Reject reason

2006-11-10 Thread Jørn Kostøl Gundersen
I am authenticating users based on Calling-Station-Id in addition to password. All accepts and rejects are logged to the postauth table in my database. But I cannot see why the user got rejected, if it was wrong Calling-Station-Id or wrong password. Any ideas? Cheers, Jørn

RE: Queries apear in Dialup_admin page

2006-11-10 Thread CASTANHEIRA, Nuno Osvaldo
Thanks...it resolve the problem. -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Richard Cotrina Enviada: quinta-feira, 9 de Novembro de 2006 17:42 Para: FreeRadius users mailing list Assunto: Re: Queries apear in Dialup_admin page Take a look at your

rlm_sql multiple instances handling of

2006-11-10 Thread Graeme Hinchliffe
Hi, I have a problem where I need a lot of threads to catch accounting data, a lot of threads means a lot of DB handles.  Alas this means more than 256 db handles which is the limit for rlm_sql.  My thoughts therefore was to instantiate multiple rlm_sql modules to increase the number of db handles

networkaddresses in huntgroupfile

2006-11-10 Thread Hans Bornemann
Hi, is there a way to define networks in the huntgroupfile, something like name == 10.0.0.1/24 Hans -- Hans Bornemann Universitaet Dortmund - Hochschulrechenzentrum Tel. ++49 231 755 2132 Fax. ++49 231 755 2731 - List info/subscribe/unsubscribe? See

help configureing a proxium Tsunami MP.11 5054-R and free radius

2006-11-10 Thread Cameron Cowie
Hi: really simple question here... in my user file I have 0020A666B9E6Auth-Type := local,User-Password :=qwerty1 in my clients.conf file I have client 172.16.20.18 { secret = qwerty1 shortname = base } my show system on the Tsunami is System Name :base

Re: FR-1.1.3 on solaris10 strange things

2006-11-10 Thread John Horne
On Wed, 2006-11-08 at 14:56 -0500, Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: May be someone could give an advice how to debug the problem while the server will not be in production? Attach to it with gdb, and see what it's doing. Or use the 'truss' command to see what

dialup_admin+ldap+sql

2006-11-10 Thread [EMAIL PROTECTED]
Hi, I saw that dialup_admin can use ldap or SQL to manage users. I'd like to know if i can, using dialup-admin: 1- authenticate users with ldap and add in the radius server answer per user attributesthat are stored in my sqlDB. 2- authenticate users with ldap and add in the radius server answer

FreeRadius 1.1.3 and PHPMyPrepaid

2006-11-10 Thread Michelle Manning
I was wondering if anyone has worked the two of these together happily? I've managed to get Radius configured and running (Thanks guys!). But I can't login with a phpmyprepaid user - If I create my own user (very simplistic) it works, with no worries, otherwise the user is rejected because of a

Re: Discarding new rquests and CPU eats 99.9%

2006-11-10 Thread Alan DeKok
=?iso-8859-9?Q?Cihan_DEM=DDR?= [EMAIL PROTECTED] wrote: We're using 0.9.3 version on RedHat. ... Any comment? Thanks in advance. Upgrade. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List

Re: Reject reason

2006-11-10 Thread Alan DeKok
=?iso-8859-1?Q?J=F8rn_Kost=F8l_Gundersen?= [EMAIL PROTECTED] wrote: But I cannot see why the user got rejected, if it was wrong Calling-Station-Id or wrong password. There are any number of reasons why a user may be rejected. Logging all of them is problematic, especially when the user is

Re: help configureing a proxium Tsunami MP.11 5054-R and free radius

2006-11-10 Thread Alan DeKok
Cameron Cowie [EMAIL PROTECTED] wrote: in my user file I have 0020A666B9E6Auth-Type := local,User-Password :=qwerty1 ... Thread 1 handling request 0, (1 handled so far) User-Name = 0020a6-66b9e6 It's not the same username. Alan DeKok. -- http://deployingradius.com

sync hungroups, clients files, users across multiple servers

2006-11-10 Thread Charles Tompkins
Greets! What is a good way or considered best practice for folks to sync changes to critical files in use by radius like huntgroups and clients.conf and users across multiple RADIUS servers. I am not using MySQL backend, but rather relaying requests for auth off to PAM which checks against a

Re: sync hungroups, clients files, users across multiple servers

2006-11-10 Thread A . L . M . Buxey
Hi, Greets! What is a good way or considered best practice for folks to sync changes to critical files in use by radius like huntgroups and clients.conf and users across multiple RADIUS servers. I am not using MySQL backend, but rather relaying requests for auth off to PAM which checks

Re: Discarding new rquests and CPU eats 99.9%

2006-11-10 Thread A . L . M . Buxey
Hi, =?iso-8859-9?Q?Cihan_DEM=DDR?= [EMAIL PROTECTED] wrote: We're using 0.9.3 version on RedHat. ... Any comment? Thanks in advance. Upgrade. and to back Alan up, you really should upgrade: # 2006.03.20 v1.0.5, and v1.1.0 - A validation issue exists with the EAP-MSCHAPv2 module in

RE: sync hungroups, clients files, users across multiple servers

2006-11-10 Thread Charles Tompkins
That is exactly what I want to do! I just started using subversion with RANCID and am not very knowledgeable about svn. How can I get a 'diff' spread around like that? I am thinking about what you have said and it could be completely wrong, 1. A change is commited on a watched file like

Choice database

2006-11-10 Thread Marilene Lima
Hi, I am setting up my first radius server, and I have two databases. Someone could tell me if there is a file in freeradius where I can choice what database I will to use?Thanks a lot,Marilene - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re[3]: limiting sessions

2006-11-10 Thread Andrew Long
... DELETE FROM radius.usergroup WHERE GroupName = 'aroma' THEN... INSERT INTO radius.usergroup (UserName, CreationDate, GroupName) VALUES ('username0001', (CURRENT_DATE), 'aroma'); repeated for all 500 usernames... I think this should work, as all the usernames in use are stored in

How to handle EAP/LDAP or files with same server

2006-11-10 Thread Keith Moores
I'm trying to finally rid myself of Cisco ACS with FR 1.1.3 and mostly having great success (performance is so much better!) but can't seem to figure out how to handle two different types of wireless authentication in separate non-overlapping ways. Case 1 is EAP/TLS where user ID (email

Re: How to handle EAP/LDAP or files with same server

2006-11-10 Thread Alan DeKok
Keith Moores [EMAIL PROTECTED] wrote: I have both of these working with one issuse, MACs that are not in the users file are being sent to LDAP server adding unnecessary load. One solution is to recognize MAC's, and NOT look them up in LDAP. Another is to recognize email addresses, and cause

Re: Choice database

2006-11-10 Thread Apu islam
sql.conf on /usr/local/etc/raddb while you are at it, look at the other .conf file too. --- Marilene Lima [EMAIL PROTECTED] wrote: Hi, I am setting up my first radius server, and I have two databases. Someone could tell me if there is a file in freeradius where I can choice what