Re: configure options

2006-10-23 Thread Peter Nixon
On Sun 22 Oct 2006 04:43, Seferovic Edvin wrote: Hello, wouldn't it be useful to publish all configure options ( like modules options ) in WIKI ? Yes. Thats a great idea. At present there is several hundred pages in the wiki, and most of them were put there by either myself or Keven (Hi

how can I contribute ( configure options )

2006-10-23 Thread Seferovic Edvin
Sure. How can I help? English is not my native language, but I don't see that as a problem. The only problem I see ( at the moment ) is that I am not familiar with all modules of freeradius and their configure options ( Alan notices that some of them don't even have configure options etc ). I

Re: how to use != == =~ and !~ on multiple keys?

2006-10-23 Thread Joe Maimon
Mike wrote: On 10/22/06, Joe Maimon [EMAIL PROTECTED] wrote: I have the following keys in a radius request: Cisco-AVPair = src-codec=g729 g711A64k g711U64k g7231 gsmFR NS:iLBC-15k2 Cisco-AVPair = dst-codec=g729 When using the != == =~ and !~ conditionals with

rlm_krb5

2006-10-23 Thread Stieven . Struyf
All,I am implementing 802.1x on our network. The easiest solution to do this is by using "reversible passwords" in active directory(and using ntlm_auth), but our windows guys don't want to allow this. Only other way is by using kerberos. I found a link on the internet

Two querys for accounting_stop_query (sql.conf)

2006-10-23 Thread micobros
Hello, Im running freeradius with mysql module. How could I add a second query to the statement accounting_stop_query in sql.conf? I found this: http://lists.cistron.nl/pipermail/freeradius-users/2005-November/048711.html So I add a section to sql.conf (myTEST {}) and copy

Hints, Attr_rewrite - Add session timeout with Framed IP?

2006-10-23 Thread Breuer Nicolas
Hello I'm looking for a solution to add in the accept packets a session timeout value when framed ip address is assigned in the users file. I tried to add hints rules but doesn't seems to work. I also tried to rewrite the packet : not works. Can you help me to do this ? - List

Weird behaviour of the windows client

2006-10-23 Thread Jack Daniels
Hi there, I've configured freeradius to do ms-chap and using wireless. When I type in my credentials, freeradius lets me in and everybody is happy, but when I check the checkbox Automatically use my Windows logon name and password (and domain if any), ntlm_auth responds with a logon failure.

Re: how can I contribute ( configure options )

2006-10-23 Thread James Wakefield
Seferovic Edvin wrote: Sure. How can I help? English is not my native language, but I don't see that as a problem. The only problem I see ( at the moment ) is that I am not familiar with all modules of freeradius and their configure options ( Alan notices that some of them don't even have

RE: SQLcounter patch - Addition of reply-attribute

2006-10-23 Thread Jonathan De Graeve
Jonathan De Graeve [EMAIL PROTECTED] wrote: I just made a patch against 1.1.3 for the SQLcounter module. Please submit patches on bugs.freeradius.org. It's easier to manage them that way. As requested: http://bugs.freeradius.org/showattachment.cgi?attach_id=187 -- Jonathan De Graeve

freeradius+hpidm+cisco

2006-10-23 Thread Stieven . Struyf
All, We have an hp infrastructure and use identity driven management to enforce some additional rights to users(as forcing vlan assignment). We have a mixed wireless environment with hp procurve and cisco(1200) For hp access points we don't have any problem, but when trying with cisco devices

RE: freeradius+hpidm+cisco

2006-10-23 Thread Jonathan De Graeve
All, We have an hp infrastructure and use identity driven management to enforce some additional rights to users(as forcing vlan assignment). We have a mixed wireless environment with hp procurve and cisco(1200) For hp access points we don't have any problem, but when trying with cisco

problem with SQL Redundant

2006-10-23 Thread Guido
Hi list, I'm using Freeradius with 2 mysql redundant for accounting. redundant { sql-instance1 sql-instance2 } The problem: when from NAS arrive an 'Stop packet with zero session length', freeradius returns noop for request 1 in sql-instance1.This way, freeradiustry to update in

Re: how to use != == =~ and !~ on multiple keys?

2006-10-23 Thread Mike
On 10/23/06, Joe Maimon [EMAIL PROTECTED] wrote: On 10/22/06, Joe Maimon [EMAIL PROTECTED] wrote: I have the following keys in a radius request: Cisco-AVPair = src-codec=g729 g711A64k g711U64k g7231 gsmFR NS:iLBC-15k2 Cisco-AVPair = dst-codec=g729 When using the

RE: freeradius+hpidm+cisco

2006-10-23 Thread Stieven . Struyf
Jonathan, I removed the hp module to check if the problem went away(which it did). Afterwards i reenabled it to take traces, but it doesn't segfaults anymore. Now i use radius to assigns vlan for cisco and use hp idm for vlan assigment for hp. Problem seems solved, but i don't want to install

RE: freeradius+hpidm+cisco

2006-10-23 Thread Stieven . Struyf
[EMAIL PROTECTED] wrote on 10/23/2006 02:46:51 PM: All, We have an hp infrastructure and use identity driven management to enforce some additional rights to users(as forcing vlan assignment). We have a mixed wireless environment with hp procurve and cisco(1200) For hp access points

Re: rlm_krb5

2006-10-23 Thread Alan DeKok
[EMAIL PROTECTED] wrote: ... Please don't send HTML to the list. I am implementing 802.1x on our network. The easiest solution to do this is by using reversible passwords in active directory That isn't necessary. Only other way is by using kerberos. That's impossible. Kerberos

Re: problem with SQL Redundant

2006-10-23 Thread Alan DeKok
Guido [EMAIL PROTECTED] wrote: How can I set up freeradius for update ONLY sql-instance1 in case that arrive 'Stop packet with zero session length'?=20 Read doc/configurable_failover. It explains this. Alan DeKok. -- http://deployingradius.com - The web site of the book

Re: freeradius+hpidm+cisco

2006-10-23 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Just for your info the contents of both hpidm config files: [EMAIL PROTECTED] raddb]# cat hpidm.post-auth.conf Post-Auth-Type REJECT{ hpidm } hpidm [EMAIL PROTECTED] raddb]# cat hpidm.modules.conf hpidm{ version = 1.0 } This module is not

Server stopped responding, throwing multiple SSL-related errors

2006-10-23 Thread Ben Beuchler
I'm running FreeRADIUS 1.1.2 on Ubuntu. This morning one of the two servers stopped answering requests. The radius log contained thousands of lines like these: Mon Oct 23 12:32:56 2006 : Error: TLS Alert write:fatal:illegal parameter Mon Oct 23 12:32:56 2006 : Error: TLS_accept:error in

RE: Server stopped responding, throwing multiple SSL-related errors

2006-10-23 Thread King, Michael
Sounds very similar to my thread titled SSL_read failed in a system call from last week. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ben Beuchler Sent: Monday, October 23, 2006 2:06 PM To: FreeRadius users mailing list Subject: Server stopped

Re: Server stopped responding, throwing multiple SSL-related errors

2006-10-23 Thread Alan DeKok
Ben Beuchler [EMAIL PROTECTED] wrote: I'm running FreeRADIUS 1.1.2 on Ubuntu. This morning one of the two servers stopped answering requests. The radius log contained thousands of lines like these: Mon Oct 23 12:32:56 2006 : Error: TLS Alert write:fatal:illegal parameter Mon Oct 23

Re: Server stopped responding, throwing multiple SSL-related errors

2006-10-23 Thread Ben Beuchler
On 10/23/06, King, Michael [EMAIL PROTECTED] wrote: Sounds very similar to my thread titled SSL_read failed in a system call from last week. Yeah... The reason I opened a new thread rather then just appending to yours was the new error that I didn't see in your log snippets:

RE: Windows Vista doing PEAP

2006-10-23 Thread Dourty, Brian R. \(IATS\)
Got this patch to work with 1.1.3 without seg faulting... I've sent Alan the debug output. Can download it here: http://bengal.missouri.edu/~dourtyb/freeradius/vista.patch Index: src/modules/rlm_eap/rlm_eap.c === RCS file:

ssl header file skips from test

2006-10-23 Thread Kartthik Raghunathan
When i try to configure freeradius, the ssl header file skips from the test. As it skips, the rlm_eap_tls fails which i need it for implementation. -bash-3.00# ./configure --enable-slapd=no -enable-slurpd=no --with-threads=no

[RE]Freeradius-Users Digest, Vol 18, Issue 98

2006-10-23 Thread Kartthik Raghunathan
While configuring freeradius on RHEL 4, got the below error message: ./configure --enable-slapd=no -enable-slurpd=no --with-threads=no > conffr.log configure: warning: snmpget not found - Simultaneous-Use and checkrad.pl may not