Re: RADIUS-LDAPv3.schema & db_mysql.sql

2006-07-03 Thread Alan DeKok
"Rohaizam Abu Bakar" <[EMAIL PROTECTED]> wrote: > I noticed that from Freeradius1.1.1 onwards, both RADIUS-LDAPv3.schema & > db_mysql.sql NOT included in source dir? Looking for latest schema since i'm > currently would like to upgrade my ldap. doc/examples Alan DeKok. - List info/subscrib

RE: ntlm_auth and clear-text passwords

2006-07-03 Thread King, Michael
-Original Message- On Behalf Of [EMAIL PROTECTED] Users telnet the switch, therefore a clear-text password will be sent. Just a completely left field question. Any particular reason you have chosen not to enable SSH on that switch? It's in the IOS (Assuming you have the correct IOS

RADIUS-LDAPv3.schema & db_mysql.sql

2006-07-03 Thread Rohaizam Abu Bakar
I noticed that from Freeradius1.1.1 onwards, both RADIUS-LDAPv3.schema & db_mysql.sql NOT included in source dir? Looking for latest schema since i'm currently would like to upgrade my ldap. --haizam - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ntlm_auth and clear-text passwords

2006-07-03 Thread Michael Griego
Something is different between your test ntlm_auth and the ntlm_auth you're running under FreeRADIUS. Your test may return OK, but under FreeRADIUS, its returning NO SUCH USER. In any case, since you're doing cleartext authentication in this case, you could use LDAP authentication against

Re: Username in MySQL with regexp

2006-07-03 Thread Alan DeKok
christian meutes <[EMAIL PROTECTED]> wrote: > iam using FreeRADIUS-1.0.5 with MySQL-Backend. Now i want a username check > with an regexp operator (=~), so that i can match usernames (+1234567(0-9)) > against a regexp of "^\+^1234567" and dont have the need of creating 10 > users which have all

Re: eap/peap-mschap-v2 users file and check items

2006-07-03 Thread Alan DeKok
Sascha Lucas <[EMAIL PROTECTED]> wrote: > The users file for working peap-mschap-v2 looks this way: > > test Auth-Type := EAP, User-Password == "abc123" No, it doesn't. If you did that, you didn't read the documentation. Don't set Auth-Type. It's NOT necesary. And use := for User-Passwo

Re: Diferent Session-Timeout depending on NAS

2006-07-03 Thread Stefan Winter
> For instance, an account has Session-timeout = 600. If the account is > used in Europe Session-timeout = 600, but it is used in Mexico > Session-timeout = 600*2.5 = 1500. > >Yes. Value is modified in execution time. Does someone know any solution > ? Um, sorry. After reading your post agai

question on postauth_query

2006-07-03 Thread Jurgen van Vliet
Title: WANBound Briefpapier Hi people,   I have a question I coulnt find in FAQ/Google, maybe I missed it or maybe I am thinking too difficult, but:   Is it possible to do multiple queries in 1 postauth_query using some sort of IF THEN meganism ?     Like :   postauth_query = {       if

Username in MySQL with regexp

2006-07-03 Thread christian meutes
Hello list, iam using FreeRADIUS-1.0.5 with MySQL-Backend. Now i want a username check with an regexp operator (=~), so that i can match usernames (+1234567(0-9)) against a regexp of "^\+^1234567" and dont have the need of creating 10 users which have all the same reply attributes. The Auth-Ty

Script to archive radacct table

2006-07-03 Thread Barry O'Donovan
Folks, I just wrote a PHP (sorry!) CLI script to archive completed radacct session data that's older than the current month and last month to a separate database. As the radacct table grows in size, INSERTs, UPDATEs and DELETEs take longer as the data and index file sizes grow. SELECTs also take

ntlm_auth and clear-text passwords

2006-07-03 Thread robiwan
Dear all, For AAA-Authenticating on a Cisco Catalyst Switch 3750, i try to use use the ntlm_auth to authenticate users against our Active Directory (domain-name: SOUTH). Users telnet the switch, therefore a clear-text password will be sent. according to an earlier posting http://lists.freerad

eap/peap-mschap-v2 users file and check items

2006-07-03 Thread Sascha Lucas
Hi, I use successfully WinXP with peap-mschap-v2. But I'm unable to enter aditional items in the check list. The users file for working peap-mschap-v2 looks this way: test Auth-Type := EAP, User-Password == "abc123" And I want it also to check for NAS-IP and NAS-Port. Doing local tests (non eap

unsuscribe

2006-07-03 Thread alfonso
    - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Diferent Session-Timeout depending on NAS

2006-07-03 Thread Stefan Winter
>Yes. Value is modified in execution time. Does someone know any solution > ? In your scenario, Session-Time does not need to be calculated at execution time, it is solely dependent on the NAS. The solution I proposed accounts to that. Depending on the NAS IP address, you can enter whatever

Re: Diferent Session-Timeout depending on NAS

2006-07-03 Thread Santiago Balaguer García
Yeah!! Your solution is the easiest one. I did not explain enough well my problem. the session-timeout has to asign depending on the NAS and the remaining time. My goal is sends the value of Session-Timeout attribute once this value had benn multiplied by a factor depending on the NAS. For i