Re: single login

2006-05-03 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > My friend having problem, because he gave me 1 account but it can be > use for 2 PC, maybe someone can help how to setup the single login on > freeradius. doc/Simultaneous-Use Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

need a little help with ldap groupings

2006-05-03 Thread Mark Jayson R. Alvarez
Hi, I have grouped my users in ldap using "groupofNames" objectclass. now one group of users which I only want to allow to authenticate to the radius server has a dn of: dn: cn=radiususers,ou=groups,o=example,dc=com It has "member" attributes such as: member: uid=user2,ou=people,o=example,dc=

ntlm_auth is not used by mschap

2006-05-03 Thread robiwan
Dear all, I try to authenticate Radius-users against my Microsoft-2003-Server Active-Directory using the mschap-Module with ntlm_auth. My Windows-Domain is "winlab" my username is "roka" and the Password is "Gerti1000". The winbindd and therefore the ntlm_auth works properly as you can see: D

rlm_attr_rewrite doesn't read the regexp in searchfor

2006-05-03 Thread Mark Supersonik
Hi Freeradius friends! I am programming a proxyRadius (FreeRadius v1.88.2.3 in Debian) in order to write a Session-Tiemout attribute with a value =3600 if the attribute doesn't exist yet. I have defined an instance of attr_rewirte called setSessionTimeout3600 with append=no, new_attribute=no,

Re: ntlm_auth is not used by mschap

2006-05-03 Thread Stefan Winter
> Now i try to authenticate the user roka: > --- > > Debian:/tmp# radtest roka Gerti1000 localhost 1645 testing123 > Sending Access-Request of id 116 to 127.0.0.1:1812 > User-Name = "roka" > User-Password = "Gerti1000" > NAS-IP

Re: Running prepaid apps on freeradius

2006-05-03 Thread Sean
On Wed, 2006-05-03 at 12:13 +0200, [EMAIL PROTECTED] wrote: > Running prepaid apps on freeradius Hi Checkout phpMyPreaid on sourceforge and http://swarmhotspots/faq for a tutorial. Sean - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Aw: Re: ntlm_auth is not used by mschap

2006-05-03 Thread robiwan
- Original Nachricht Von: Stefan Winter <[EMAIL PROTECTED]> An: FreeRadius users mailing list Datum: 03.05.2006 11:59 Betreff: Re: ntlm_auth is not used by mschap > > Now i try to authenticate the user roka: > > --- > > > > D

Re: need a little help with ldap groupings

2006-05-03 Thread Kostas Kalevras
On Wed, 3 May 2006, Mark Jayson R. Alvarez wrote: Hi, I have grouped my users in ldap using "groupofNames" objectclass. now one group of users which I only want to allow to authenticate to the radius server has a dn of: dn: cn=radiususers,ou=groups,o=example,dc=com It has "member" attributes

Re: default vlan for ldap users

2006-05-03 Thread Kostas Kalevras
On Tue, 2 May 2006, Nuno Reis wrote: Hi, Is there any way to make freeradius assign a vlan to any user that was authenticated using active directory database? Something like, freeradius asks active directory for user authenticity, and if accepted, freeradius forwards always the same tunnel-pvt-

Re: Aw: Re: ntlm_auth is not used by mschap

2006-05-03 Thread Phil Mayers
[EMAIL PROTECTED] wrote: Finally it should work with Windows-XP Supplicant: In my WindowsXP 802.1X Network-Configuration I can choose between "MD5Challenge" , or "secure EAP(PEAP)" or "Smartcart or other Certificate" What ist the right one? secure EAP (PEAP) Or is mschap basically the wr

Re: need a little help with ldap groupings

2006-05-03 Thread Alan DeKok
"Mark Jayson R. Alvarez" <[EMAIL PROTECTED]> wrote: > However, I'm not sure where to specify that only the member of the > group "radiususer" is allowed to authenticate... > Although I can simply add an dialupAccess attribute to each user I only want > to allow, It is difficult because I have so

Re: ntlm_auth is not used by mschap

2006-05-03 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > I try to authenticate Radius-users against my Microsoft-2003-Server > Active-Directory using the mschap-Module with ntlm_auth. ... > Sending Access-Request of id 116 to 127.0.0.1:1812 > User-Name = "roka" > User-Password = "Gerti1000" There's no MS-CHA

Re: freeradius + ldap

2006-05-03 Thread Alan DeKok
ludovic cailleau <[EMAIL PROTECTED]> wrote: > Yes I have read the FAQ. But I haven't find my error. > > When I make "radiusd -X" I have this log (log.radiusd) Which contains the problem: > rlm_eap: processing type mschapv2 > Processing the authenticate section of radiusd.conf > modcall: e

Yet another Simultaneous-Use issue

2006-05-03 Thread Eduardo Bejar
Hi, It seems that I´m missing something regarding the Simultaneous-Use option as I can´t make it work yet. I´ve found that this has been asked many times before, but I´ve tried all suggested methods with no luck. Here's my config: - Fedora Core 4 fresh install, Freeradius 1.1.0 with MySQL. An

preventing several login in with same username at the same time?

2006-05-03 Thread Frank Bonnet
Hello I use Chillispot with Freeradius and ldap everything works well :-) But I would like to prevent users to log in with the same username at the same time ( *some* students give their passwords to anyone ) Thanks a lot -- Frank Bonnet - List info/subscribe/unsubscribe? See http://www.freer

Newbie question

2006-05-03 Thread Wayne Hill
Hey guys/gals, I'm a newbite with freeradius and have come upon an interesting issue. Here at my job we've been using Radiator-ODBC for quite some time and are hoping to phase this out and begin using freeradius, along with some more modern hardware, instead. Here's the issue I'm coming ac

radtest ?

2006-05-03 Thread Michael Gale
Hello, What type of Auth-Type does radtest provide ?? I have a pptp / ppp + freeradius + mysql setup working, I am able to connect with a XP laptop using PPTP with out any problems. Now when I try and test a user using radtest I noticed the following: - The Auth-Type is allows System

Re: Newbie question

2006-05-03 Thread Alan DeKok
Wayne Hill <[EMAIL PROTECTED]> wrote: > Right now, I have it set up with an entry for rad_group with the > following: > > passwd rad_group{ > filename = /usr/local/etc/raddb/group > format="*User-Name:~Group" Don't use the "Group" attribute. It's for Unix groups. The rlm

dropped mysql connections

2006-05-03 Thread Bill Schoolfield
Hello All, We've implemented a billing solution for a client and as part of that effort we are using FreeRadius 1.05 and MySQL 4.0.x on Redhat ES 3.0. It is very standard setup; nothing fancy. Today they experienced a radius failure (8 hours from a radius restart) where FreeRadius could not

Semantics of radiusd.conf ?

2006-05-03 Thread Gabriel L. Somlo
Hi, I'm trying to understand the semantics of the radiusd.conf file. Specifically, when does a module (not) need to be mentioned in the authorize and authenticate sections of the config file ? For instance, I want mysql-based authorization, and eap-based authentication. For this, I have to do som

Re: Newbie question

2006-05-03 Thread Wayne Hill
That did it, but it's brought about some other weirdness. When I replace Group with My-Group in some lines, I now get complaints about an unexpected trailing comma, where there is none. Eg. The following line returns with no error: DEFAULT Auth-Type=System,Group=="filtered",NasType=Aleron

Re: Newbie question

2006-05-03 Thread Alan DeKok
Wayne Hill <[EMAIL PROTECTED]> wrote: > But this: > DEFAULT Auth-Type=System,My-Group=="filtered",NasType=Aleron > > Complains of an unexpected trailing comma. Yeah, the parser is a little dumb. It should be a bit better in 1.1.2. The solution is to list "My-group" as an attribute in the di

Re: Semantics of radiusd.conf ?

2006-05-03 Thread Alan DeKok
"Gabriel L. Somlo" <[EMAIL PROTECTED]> wrote: > I'm trying to understand the semantics of the radiusd.conf file. > Specifically, when does a module (not) need to be mentioned in the > authorize and authenticate sections of the config file ? It's listed if you want it to be used. > Removing the

Re: Yet another Simultaneous-Use issue

2006-05-03 Thread Alan DeKok
"Eduardo Bejar" <[EMAIL PROTECTED]> wrote: > It seems that I´m missing something regarding the Simultaneous-Use option as > I can´t make it work yet. I´ve found that this has been asked many times > before, but I´ve tried all suggested methods with no luck. Ok... is the NAS sending accounting pa

freeradius.de hacked ;)

2006-05-03 Thread patrick
http://www.freeradius.de/forum/ hacked ;) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius.de hacked ;)

2006-05-03 Thread A . L . M . Buxey
Hi, > http://www.freeradius.de/forum/ hacked ;) what _was_ this site and its relevance to FreeRADIUS? looks like it was a simple PHP butchery alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius.de hacked ;)

2006-05-03 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > what _was_ this site and its relevance to FreeRADIUS? A German forum, run by someone... There's no official relationship. > looks like it was a simple PHP butchery Probably. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/u

Re: FreeRADIUS 1.1.1 Segmentation fault on Fedora 4

2006-05-03 Thread Bjarni Hardarson
Alan DeKok wrote: Nikolas Thoman <[EMAIL PROTECTED]> wrote: Any help in diagnosing the reason why I'm encountering a fault in malloc would be much appreciated. It usually happens because something else in the code is over-writing a buffer, or writing to free'd memory. Run the server unde

dialup_admin blank pages

2006-05-03 Thread rabbtux rabbtux
All, Not to sound like a nubie, but I spent the day researching & working on this issue. My dialup_admin package has the standard "blank pages", and does not report errors. I've checked apache,mysql, and freeradius log files. I configured dialup_admin to use mysql database and all. First I di

Re: radtest ?

2006-05-03 Thread Alan DeKok
Michael Gale <[EMAIL PROTECTED]> wrote: > What type of Auth-Type does radtest provide ?? It doesn't. Auth-Type is not an attribute that can go in a packet. > Now when I try and test a user using radtest I noticed the following: > > - The Auth-Type is allows System ? See raddb/users

Re: freeradius.de hacked ;)

2006-05-03 Thread Alan DeKok
patrick <[EMAIL PROTECTED]> wrote: > http://www.freeradius.de/forum/ hacked ;) freeradius.com is an advertising site. There's a reason the distributions of the server on freeradius.org are PGP signed. I had to turn off tcpdump.org a few years ago (I worked 1/2 mile from it) because it got

Freeradius config rlm_sqlcounter.so missing

2006-05-03 Thread Andrew Belling
I have now after a lot of reading and searching managed to configure my freeradius server to my needs(auth for wireless hotspot) however a required libary module "rlm_sqlcounter.so" has not been installed with the RPM used to install. System info: fedoracore 5 fedoracore RPM freeradius-1.0.5

PPPoE Unique Login without using FreeRadius at all solved. traffic shaping Up+download included.

2006-05-03 Thread Rani Ahmed
Hi all.. what follows is a very very cheap solution to disallow 2 different computers to login to rp-pppoe server using the same username. This means the same username should have one and only one login session in the whole network. This /DOES/ not use FreeRadius at all. It uses only /etc/ppp/

ntlm_auth is not used by mschap

2006-05-03 Thread robiwan
You send a packet that does not contain any MS-CHAP attributes. Because of that, the server is not doing MS-CHAP: > modcall[authorize]: module "mschap" returns noop for request 0 As this line tells you. Send a MS-CHAP request, and look what happens then. Stefan Hi , Now i send a mschap req

RE: dialup_admin blank pages

2006-05-03 Thread Fenn Bailey
> My dialup_admin package has the standard "blank pages", and > does not report errors. I've checked apache,mysql, and > freeradius log files. > I configured dialup_admin to use mysql database and all. > Hi there, In my case, this was caused by the php dynamic mysql module not being loaded.