Re: Survey Results are in.

2006-10-31 Thread Luca Corti
On Mon, 2006-10-30 at 17:42 -0500, Alan DeKok wrote: > Something called "documentation" beat out the next nearest response > by nearly 2:1. We'll see if we can work on that. Which was the next nearest response? thanks Luca - List info/subscribe/unsubscribe? See http://www.freeradius.org/l

Re: FreeRadius not stable on my server

2006-10-31 Thread Nataniel Klug
Hi Alan, Thank you again for helping me, I will try to explain myself bellow: Alan DeKok escreveu: Nataniel Klug <[EMAIL PROTECTED]> wrote: I am having a problem: sometimes my freeradius get a little crazy and close some connections and other times it just says that the client is still con

CVS problem

2006-10-31 Thread Guilherme Franco
Hello, I'm trying to do a cvs checkout but it won't let me: cvs -d :pserver:[EMAIL PROTECTED]:/source login Logging in to :pserver:[EMAIL PROTECTED]:2401/source CVS password: anoncvs cvs -d :pserver:[EMAIL PROTECTED]:/source checkout radiusd It just hangs in the checkout part... Any problems

Re: RE : Freeradius is mad ! Or me...

2006-10-31 Thread benodilo
You are in the good The problem is Selinux ... The user "raduisdd" is not authorized to launch the freeraduis. so freeradius and me are not made... is Selinux ;) Thks ! Selon Thibault Le Meur <[EMAIL PROTECTED]>: > > Why the command "radiusd -A" work fine and not > > "/etc/init.d/raduisd start

PROBLEM - Proxy + SQLIPPOOL + Framed-IP-Address

2006-10-31 Thread Guilherme Franco
Hi, Doing proxy, freeradius always ignore the static Framed-IP-Address set in radreply table and sets the random SQLIPPOOL instead. Without proxy, SQLIPPOOL won't assign an IP from the pool and grabs the Framed-IP-Address correctly. I guess it's because the Framed-IP-Address = 255.255.255.254 c

RE: Machine Accounts against AD

2006-10-31 Thread King, Michael
> -Original Message- > > I'm not sure 1.0.4 had that fix in the rlm_mschap module. If > you need to use 1.0.4 for some reason, you may have to > backport the patch from a later version of the module. > > --Mike > Awww Man... I went back to 1.0.4 because 1.1.2 and 1.1.3 kept cras

How to configure USERS file to assign the VLAN ID according to LDAP group name?

2006-10-31 Thread richard Bai
Hi Everyone,   I configure a Freeradius server working with LDAP. The group name in LDAP is used as the VLAN ID issued by radius too. This is my users file configuration: DEFAULT  Group == "1" Auth-Type = LDAP,     Tunnel-Type = 13,     Tunne

Re: FreeRadius slower than SBR

2006-10-31 Thread Alan DeKok
<[EMAIL PROTECTED]> wrote: > I'm proposing a FreeRadius solution for 802.1x authentication of Wired > client based on Client certificates, a CRL lookup, and vlan assoociation > from Active Directory. FreeRADIUS doesn't do CRL lookups right now (i.e. OCSP), but it's probably not too hard to add.

Re: Survey Results are in.

2006-10-31 Thread Alan DeKok
Luca Corti <[EMAIL PROTECTED]> wrote: > > Something called "documentation" beat out the next nearest response > > by nearly 2:1. We'll see if we can work on that. > > Which was the next nearest response? Features & help with configuration. Alan DeKok. -- http://deployingradius.com

Re: CVS problem

2006-10-31 Thread Alan DeKok
"Guilherme Franco" <[EMAIL PROTECTED]> wrote: > It just hangs in the checkout part... > > Any problems with the server? I think the disk is full. Give me a few hours, and I'll put a mirror up on deployingradius.com. Alan DeKok. -- http://deployingradius.com - The web site of the b

Re: RADIUS AUTHENTICATOR---need HELP using MSCHAP and NTPASSWORD

2006-10-31 Thread ego seek
Message: 6Date: Mon, 30 Oct 2006 08:25:43 -0500From: Michael Lecuyer <[EMAIL PROTECTED]>Subject: Re: RADIUS AUTHENTICATOR---need HELP using MSCHAP and        NTPASSWORDTo: FreeRadius users mailing list        Message-ID: <[EMAIL PROTECTED]>Content-Type: text

upper case ralms

2006-10-31 Thread Mark Jones
We just noticed that our server is authenticating no matter weather the realm specified is upper or lower case. Even though the realm is specified as lower in proxy.conf. Can it be set to stop this? Mark Jones London Operations Managed Network Systems 171 Queens Ave Suite 515 London Ontario N6

Re: FreeRadius not stable on my server

2006-10-31 Thread Alan DeKok
Nataniel Klug <[EMAIL PROTECTED]> wrote: > Sometimes my NAS send a disconnect for the radius (I have remote logging > and I am monitoring every step of the NAS(es) and the radius) and, for > some reason that I could not know, this request for disconect do not get > into the FreeRadius. I really

RE: CVS problem

2006-10-31 Thread King, Michael
BTW, Seems today is the day for website problems http://deployingradius.com/blog/ MySQL error! Error establishing a database connection! (Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)) 1. Are you sure you have typed the correct user/password? 2.

Re: CVS problem

2006-10-31 Thread Alan DeKok
"King, Michael" <[EMAIL PROTECTED]> wrote: > http://deployingradius.com/blog/ > > MySQL error! Debian is starting to annoy me. "apt-get upgrade" not only stops services 9and doesn't re-start them), but it over-writes my local config files, too. Anyway, it's fixed now. I'll have to put a cr

Re: How to configure USERS file to assign the VLAN ID according to LDAP group name?

2006-10-31 Thread Alan DeKok
"richard Bai" <[EMAIL PROTECTED]> wrote: > This is my *users* file configuration: > *DEFAULT Group == "1"* Why put asterisks around every line? > * Auth-Type = LDAP,* 1) Auth-Type belongs on the first line, "radiusd -X" will tell you that 2) Setting Auth-Type = LDA

FreeRadius installation problem.

2006-10-31 Thread Chad Best
When I run ./confiugre, make and make install, "radiusd" does not install.  I have checked the /usr/local/bin and /usr/local/sbin and it is not there.  Yes, I did make sure that I was showing hidden files when I search for it.  I also did a search for radiusd and it does not show up anywhere.  Ther

Freeradius service hangs

2006-10-31 Thread Karthik R
Am running Freeradius ver 1.1.1 on a RHEL 3 box which keeps hanging frequently. So everytime i need to restart the freeradius service. Is this version is stable one ?   Kartthik  - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

authorize_check_query and authorize_reply_query

2006-10-31 Thread Guido
Hello list, I'm using freeradius and have some doubts abot these steps. authorize_check_query = "store_check_query '%{Stripped-User-Name:-%{User-Name}}, authorize_reply_query = "store_check_query '%{Stripped-User-Name:-%{User-Name}}, At this moment I'm using both authorize (check and

Re: FreeRadius installation problem.

2006-10-31 Thread Hernan Antolini
Any strange output from configure or make ? are you sure you're running make install as root ? what are the error messages if any =? [EMAIL PROTECTED] wrote on 10/31/2006 02:45:09 PM: > When I run ./confiugre, make and make install, "radiusd" does not > install.  I have checked the /usr/local/b

Re: How to configure USERS file to assign the VLAN ID according toLDAP group name?

2006-10-31 Thread Richard
Hi, Alan, Thanks for reply. Right now the situation is the RADIUS can authenticate the user in LDAP. But the group attribute does work. So, the vlan ID can not be assigned. Could you tell me what should be correct configuration in users file. Richard - Original Message - From: "Alan D

Re: FreeRadius installation problem.

2006-10-31 Thread Chad Best
--- Hernan Antolini <[EMAIL PROTECTED]> wrote: > Any strange output from configure or make ? are you > sure you're running > make install as root ? what are the error messages > if any =? > I did run ./configure, make and make install as root. There is an error message from make install that

Re: FreeRadius installation problem.

2006-10-31 Thread Dennis Skinner
Chad Best wrote: > Making install in main... > make[4]: Entering directory > `/usr/local/src/freeradius-1.0.0/src/main' > /usr/local/src/freeradius-1.0.0/libtool --mode=install > /usr/local/src/freeradius-1.0.0/install-sh -c -m 755 > -s radiusd /usr/local/sbin > /usr/local/src/freeradius-1.0.0/in

Another Installation Problem

2006-10-31 Thread kbajwa
Hello:   I am trying to install freeRADIUS-1.1.3. The INSTALL instructions says to download the ‘tar’ file. I have not been able to find the tar file for the newest version. Please help. Where is this ‘tar’ file?    Thanks.   Kirt - List info/subscribe/unsubscribe? See http://

Re: Another Installation Problem

2006-10-31 Thread Dennis Skinner
kbajwa wrote: > I am trying to install freeRADIUS-1.1.3. The INSTALL instructions says > to download the ‘tar’ file. I have not been able to find the tar file > for the newest version. Please help. Where is this ‘tar’ file? 1. Go to www.freeradius.org 2. Click on the very first link 3. The rest s

RE: Another Installation Problem

2006-10-31 Thread kbajwa
Dennis: I have already done that. The first link is 'download', which takes to the download site. The first link is 'download', and when I CLICK on it, I get to the 'download' page. The first file todownload is: # 2006.08.22 freeradius-1.1.3.tar.bz2, (currently released version: 1.1.3) Please no

RE: Another Installation Problem

2006-10-31 Thread King, Michael
Ok. Look in the News! Section on the front most page. It has this link ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.3.tar.gz > -Original Message- > From: > [EMAIL PROTECTED] > g > [mailto:[EMAIL PROTECTED] > adius.org] On Behalf Of kbajwa > Sent: Tuesday, October 31, 2006 5:14

'{%SQL-User-Name}' does not work for SQLIPPOOL

2006-10-31 Thread Guilherme Franco
Hello, '{%SQL-User-Name}' does not work for SQLIPPOOL, it always appears blank. What should I use in order to get the username? Thank you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Another Installation Problem

2006-10-31 Thread William
On Tuesday 31 October 2006 17:13, kbajwa wrote: > Dennis: > > I have already done that. The first link is 'download', which takes to the > download site. The first link is 'download', and when I CLICK on it, I get > to the 'download' page. The first file todownload is: > > # 2006.08.22 freeradius-1

Re: Another Installation Problem

2006-10-31 Thread Alan DeKok
"kbajwa" <[EMAIL PROTECTED]> wrote: > I have been to this page several times before posting. This download file is > not the 'tar' file from which I install. This is a file from which we > extract a freeradius-1.1.3 folder. The 'bz2' extension means that the tar file has been compressed. Use "bu

Re: upper case ralms

2006-10-31 Thread Alan DeKok
"Mark Jones" <[EMAIL PROTECTED]> wrote: > We just noticed that our server is authenticating no matter weather the > realm specified is upper or lower case. Even though the realm is specified > as lower in proxy.conf. > > Can it be set to stop this? Source code modifications. But why is it

Re: Freeradius service hangs

2006-10-31 Thread Alan DeKok
"Karthik R" <[EMAIL PROTECTED]> wrote: > Am running Freeradius ver 1.1.1 on a RHEL 3 box which keeps hanging > frequently. So everytime i need to restart the freeradius service. Is this > version is stable one ? Yes. Where is it hanging? What is going wrong? Do you have any additional informa

Re: How to configure USERS file to assign the VLAN ID according toLDAP group name?

2006-10-31 Thread Alan DeKok
"Richard" <[EMAIL PROTECTED]> wrote: > Right now the situation is the RADIUS can authenticate the user in > LDAP. But the group attribute does work. As I said before, "Group" is for Unix groups. If you want to check LDAP groups, you should use the LDAP-Group attribute. Alan DeKok. -- http:

RE: Another Installation Problem

2006-10-31 Thread kbajwa
Thanks. You saved several hours. Kirt -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of King, Michael Sent: Tuesday, October 31, 2006 5:23 PM To: FreeRadius users mailing list Subject: RE: Another Installation Problem Ok. Look in the News! Section on the

Re: Another Installation Problem

2006-10-31 Thread Dennis Skinner
kbajwa wrote: > Dennis: > > I have already done that. The first link is 'download', which takes to the > download site. The first link is 'download', and when I CLICK on it, I get > to the 'download' page. The first file todownload is: > > # 2006.08.22 freeradius-1.1.3.tar.bz2, (currently release

Re: Another Installation Problem

2006-10-31 Thread Dennis Skinner
kbajwa wrote: > I have been to this page several times before posting. This download file is > not the 'tar' file from which I install. This is a file from which we > extract a freeradius-1.1.3 folder. Sorry. I misread that last line. You didn't look in the folder, did you? I bet there are some

Re: Another Installation Problem

2006-10-31 Thread Joe Maimon
kbajwa wrote: Dennis: I have already done that. The first link is 'download', which takes to the download site. The first link is 'download', and when I CLICK on it, I get to the 'download' page. The first file todownload is: # 2006.08.22 freeradius-1.1.3.tar.bz2, (currently released version

freeradius against AD authentication not working

2006-10-31 Thread Karthik R
Running Freeradius v1.1.1 on a RHEL 4 box and trying to authenticate the WiFi users against windows 2003 active directory using EAP-MSCHAPv2. I was able to join the linux box to windows domain successfully and able to read the users and groups from AD. I have configured the windows XP supplicant wi

SOLVED '{%SQL-User-Name}' does not work for SQLIPPOOL

2006-10-31 Thread Guilherme Franco
Nevermind, I used "%{User-Name}" and it works. Hello, '{%SQL-User-Name}' does not work for SQLIPPOOL, it always appears blank. What should I use in order to get the username? Thank you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to configure USERS file to assign the VLAN ID accordingtoLDAP group name?

2006-10-31 Thread Richard
- Original Message - From: "Alan DeKok" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Tuesday, October 31, 2006 11:30 PM Subject: Re: How to configure USERS file to assign the VLAN ID accordingtoLDAP group name? > "Richard" <[EMAIL PROTECTED]> wrote: >> Right now the

freeradius hangs

2006-10-31 Thread Karthik R
"Karthik R" <[EMAIL PROTECTED]> wrote:> Am running Freeradius ver 1.1.1 on a RHEL 3 box which keeps hanging > frequently. So everytime i need to restart the freeradius service. Is this> version is stable one ? Yes.  Where is it hanging?  What is going wrong?  Do you have anyadditional information?

RE: freeradius against AD authentication not working

2006-10-31 Thread Chris Liles
You have the supplicant incorrectly configured. You can also try in radius.conf: with_ntdomain_hack=yes -- Chris Liles -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Karthik R Sent: Tuesday, October 31, 2006 6:32 PM To: freeradius-users@lists.freera

Re: freeradius against AD authentication not working

2006-10-31 Thread Alan DeKok
"Karthik R" <[EMAIL PROTECTED]> wrote: > When i try to connect to access > point, it takes the local machine name default instead of asking for > username and password. You have to configure the local machine to NOT authenticate as the machine. It's in the Windows supplicant configuration somew

Re: freeradius hangs

2006-10-31 Thread Alan DeKok
"Karthik R" <[EMAIL PROTECTED]> wrote: > Have configured dlink f/w for remote users login which authenticates users > against AD using freeradius. When users tries to connect it says "verifying > username and password" and it doesnt proceed further. That's the message on the NAS. And you're si