RE: Decreasing connection time (Session-Timeout)

2006-10-24 Thread micobros
In SQLCounter documentation they say This module NEVER does any database INSERTs or UPDATEs. I can in fact grab the time elapsed and all kind of other information. But my main problem is to update my database with the new time. I found that chillispot sends to freeRadius this message when a

Re: freeradius+hpidm+cisco

2006-10-24 Thread Stieven . Struyf
[EMAIL PROTECTED] wrote on 10/23/2006 04:55:32 PM: [EMAIL PROTECTED] wrote: Just for your info the contents of both hpidm config files: [EMAIL PROTECTED] raddb]# cat hpidm.post-auth.conf Post-Auth-Type REJECT{ hpidm } hpidm [EMAIL PROTECTED] raddb]# cat hpidm.modules.conf

Re: rlm_krb5

2006-10-24 Thread Stieven . Struyf
[EMAIL PROTECTED] wrote on 10/23/2006 04:51:59 PM: [EMAIL PROTECTED] wrote: ... Please don't send HTML to the list. i know, but it was related to my question and the info i already gathered. I am implementing 802.1x on our network. The easiest solution to do this is by using

RE: Decreasing connection time (Session-Timeout)

2006-10-24 Thread Santiago Balaguer GarcĂ­a
The best way to update your DB with the new session-timeout value is to CREATE A TRIGGER in your database when a STOP request is sent by your NAS. In this STOP request you have all information you need. I supposed your hotspot has activated accounting option. The option of executing an

RE : Decreasing connection time (Session-Timeout)

2006-10-24 Thread Thibault Le Meur
freeRadius than calls accounting_stop_query located in sql.conf and UPDATES the radacct table and its attributes with all these new values. What I'd like to do now is to execute a personalised sql query right after this default accounting_stop_query so that I could save/modify all

Re: SNMP with Freeradius - Again

2006-10-24 Thread Velikanov
SNMP/SMUX support should not affect the rlm_sql module in any way. See doc/bugs for steps to debug the segfault issue and identify where the program is actually failing. Good Day. I did all the steps in doc/bugs, and this is the result: [EMAIL PROTECTED] freeradius-1.1.3]# gdb

RE: Decreasing connection time (Session-Timeout)

2006-10-24 Thread micobros
However you can instantiate a new sql module in sql.conf: sql my-sql-acct { ... Accounting_stop_query = MY Customized SQL query } Then in you radiusd.conf accounting section: accounting { sql my-sql-acct } I tried this and freeRadius hangs at startup and says my-sql-acct:

RE: Decreasing connection time (Session-Timeout)

2006-10-24 Thread micobros
Using triggers is a good idea too... The problem is that I don't know how to make stored routines. I could learn, but I need this little *demo* station to work for this afternoon :) For now, I'll simply make a little php script executed every 10 minutes to check the radacct table. And subtract

Hints, Attr_rewrite - Add session timeout with Framed IP

2006-10-24 Thread Breuer Nicolas
Hello all, Any others suggestions ? I've made a small script into the rlm _sqlippool to add the session time-out attribue... --- Forwarded message follows --- From: Breuer Nicolas [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org

Re: Decreasing connection time (Session-Timeout)

2006-10-24 Thread Graeme Lee
micobros wrote: Using triggers is a good idea too... The problem is that I don't know how to make stored routines. I could learn, but I need this little *demo* station to work for this afternoon :) What db are you using? If you are using postgresql, you can use this as an example:

sql.conf problem

2006-10-24 Thread Norbert Wegener
In a certain context I want to accept all incoming requests. FreeRADIUS is 1.1.3. I hold the accounts in MySQL. This is, what I have stored in the database for one account: mysql select * from usergroup where UserName='0009';

Problems with freeradius set up

2006-10-24 Thread Mike Pearson
I'm new to the list and I'm having problems getting freeradius to authenticate users. I migrated from an old server running gnu-radius to a new server running freeradius both servers are using mysql. I made sure the tables in mysql match what freeradius required, I also made sure that the

Re: Problems with freeradius set up

2006-10-24 Thread Stefan Winter
Hi, nicely done problem report! My guess is that your tables contain a check item that is not satisfied by the incoming requests. Could you do a SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'mpearson' ORDER BY id (this is one of the SQL statements in the debug output.

cvs issue

2006-10-24 Thread Guilherme Franco
Hello, I'm only seeing cistron on the cvs: FTP directory /pub/radius/CVS-snapshots/ at ftp.freeradius.org Up to higher level directory 10/23/2006 09:10201,051 radiusd-cistron-1.6-snapshot-20061023.tar.gz - List

EAP-TTLS success

2006-10-24 Thread Rafiqul Ahsan
Hi all, I found the issue for below error EAP-request timed out OR EAP-response to an unknown EAP-request --- NAS was not responding with the state attribute received from radius server. As soon as we fixed this at NAS, it went through all the steps required to authenticate an user using

Re: freeradius+hpidm+cisco

2006-10-24 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I hoped that other users on the list are also using idm(as it works as a plugin for (free)radius). It's a plugin supplied by HP, and is not part of FreeRADIUS. Please ask HP for support. The module is not included with FreeRADIUS, therefore discussions about the

Re: rlm_krb5

2006-10-24 Thread Alan DeKok
[EMAIL PROTECTED] wrote: What other setup can you recommend with minimal account administration? Use ntlm_auth. There are any number of HOWTO's on doing this, including the Wiki and my web site. Can you argument why (not) to store password with reversible encryption in AD. Because it

EAP: client certificates and double authentication messages

2006-10-24 Thread Florian Prester
Hi, I am using freeradius successfully, but I still have some questions. Fistly, how can I disable to verify client certificates? Mon Sep 5 12:17:12 2005 : Error: TLS_accept:error in SSLv3 read client certificate A I mean I have disabled the comand in the config-file. But still I get

Re: Problems with freeradius set up

2006-10-24 Thread Alan DeKok
Mike Pearson [EMAIL PROTECTED] wrote: My problems is I can't get the users to authenticate, I pasted the output from radtest and radiusd -X. I can provide any more information that my be needed. Ok... radius_xlat: 'SELECT

Re: sql.conf problem

2006-10-24 Thread Alan DeKok
Norbert Wegener [EMAIL PROTECTED] wrote: In a certain context I want to accept all incoming requests. Ok... mysql select * from radcheck where UserName='0009'; +-+--+--++--+-+ | id | UserName | Attribute|

Re: Problems with freeradius set up

2006-10-24 Thread Mike Pearson
Thanks for the reply Stefan, Here is the output from mysql for the statement below: mysql SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username - = 'mpearson' ORDER BY id - - ; +--+--+--+++ | id | UserName | Attribute | Value | op |

Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it.

2006-10-24 Thread B Thompson
Hi We are seeing a problem with RADIUS accounting from some of our Colubris AP's. We are getting the following errors in /var/log/radius/radius.log :- Tue Oct 24 14:02:59 2006 : Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it. Could someone explain a bit more about what

Re: Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it.

2006-10-24 Thread Alan DeKok
B Thompson [EMAIL PROTECTED] wrote: Tue Oct 24 14:02:59 2006 : Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it. Could someone explain a bit more about what this means and whether it is likely to be a problem with the NAS? The NAS is sending an attribute it's

Re: Problems with freeradius set up

2006-10-24 Thread Mike Pearson
There is an entry for mpearson in my database but not that select statement. What should be in the radgroupreply and the radreply tables? I don't have any data in either of those tables. Thank Mike Alan DeKok wrote: Mike Pearson [EMAIL PROTECTED] wrote: My problems is I can't

RE: Decreasing connection time (Session-Timeout)

2006-10-24 Thread Thibault Le Meur
However you can instantiate a new sql module in sql.conf: sql my-sql-acct { ... Accounting_stop_query = MY Customized SQL query } Then in you radiusd.conf accounting section: accounting { sql my-sql-acct } I tried this and freeRadius hangs at startup and says my-sql-acct: Unknown Module.

Re: Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it.

2006-10-24 Thread B Thompson
On Tue, Oct 24, 2006 at 01:19:29PM -0400, Alan DeKok wrote: B Thompson [EMAIL PROTECTED] wrote: Tue Oct 24 14:02:59 2006 : Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it. Could someone explain a bit more about what this means and whether it is likely to be a

Re: Problems with freeradius set up

2006-10-24 Thread Stefan Winter
+--+--+--+++ | 1118 | mpearson | Password | | == | | 1119 | mpearson | Simultaneous-Use | 1 | == | +--+--+--+++ 2 rows in set (0.29 sec) You want to force the user to only have one login

Re: EAP: client certificates and double authentication messages

2006-10-24 Thread Stefan Winter
Hi again Flo, remember last TNC in Catania? :-) I am using freeradius successfully, but I still have some questions. Fistly, how can I disable to verify client certificates? Mon Sep 5 12:17:12 2005 : Error: TLS_accept:error in SSLv3 read client certificate A This is an error

Re: Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it.

2006-10-24 Thread Alan DeKok
B Thompson [EMAIL PROTECTED] wrote: Looking at the timestamps it would seem that this is the packet which caused the error even though tcpdump shows no Tunnel-Password attribute was present. So, something is definitely odd here. Is there any way to verify this is the offending packet other