AW: AW: AW: FreeRadius - Setting IP addresses

2006-08-11 Thread Rheindorf Jan
I created them by myself. Dont know if they are created by radiusd. :D greez Jan ** Jan Rheindorf Netzwerktechnik -- Informationstechnologiezentrum der SPÖ Windmühlgasse 26 1060 Wien Tel.: +43 1 534 27 456 Email.: [EMAIL PROT

Autoreply: AW: AW: AW: FreeRadius - Setting IP addresses

2006-08-11 Thread gparlato
Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a [EMAIL PROTECTED] oppure a [EMAIL PROTECTED] Cordiali Saluti Giuseppe Parlato Area Network mailto:[EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.h

RE: Mysql procedure and freeradius

2006-08-11 Thread Jurgen van Vliet
Hi Alesha, I had SP running with 1.1.1 before I upgraded, should work too. Regards, Jurgen -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Alesha Verzonden: vrijdag 11 augustus 2006 5:50 Aan: FreeRadius users mailing list Onderwerp: Re: Mysql procedure

Re: Does Freeradius support IAPP (802.11f)??

2006-08-11 Thread zhu yunwu
  Thank you for your help.  I have another question: 1) does the  radius server provided by windows 2003 support the IAPP  (802.11F)? if  yes, how to configure it? 2) Is IAPP function in hostapd able to work properly without further development?   On 8/11/06, Alan DeKok <[EMAIL PROT

How modify users file?

2006-08-11 Thread 나종현
    I want to add user & password in Auth-type Local.   How modify users-file?   is there routine for modifing file?   Help me please. ☞ [파란독점] 무협, 액션 인기만화 총출동! 월~금 매일 신작 업데이트! ☜

installation dirs on debian

2006-08-11 Thread YvesDM
Hi,Just starting with freeradius.I'm confused about installation directories.I'm trying to install freeradius on debian stable.When I install using apt-get (installs 1.0.2 currently), I get freeradius installed in /etc/freeradius. When I install the same version using the tar.gz it gets installed i

Re: Does Freeradius support IAPP (802.11f)??

2006-08-11 Thread David Mitton
One should be aware that 802.11f has been deprecated by the IEEE. To use it requires support in all your Access Points and the RADIUS server(s). Windows IAS certainly does not support it. Using the hostap only helps if you are using that software for your APs.  And it says "minimal".  Exactly what

Re: installation dirs on debian

2006-08-11 Thread Stefan Winter
> Can someone point me to the right direction? There's a configure switch that allows you to specify the configuration directory. Stefan -- Stefan WINTER RESTENA Foundation - Réseau Téléinformatique de l'Education Nationale et de la Recherche R&D Engineer 6, rue Richard Coudenhove-Kalergi L

Re: Does Freeradius support IAPP (802.11f)??

2006-08-11 Thread Alan DeKok
"zhu yunwu" <[EMAIL PROTECTED]> wrote: > 1) does the radius server provided by windows 2003 support the IAPP ( > 802.11F)? if yes, how to configure it? Go ask Microsoft. > 2) Is IAPP function in hostapd able to work properly without further > development? Go ask the hostap devel

AW: framed ip in raddacct

2006-08-11 Thread Rheindorf Jan
Hello Jan (Talking to myself :D ) Solved this issue. Tried to force UPDATE-Packets with Acct-Interim-Interval, but my cisco NAS seemed to ignore this. I dont know why. This Attribute should be supported since IOS 12.1. I could force the Cisco NAS to send UPDATE PAckets with the following command

Re: installation dirs on debian

2006-08-11 Thread Stephen Gran
On Fri, Aug 11, 2006 at 04:00:49PM +0200, YvesDM said: > Hi, > > Just starting with freeradius. > I'm confused about installation directories. > I'm trying to install freeradius on debian stable. > When I install using apt-get (installs 1.0.2 currently), I get freeradius > installed in /etc/freera

Re: installation dirs on debian

2006-08-11 Thread Alan DeKok
YvesDM <[EMAIL PROTECTED]> wrote: > When I install using apt-get (installs 1.0.2 currently), I get freeradius > installed in /etc/freeradius. > When I install the same version using the tar.gz it gets installed in > /usr/local/etc/raddb/ If you're building on debian, there is a "debian" director

Re: installation dirs on debian

2006-08-11 Thread YvesDM
On 8/11/06, Stefan Winter <[EMAIL PROTECTED]> wrote: > Can someone point me to the right direction?There's a configure switch that allows you to specify the configurationdirectory.StefanIndeed, I just noticed. I posted a little to  fast, sorry. Many tnxYves - List info/subscribe/unsubscribe? See

NTLM Authentication and send NAS-IP-Address param.

2006-08-11 Thread Domingo Antonio
Hello, I'm using poptop to authenticate in freeradius. Freeradius is autenticating on a Active Directory using NTLM and it is working fine. (MS-CHAPv2 + MPPE 128bits ) But, I would like to fix ip address by username in my vpn connection. I know that "NAS-IP-Address" is t

Re: Freeradius & Oracle

2006-08-11 Thread Peter Nixon
29M oracle-instantclient-basic-10.1.0.4-1.i386.rpm :-) -Peter On Wed 02 Aug 2006 15:42, Brian Atkins wrote: > Peter & Dennis, > > Thanks for the quick responses. I now understand why is wasn't just > 'there' after installing Freeradius. And, judging from the other things > that I've read, even i

Appending attributes post proxy

2006-08-11 Thread Peter Nixon
Hi Guys I have the following in the "users" file which works great: DEFAULT Framed-Protocol == PPP Framed-IP-Netmask = 255.255.255.255, Fall-Through = Yes I want to do exactly the same thing but for Access Accept packets that I am proxying from downstream servers. We are already

Re: Appending attributes post proxy

2006-08-11 Thread Alan DeKok
Peter Nixon <[EMAIL PROTECTED]> wrote: > We are already using "preproxy_users" to > modify packets before we send them to downstream servers but I don't see > any "postproxy_users" file :-( It's in the CVS head, for 2.0. > Whats the easiest way to do this? The rewrite module? Is there any reaso

Re: NTLM Authentication and send NAS-IP-Address param.

2006-08-11 Thread Alan DeKok
"Domingo Antonio" <[EMAIL PROTECTED]> wrote: > Is it possible to send NAS-IP-Address parameter when I'm using NTML > authenticantion? No. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/uns

modifying an accounting-response

2006-08-11 Thread Colm Ennis
hi, i looked through the docs and mailing list but couldnt find any information on this... if i missed something id appreciate a pointer! the bas im using will modify a users bandwidth if the appropriate attributes are included in an accounting-response packet. is there any way of doing this i

Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Alan DeKok
http://www.apple.com/server/macosx/leopard/more.html What they don't say on that page is that FreeRADIUS is the server of choice. This means that in 2007, there will probably be 10's of 1000's of additional installations of FreeRADIUS. Once Leopard comes out, I think I'll update the main w

Re: Change RAD_REPLY item in rlm_perl, not add a new pair

2006-08-11 Thread Alex French
Hi,Does anyone know if anything was done on the issue below? I'm looking for this functionality too, and I'd prefer not to have to recompile the module if the feature is available in HEAD or similar (although I can't see that...). Thanks,AlexOn 22/06/06, Kenneth Marshall <[EMAIL PROTECTED]> wrote:

Re: modifying an accounting-response

2006-08-11 Thread Alan DeKok
"Colm Ennis" <[EMAIL PROTECTED]> wrote: > the bas im using will modify a users bandwidth if the appropriate > attributes are included in an accounting-response packet. That's decidedly non-standard. > is there any way of doing this in freeradius other than hacking > away at the code? Nope.

Re: NTLM Authentication and send NAS-IP-Address param.

2006-08-11 Thread Stefan Winter
Hi, > But, I would like to fix ip address by username in my vpn > connection. I know that "NAS-IP-Address" is the way, but where can I set > this parameter? No, that's not the way. You want to send the attribute Framed-IP-Address in your Access-Accept. Add for each user in the users file

Re: Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Stephan Budach
Hi folks, now thats coincidence! I was just up to install FreeRADIUS on one of our Mac OS X 10.4 Servers and was about seeking help in doing so. Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x? Thanks, Stephan Am

Re: Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Stefan Winter
Wow! Congratulations! The only problem with this is: expect an incredible increase of number of questions on this list in 3... 2... 1... Stefan -- Stefan WINTER Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche - Ingénieur de recherche 6, rue Richard Co

Re: Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Alan DeKok
Stefan Winter <[EMAIL PROTECTED]> wrote: > Congratulations! The only problem with this is: expect an incredible > increase of number of questions on this list in 3... 2... 1... In April or so. And I hope to have my book done by then, including a chapter on Leopard. Alan DeKok. -- http://de

Re: Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Alan DeKok
Stephan Budach <[EMAIL PROTECTED]> wrote: > Since I do not want to wait until 2007, is there any resource that > shows me how to compile FreeRADIUS on Mac OS X 10.4.x? Download, configure, and make? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deploy

Re: installation dirs on debian

2006-08-11 Thread YvesDM
On 8/11/06, Stephen Gran <[EMAIL PROTECTED]> wrote: Take a look at the file debian/rules in the tarball.  It is the Makefilefor building debian packages from the tarball.  Several options arepassed to ./configure to make it install various directories in their various places.  That should give you

Re: Authenticate users from multiple realms on the same NAS

2006-08-11 Thread Alan DeKok
Scott Lambert <[EMAIL PROTECTED]> wrote: > I was thinking about putting everything into mysql/postgresql databases. That gets a little harder, because you effectively have 3 passwords for the user, and want any one of them to work. Th eserver sn't really set up to do that right now... It cou

Re: installation dirs on debian

2006-08-11 Thread YvesDM
On 8/11/06, Alan DeKok <[EMAIL PROTECTED]> wrote: YvesDM <[EMAIL PROTECTED]> wrote:> When I install using apt-get (installs 1.0.2 currently), I get freeradius> installed in /etc/freeradius.> When I install the same version using the tar.gz it gets installed in> /usr/local/etc/raddb/  If you're bui

Re: Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Brad Lachel
After much struggling, I discovered darwinports. http:// www.opendarwin.org It installed freeradius with very little effort and it works great. On Aug 11, 2006, at 1:05 PM, Stephan Budach wrote: Hi folks, now thats coincidence! I was just up to install FreeRADIUS on one of our Mac OS X

Kill Users Connection

2006-08-11 Thread fvt3
Hi, Is there a way to kill a user connection? I did some reading and I came across radkill. Can you use radkill with radius? If you can, where can you download ? Thanks in advance ... __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam

Re: Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Stephan Budach
Hi Alan, he he, I did that already. On my MacBook Pro, I got some errors about some libraries, which made try again on a PPC machine. configure and make were successful, but upon installing, there was some error about installing the libraries. Install complained about a missing directory

RES: NTLM Authentication and send NAS-IP-Address param.

2006-08-11 Thread Domingo Antonio
Stefan, Your tip is rigth!! ;) Also we need to add "Auth-Type := MS-CHAP" in /etc/raddb/users, like this: curso01 Auth-Type := MS-CHAP Framed-IP-Address = 192.168.27.10, Framed-IP-Netmask = 255.255.255.0 And the password authenti

Re: Kill Users Connection

2006-08-11 Thread Matt Dunkin
All depends on the gateway/router. What are using? -Matt Dunkin fvt3 wrote: Hi, Is there a way to kill a user connection? I did some reading and I came across radkill. Can you use radkill with radius? If you can, where can you download ? Thanks in advance ... __

Re: Apple announces FreeRADIUS in Mac OSX Leopard

2006-08-11 Thread Stephan Budach
Hmm, Darwinports is just in the stage of going dark, as it is stated on the website, but I will give it a try. Thanks, Stephan Am 11.08.2006 um 21:10 schrieb Brad Lachel: After much struggling, I discovered darwinports. http:// www.opendarwin.org It installed freeradius with very little ef

Radius Dial Up Admin

2006-08-11 Thread Faisal Butt
Hi, I am installing FreeRadius 1.12 with Dial Up Admin...Can anyone provide or hint the procedure for Dial Up admin? Thanks. Best Regards, M. Faisal - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

mySQL auth

2006-08-11 Thread Keith Woodworth
We are consolidating servers and moving from a BSD/OS and ICRadius setup and auth'ing via passwd file to FreeBSD. I have run into an issue with authenticating and how I should do it. Our old setup had a web interface designed 7 yrs ago, written in C, which the developer is no longer around and m

Re: installation dirs on debian

2006-08-11 Thread Francois-Xavier GAILLARD
Le Fri, Aug 11, 2006 at 08:56:34PM +0200, YvesDM ecrivait: > On 8/11/06, Stephen Gran <[EMAIL PROTECTED]> wrote: > > > Take a look at the file debian/rules in the tarball. It is the Makefile > for building debian packages from the tarball. Several options are > passed to ./configure

Re: RES: NTLM Authentication and send NAS-IP-Address param.

2006-08-11 Thread Alan DeKok
"Domingo Antonio" <[EMAIL PROTECTED]> wrote: > Also we need to add "Auth-Type := MS-CHAP" in /etc/raddb/users, like > this: No, you don't. If you configure ntlm_auth in the mschap module, the default configuration of the server is to run the mschap module, and thus ntlm, when it receives

Re: Authenticate users from multiple realms on the same NAS

2006-08-11 Thread Francois-Xavier GAILLARD
Le Fri, Aug 11, 2006 at 02:48:33PM -0400, Alan DeKok ecrivait: > Scott Lambert <[EMAIL PROTECTED]> wrote: > > I was thinking about putting everything into mysql/postgresql databases. > > That gets a little harder, because you effectively have 3 passwords > for the user, and want any one of them

Re: mySQL auth

2006-08-11 Thread Alan DeKok
Keith Woodworth <[EMAIL PROTECTED]> wrote: > Will FreeRadius auth via mySQL using the unix crypt? No... but it will read crypt'd passwords from the DB, and use them for authentication. I don't know anything about the ICRadius schema. The FreeRADIUS schema is pretty rigid, so integrating the

Re: mySQL auth

2006-08-11 Thread Keith Woodworth
On Fri, 11 Aug 2006, Alan DeKok wrote: |->Keith Woodworth <[EMAIL PROTECTED]> wrote: |->> Will FreeRadius auth via mySQL using the unix crypt? |-> |-> No... but it will read crypt'd passwords from the DB, and use them |->for authentication. Thats basically what I want, but didnt know now to expr

Fw: to install Radius without CA

2006-08-11 Thread Aldo Carranza
  - Original Message - From: Aldo Carranza To: freeradius-users@lists.freeradius.org Sent: Wednesday, August 09, 2006 7:17 PM Subject: to install Radius without CA I want know how to install Radius without CA, only that Users authenticate, Without interacting with the client.   Tha

Re: Authenticate users from multiple realms on the same NAS

2006-08-11 Thread Alan DeKok
Francois-Xavier GAILLARD <[EMAIL PROTECTED]> wrote: > It's a bit tricky, any easier way Alan ? I'm not sure... the main problem is that multiple people with the same name are dialing into the same NAS equipment. So they really are the "same" person, but with many possible valid passwords. It

Re: Authenticate users from multiple realms on the same NAS

2006-08-11 Thread Francois-Xavier GAILLARD
Le Fri, Aug 11, 2006 at 06:09:21PM -0400, Alan DeKok ecrivait: > Francois-Xavier GAILLARD <[EMAIL PROTECTED]> wrote: > > It's a bit tricky, any easier way Alan ? > > I'm not sure... the main problem is that multiple people with the > same name are dialing into the same NAS equipment. So they re

Re: Authenticate users from multiple realms on the same NAS

2006-08-11 Thread Scott Lambert
On Sat, Aug 12, 2006 at 01:06:38AM +0200, Francois-Xavier GAILLARD wrote: > Le Fri, Aug 11, 2006 at 06:09:21PM -0400, Alan DeKok ecrivait: > > Francois-Xavier GAILLARD <[EMAIL PROTECTED]> wrote: > > > It's a bit tricky, any easier way Alan ? > > > > I'm not sure... the main problem is that multi

Re: installation dirs on debian

2006-08-11 Thread Stephen Gran
On Fri, Aug 11, 2006 at 11:17:23PM +0200, Francois-Xavier GAILLARD said: > - fakeroot dpkg-buildpackage -b -uc to be pedantic: dpkg-buildpackage -rfakeroot -b -uc only uses fakeroot when it is necessary to have pretend root, instead of all the time. It makes it easier to run clean and so forth.

Re: Authenticate users from multiple realms on the same NAS

2006-08-11 Thread Alan DeKok
Scott Lambert <[EMAIL PROTECTED]> wrote: > Would I be able to setup three mysql entries in the way that Alan > suggested for the LDAP setup, but with a different query specified for > each realm which includes the realm in the selection criteria of query? If the users are logging in with differe