ATTACH A USER TO A SPECIFIC MAC ADDRESS

2006-03-10 Thread Aime
Hello, How do I define a user in users file so that the user can only be accepted from a given mac address ? In the following exemple , what must I replace . with in the check items ? : user1User-Password == passwd . Thanks in advance.

Re: freeradius auth logging (rlm_detail)

2006-03-10 Thread Geoff Silver
You'll have to change rlm_detail. I created an rlm_syslog module which allows you to include some extra fields via xlat. I'm sure you could do something similar to rlm_detail. In my case, I added a char* logextra to the struct and then: if (inst-logextra != NULL) {

Re: Can we use RSA-Token to Freeradius?

2006-03-10 Thread Geoff Silver
pam_securid.so exists for just this purpose ;-) Jeff Stout wrote: If I'm not mistaken you can also use a pamd mod to accomplish this Jeff Stout Alan DeKok wrote: kevin [EMAIL PROTECTED] wrote: Does freeradius support RSA-Token? No. But it shouldn't be too hard to leverage

Re: Password Logging

2006-03-10 Thread Geoff Silver
I did this for an rlm_syslog module, since I didn't want password logged in the clear. I added a hidepasswd config option so it could be enabled/disabled at will, but basically it's just: if ((strstr(buf, User-Password) != 0) (strcmp(inst-hidepasswd, yes) ==

Re: net-snmp issues fix?

2006-03-10 Thread A V
No we have not tried this. We are still trying to get the SMUX working on Solaris 10. We may end up using a special user account authentication to monitor RADIUS.Kevin Bonner [EMAIL PROTECTED] wrote: On Wednesday 01 March 2006 23:31, A V wrote: With these fixes, will we be able to get SNMP to work

HowTo FreeRadius on SME Server7

2006-03-10 Thread Italo Morellato
How to install FreeRadius on SME Server7 (core CentOS)? RPM or different setting-up? Thanks on advance Italo Morellato WISP Admin. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: multiple constraints

2006-03-10 Thread Alan DeKok
kimmi raikonen [EMAIL PROTECTED] wrote: Is it possible to have two if for one rule in users file: DEFAULT NAS-IP-Address == 192.168.2.5, NAS-Port-Id == 0, Proxy-To-Realm := 'bla' If not, how can I do it?? Yes, and your example should work. The examples in the

Re: Duplicate Entry error

2006-03-10 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I am having errors with logins from my dialup users. I bounced my server and ever since these errors are coming up. I wouldn't worry too much about them. They just mean that the server didn't notice that the NAS rebooted. You should see the messages disappear over

NAS MAC Addres Atribute

2006-03-10 Thread Alex M
Hi Is the attribute for NAS MAC address is: NAS-Identifier? Thanks! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: special characters in passwords + FR + ldap

2006-03-10 Thread Natalia Escalera
Hello, Do you have any suggestion of how to fix the problem? Thanks, Natalia. On 3/9/06, Natalia Escalera [EMAIL PROTECTED] wrote: Hello, how did you patch? What I did is that I took the rlm_ldap.c from FR 1.1.0 and replaced the content of the function ldap_pairget with the code shown on

password rejected when CHAP is not used

2006-03-10 Thread Alex M
When I do not use CHAP my password gets rejected, and when I do use it everything goes OK; but not all my NAS support chap! So what should I do to configure radius to support NAS that doesnt send CHAP passwords? THANKS! - List info/subscribe/unsubscribe? See