Re: free radius ntlm_auth problem

2006-10-09 Thread Andris
2006/10/7, Alan DeKok [EMAIL PROTECTED]: Andris wrote:... Usernames without whitespaces authorize succesfully. When run ntlm_auth manal and write usernames like 'user 1' than work. And i want put a NT group requirment too like a 'Domain Users' ntlm_auth string is:ntlm_auth = /usr/bin/ntlm_auth

Re: rlm_perl CLONE/thread identification ?

2006-10-09 Thread Boian Jordanov
On Sunday 08 October 2006 17:38, Jakub Wartak wrote: I want to obtain unique identified of each CLONE, because the goal is to create DB connection for each CLONE for performance reasons, the DBI object/handle AFAIK shouldn't be shared. Do it like that in main: our $dbh ; and then in CLONE

Multiple users mysql backend

2006-10-09 Thread Collen Blijenberg
I'm still looking for a good solution, authenticating multiple users with the same login name and with mysql as backend. in the mysql table 'radcheck' i have entered the following: UserName Attribute op Value gebruiker Calling-Station-Id ==

Re: Multiple users mysql backend

2006-10-09 Thread James Wakefield
Collen Blijenberg wrote: I'm still looking for a good solution, authenticating multiple users with the same login name and with mysql as backend. in the mysql table 'radcheck' i have entered the following: UserName Attribute op Value gebruiker

Re: Huntgroups, Realms, MySQL

2006-10-09 Thread James Wakefield
Brad McAllister wrote: G'day mate, thanks for the quick reply. I already have this in my radiusd.conf: realm suffix { format = suffix delimiter = @ ignore_default = no ignore_null = no } Have you got suffix in

Re: Multiple users mysql backend

2006-10-09 Thread Collen Blijenberg
G'day Collen, Can you post any and all SQL queries you see in the output of radiusd -X? Cheers, Sure, here they come: i just posted a view, coz it goes on and on, basicly it it saids No matching entry in the database for request from user [gebruiker] if i change the == to := in

Re: free radius ntlm_auth problem

2006-10-09 Thread Alan DeKok
Andris [EMAIL PROTECTED] wrote: I tryied sigle quotes, but some problem. :( OK. It seems to be a bug in 1.1.x. Try checking out the CVS branch of -r branch_1_1. It should work there. Alan DeKok. -- http://deployingradius.com - The web site of the book

Reversibly encrypted passwords in SQL

2006-10-09 Thread Stefan Winter
Hello, is there any way of using reversibly encrypted passwords together with a mySQL backend? Currently, our passwords are stored as User-Password in clear text. I'd like to move on to using something like Crypt-Password := {algo-prefix}blablabla with an algorithm that encrypts reversibly. I

Re: Huntgroups, Realms, MySQL

2006-10-09 Thread Brad McAllister
Yes, the suffix is in the authorize { } section as well. I was just following the examples with the Auth-Type, I removed them from the DB, but end up with the same results. -- Brad McAllister DLS Internet Services p. 847.854.4799 x.232 [EMAIL PROTECTED] On Oct 9, 2006, at 5:26 AM, James

RE: EAP-TLS Certificate problems.

2006-10-09 Thread Brian vb
Recreated certs, same issue came with the Issuer field. XPExtensions are used. Password is the same in this file an what Freeradius has just changed to protect it. Here is the batch file I'm using to create the certs. I don't see anything amiss between it and the page you sent.. any ideas?

Re: Reversibly encrypted passwords in SQL

2006-10-09 Thread Jan Mulders
I'd also like to do this - although non-reversable encryption (like MD5) would suit us - eg, password is encrypted in the table, and is encrypted and compared when a user's password is checked. How is encryption meant to be done in the MySQL module at all? Jan On 09/10/06, Stefan Winter [EMAIL

Debian stableFreeradius 1.0.2 + IOdbc + FreeTDS + MSSQL Segmentation fault.

2006-10-09 Thread Angelo Compagnucci
Hi to all! I've a GREAT problem ... Freeradius exits abnormally with a segmentation fault error when user logoff ... This is the log: ... Processing the preacct section of radiusd.conf modcall: entering group preacct for request 2 modcall[preacct]: module preprocess returns noop for request

Re: Reversibly encrypted passwords in SQL

2006-10-09 Thread Rob Shepherd
Jan Mulders wrote: I'd also like to do this - although non-reversable encryption (like MD5) would suit us - eg, password is encrypted in the table, and is encrypted and compared when a user's password is checked. How is encryption meant to be done in the MySQL module at all? You could use

Re: Huntgroups, Realms, MySQL

2006-10-09 Thread Brad McAllister
I got it working! I had to put suffix before preprocess in the authorize { } section -- Brad McAllister DLS Internet Services p. 847.854.4799 x.232 [EMAIL PROTECTED] On Oct 9, 2006, at 9:18 AM, Brad McAllister wrote: Yes, the suffix is in the authorize { } section as well. I was just

RE: EAP-TLS Certificate problems.

2006-10-09 Thread Jason-Wittlin-Cohen
Message: 7 Date: Mon, 9 Oct 2006 11:26:51 -0400 From: Brian vb [EMAIL PROTECTED] Subject: RE: EAP-TLS Certificate problems. To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=us-ascii Recreated

RE: EAP-TLS Certificate problems.

2006-10-09 Thread Jason-Wittlin-Cohen
Date: Mon, 9 Oct 2006 11:26:51 -0400 From: Brian vb [EMAIL PROTECTED] Subject: RE: EAP-TLS Certificate problems. To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=us-ascii Recreated certs, same

Re: Reversibly encrypted passwords in SQL

2006-10-09 Thread Alan DeKok
Stefan Winter [EMAIL PROTECTED] wrote: is there any way of using reversibly encrypted passwords together with a mySQL backend? Not really, no. But it shouldn't be too hard to add... with an algorithm that encrypts reversibly. I failed to see a list of supported algorithms in the docs, a

Re: Reversibly encrypted passwords in SQL

2006-10-09 Thread Alan DeKok
Jan Mulders [EMAIL PROTECTED] wrote: I'd also like to do this - although non-reversable encryption (like MD5) would suit us - eg, password is encrypted in the table, and is encrypted and compared when a user's password is checked. This is already supported in 1.1.x, and is a little easier in

Re: One connection per username

2006-10-09 Thread James Wakefield
Ali Jawad wrote: Hi How can I limit one connection per username..I.e. I do not want to allow multiple users to login using the same username password combination. Hi Ali, Your NAS will have to support it, but the Simultaneous-Use attribute may allow you to do this. Cheers, -- James