RE: H323-ivr-out sending extra attribute from Cisco TCL to radius

2006-05-19 Thread vignesh_b
hi abdul what are you doing with Cisco and Radius. if possible we can both help each other and work together. so tell me what is the problem. -- View this message in context: http://www.nabble.com/H323-ivr-out+sending+extra+attribute+from+Cisco+TCL+to+radius-t1650464.html#a4480780 Sent from the F

Re: PEAP against Samba PDC through auth_ntlm

2006-05-19 Thread Jérémy Cluzel
Well, I solved my problem by setting this: ntlm_auth = "/usr/local/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" Thanks to everybody. Jeremy Jérémy Cluzel wrote: ---

Re: debugging mode

2006-05-19 Thread Dennis Skinner
Christopher Carver wrote: > Correct, but you don't want to run it in a heavy production environment > for very long. While I don't have proof, it would HAVE to be less > efficient because it isn't using threads and its taking the time to > print everything. True, but given that FreeRADIUS runni

Re: 1 client unable to authenticate via EAP-TLS

2006-05-19 Thread Alan DeKok
"Terry Zarelli" <[EMAIL PROTECTED]> wrote: > I have one client that is having a problem authenticating via wireless > EAP-TLS. The client is a Windows XP SP2 computer using a an internal Dell > wireless card. The client associates with the access point-a Cisco Aironet > 1130-but is continually re

Re: debugging mode

2006-05-19 Thread Christopher Carver
Correct, but you don't want to run it in a heavy production environment for very long. While I don't have proof, it would HAVE to be less efficient because it isn't using threads and its taking the time to print everything. A little trick I use when I need to test something in production is to ki

rlm_nibs

2006-05-19 Thread KES
Hello, freeradius-users. Try to use http://nibs.net.ua http://sourceforge.net/projects/nibs I have use it two years and I forget all problems with mysql. NO. all problems at all. =) Only one problem there are weak billing... but this is another theme. >Ok, so I think I'm doing it wrong in the db,

Re: debugging mode

2006-05-19 Thread Dennis Skinner
Just do: radiusd -X You should be doing this on a test machine anyway. Debugging on a production system is tough. It does not use any more system resources than running it in normal mode. It just prints what it is doing to the screen. Try it and see. It won't crash you system (unless your sys

Re: Trying to configure with --prefix causes install to fail

2006-05-19 Thread Dennis Skinner
Nicolas Baradakis wrote: > Glenn Swonk wrote: > >> When I configure with the following: >> >> ./configure --prefix=/Radius >> make all >> make install >> >> the 'make install' fails. >> >> Any ideas? > > It's a known bug, and it'll be fixed in 1.1.2. > http://bugs.freeradius.org/sh

Re: rlm_sql_getvpdata: database query error

2006-05-19 Thread Chris Carver
Use tcpdump on the radius server to see if packets are being received. If they are not, you need to find the reason why. A networking issue, not a freeradius issue. tcpdump port 1812 Chris Carver Network Engineer Giuseppe Parlato wrote: It is an upgrade, so firewall can't be the problem

Re: rlm_sql_getvpdata: database query error

2006-05-19 Thread Chris Carver
No requests are hitting your radius server. Look at the last line, 'ready to process requests.' Its not processing anything. You need to make sure the access-request packets from the client are making their way to the server. Well, you can be sure they're not if thats all thats showing in r

RE: H323-ivr-out sending extra attribute from Cisco TCL to radius

2006-05-19 Thread Abdul Hakeem
Hello, Is there someone out there with Cisco TCL experience ? I have a paid assignment involving custom call routing on Cisco gateways by modifying the 'session application'. Please contact me if you are willing to tackle this. Best regards, Abdul Hakeem -Original Message- From: [EMAIL PR

RE: peap with mysql

2006-05-19 Thread Chris Liles
Sorry- In my quest to join the office crew for a Friday lunch I didn't check before sending out my last reply. On a lighter note, after making the change as you suggested everything works now as expected. I can auth with ntlm or with mysql! Alan, truly you are the radius master :) Thanks agai

Re: rlm_sql_getvpdata: database query error

2006-05-19 Thread Giuseppe Parlato
It is an upgrade, so firewall can't be the problem Giuseppe - Original Message - From: "Chris Carver" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Friday, May 19, 2006 8:28 PM Subject: Re: rlm_sql_getvpdata: database query error No access-requests are making it to y

Re: rlm_sql_getvpdata: database query error

2006-05-19 Thread Giuseppe Parlato
tail -f /usr/local/var/log/radius/radius.log   Fri May 19 20:52:29 2006 : Info: Using deprecated naslist file.  Support for this will go away soon.Fri May 19 20:52:29 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none?Fri May 19 20:52:29 2006 : Info: rlm_sql (sql

Re: Freeradius AUTH - Please Read!!!

2006-05-19 Thread Chris Carver
The software is too complicated for me (and probably anyone else) to look at all the configs you sent line by line and just know what is wrong. You need to put freeradius in debugging mode (radiusd -X) and see what the output is when your client sends an access-request packet. Chris Carver Ne

Re: Freeradius AUTH - Please Read!!!

2006-05-19 Thread Alan DeKok
emerson <[EMAIL PROTECTED]> wrote: > My freeradius running ok, not show error messages, but not work Read the FAQ for what to do when "it doesn't work". In this case supplied the config file and not the debug log. So your message does *not* show that anything is going wrong, because your

Re: rlm_sql_getvpdata: database query error

2006-05-19 Thread Chris Carver
No access-requests are making it to your radius server then. You need to make sure your client is pointed at it properly or that you don't have your radius server firewalled. Chris Carver Network Engineer Giuseppe Parlato wrote: Now I do not have that error, I started radiusd -x end: Start

1 client unable to authenticate via EAP-TLS

2006-05-19 Thread Terry Zarelli
Hello,   I have one client that is having a problem authenticating via wireless EAP-TLS.  The client is a Windows XP SP2 computer using a an internal Dell wireless card.  The client associates with the access point-a Cisco Aironet 1130-but is continually reports an "attempting to authenticate" mess

Re: rlm_sql_getvpdata: database query error

2006-05-19 Thread Giuseppe Parlato
Now I do not have that error, I started radiusd -x end: Starting - reading configuration files ...Using deprecated naslist file.  Support for this will go away soon.Module: Loaded execrlm_exec: Wait=yes but no output defined. Did you mean output=none?Module: Instantiated exec (exec)Module: Lo

Re: rlm_sql_getvpdata: database query error

2006-05-19 Thread Chris Carver
Giuseppe Parlato wrote: I upgraded freeradius from 1.0.1 to 1.1.1 and I get the following error: rlm_sql_getvpdata: database query error can anyone help me please? Giuseppe Give us the surrounding radiusd -X output please. - List info/subscribe/unsubscribe? See http://www.freeradius.

how to set user's expire date/time on first login?

2006-05-19 Thread rabbtux rabbtux
All, forgive me if this is a nubie question... It seems many have already done something similar. I want prepaid radius accounts for 1 day, that begins the first time they are used. For example, someone buys 2- 1 day accounts, and uses them next Monday and Friday. Is there a simple way to do th

Re: peap with mysql

2006-05-19 Thread Alan DeKok
"Chris Liles" <[EMAIL PROTECTED]> wrote: > mysql> select * from radgroupreply; > ++---+++---+ > | id | GroupName | Attribute | op | Value | > ++---+++---+ > | 1 | guests| MS-CHAP-User-NTLM-Auth

Re: PEAP against Samba PDC through auth_ntlm

2006-05-19 Thread Phil Mayers
Jérémy Cluzel wrote: Well, I search for "PEAP Machine Authentication", and I only found some of my posts concerning how to make machine auth working against a windows AD... nothing concerning a samba acting as PDC... As I said, PEAP auth (both machine and user) work against an AD, the problem o

rlm_sql_getvpdata: database query error

2006-05-19 Thread Giuseppe Parlato
I upgraded freeradius from 1.0.1 to 1.1.1 and I get the following error: rlm_sql_getvpdata: database query error   can anyone help me please?       Giuseppe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: peap with mysql

2006-05-19 Thread Chris Liles
Ok, so I think I'm doing it wrong in the db, so I changed it to look like this: mysql> select * from radcheck; ++--+---+++ | id | UserName | Attribute | op | Value | ++--+---+++ | 1 | temptest | Password | := | authme | ++

Re: Problem with Authentication !!!

2006-05-19 Thread Alan DeKok
emerson <[EMAIL PROTECTED]> wrote: > The problem is, my ap authenticate ok, but the clients linked on AP, it`s > associated, but not log this, on freeradius, and any user, i`m tryng to use, > it`s accept The radius not respect, only users in table mysql... > > My LOG with "radiusd -X"

Re: limit upload and download speed for each user

2006-05-19 Thread Terry J Fike Jr
Message: 3 Date: Fri, 19 May 2006 11:48:25 +0300 From: "Mordor Networks" <[EMAIL PROTECTED]> Subject: Re: limit upload and download speed for each user To: "FreeRadius users mailing list" Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" On 5/17/06,

Re: peap with mysql

2006-05-19 Thread Alan DeKok
"Chris Liles" <[EMAIL PROTECTED]> wrote: > I tried putting the following in the database: > > mysql> select * from radcheck; > ++--++++ > | id | UserName | Attribute | op | Value | > ++--+++--

Re: PEAP against Samba PDC through auth_ntlm

2006-05-19 Thread Alan DeKok
=?ISO-8859-1?Q?J=E9r=E9my_Cluzel?= <[EMAIL PROTECTED]> wrote: > Well, I search for "PEAP Machine Authentication", and I only found some > of my posts concerning how to make machine auth working against a > windows AD... nothing concerning a samba acting as PDC... http://lists.freeradius.org/pipe

RE: acct_users & scripts working.

2006-05-19 Thread MINODIER David RD-RESA-LAN
Ahhh... Well... Thx anyway, Alan ! David. > -Message d'origine- > De : > [EMAIL PROTECTED] > s.free > [mailto:freeradius-users-bounces+david.minodier=francetelecom. > [EMAIL PROTECTED] De la part de Alan DeKok > Envoyé : vendredi 19 mai 2006 17:35 > À : FreeRadius users mailing list > O

Re: LDAP check attributes

2006-05-19 Thread Alan DeKok
Antonio Matera <[EMAIL PROTECTED]> wrote: > The problem is that I haven't set an EAP-Type in my configuration. That's not what the debug output says. > Can it be an "automatic" configuration of PEAP? No. > In my conf files I haven't an EAP-Type entry. It's not in the conf files. R

Re: acct_users & scripts working.

2006-05-19 Thread Alan DeKok
"MINODIER David RD-RESA-LAN" <[EMAIL PROTECTED]> wrote: > I remembered that the version of Freeradius I was using was a (beta) CVS > version: In the CVS head, you have to list the "exec" module in the "post-auth" section for Exec-Program & Exec-Program-Wait to work. Alan DeKok. - List info/

RE: peap with mysql

2006-05-19 Thread Chris Liles
Please forgive my ignorance, but can you be a little bit more specific. I tried putting the following in the database: mysql> select * from radcheck; ++--++++ | id | UserName | Attribute | op | Value | ++--+

H323-ivr-out sending extra attribute from Cisco TCL to radius

2006-05-19 Thread vignesh
Hello all I am using a cisco IP IP gw. I wish to send some extra attributes from Cisco and Radius both. I read about an attribute h323-ivr-out and h323-ivr-in. I tried using it but was unsuccesful to do so. If anyone can help me out with the use of h323 ivr out in TCL I would be very thankful. Do I

RE: LDAP and realms

2006-05-19 Thread Corey Burks
That worked, thank you for your help Corey   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mitchell, Michael J Sent: Thursday, May 18, 2006 11:20 PM To: FreeRadius users mailing list Subject: RE: LDAP and realms   Hi Corey,   You don't have debug output for

PEAP against Samba PDC through auth_ntlm

2006-05-19 Thread Jérémy Cluzel
Well, I search for "PEAP Machine Authentication", and I only found some of my posts concerning how to make machine auth working against a windows AD... nothing concerning a samba acting as PDC... As I said, PEAP auth (both machine and user) work against an AD, the problem only concerns the samba

Problem with Authentication !!!

2006-05-19 Thread emerson
Hello, i have a problem with freeradius, i use freeradius 1.1.1, auth eap/tls/ttls with mysql. My freeradius client is a Ovislink wl5460-AP. The problem is, my ap authenticate ok, but the clients linked on AP, it`s associated, but not log this, on freeradius, and any user, i`m tryng to use, it`

Re: freeradius upgrade

2006-05-19 Thread Giuseppe Parlato
ok for going back to the previous versiona but when I try to uninstall, make uninstall, I get "No rule to make target". I hope I do not have to uninstall freeradius anyway! thank you Giuseppe - Original Message - From: "Guy Davies" <[EMAIL PROTECTED]> To: "Giuseppe Parlato" <[EMAIL

(no subject)

2006-05-19 Thread Alhagie Puye
unsubscribe This message (including any attachments) is confidential, may be privileged and is only intended for the person to whom it is addressed. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or

Re: debugging mode

2006-05-19 Thread Giuseppe Parlato
maybe I found the solution looking at the wiki guide: radiusd -sfxxyz -l stdout does it use much system resource? Giuseppe - Original Message - From: Giuseppe Parlato To: FreeRadius users mailing list Sent: Friday, May 19, 2006 11:51 AM Subject: debugging mode Hi, I want to look at

Re: freeradius upgrade

2006-05-19 Thread Giuseppe Parlato
THANK YOU! really! the last question is.. if something goes wrong can I go back to the previous version in some way? and if I have to remove and install Freeradius from the beginning how can I eventually remove it? Giuseppe - Original Message - From: Giuseppe Parlato To: FreeRadius u

Re: max_requests

2006-05-19 Thread Giuseppe Parlato
I guess I just have to change value and restart the service - Original Message - From: "Giuseppe Parlato" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Thursday, May 18, 2006 7:59 PM Subject: Re: max_requests I'll wait :^)) Giuseppe - Original Message - F

debugging mode

2006-05-19 Thread Giuseppe Parlato
Hi, I want to look at Radius managing clients-database queries, however I'm quite afraid to crash my linux enabling debugging with radiusd -X command (or maybe I should do that at night). There is no other way to see Radius "actions"..not log. I want to learn more.   Thanks     Giuseppe - L

Re: Trying to configure with --prefix causes install to fail

2006-05-19 Thread Nicolas Baradakis
Glenn Swonk wrote: > When I configure with the following: > > ./configure --prefix=/Radius > make all > make install > > the 'make install' fails. > > Any ideas? It's a known bug, and it'll be fixed in 1.1.2. http://bugs.freeradius.org/show_bug.cgi?id=354 -- Nicolas Baradakis

Re: limit upload and download speed for each user

2006-05-19 Thread Mordor Networks
On 5/17/06, Terry J Fike Jr <[EMAIL PROTECTED]> wrote: > does anyone knows how to limit upload/download speed for each user in > "user" file ? Rate_Limit_Rate = 137, Rate_Limit_Burst = 15000, Police_Rate = 137, Police_Burst = 15000, Rate_Limit aprox= downloadPolice_

Re: LDAP check attributes

2006-05-19 Thread Antonio Matera
Hi! thanks for the answer. The problem is that I haven't set an EAP-Type in my configuration. Can it be an "automatic" configuration of PEAP? In my conf files I haven't an EAP-Type entry. Bye Antonio on 18/05/2006 18.41 Alan DeKok said the following: Antonio Matera <[EMAIL PROTECTED]> wrote

acct_users & scripts working.

2006-05-19 Thread MINODIER David RD-RESA-LAN
Hi all, I went through some problems for triggering the execution of some scripts upon the reception of accounting messages. Clearly, my acct_users file was as below: DEFAULT Acct-Status-Type == Start Exec-Program = "/usr/local/bin/do_start.sh" DEFAULT Acct-Status-Type == Stop Ex

How can I account with Freeradius using mysql DB?

2006-05-19 Thread fangh
freeradius-users,您好! I did things like that above,but after I recompile Asterisk and restart Asterisk Server,when I made a call,the radius server couldn't receive request messages. I also can not find dictionary.asterisk file after I recompile asterisk,why? And how can I get