Re: Assertion failed in listen.c, line 621

2006-12-05 Thread Alan DeKok
Guilherme Franco wrote: > Hello, > > Freeradius-snapshot-20061203 crashes, when running just "radiusd" with > proxy ("radiusd -X" doesn't crash): > > It logs the following "Error: Assertion failed in listen.c, line 621", > which is "rad_assert(request->proxy_listener == listener);" And what do

Re: Sending Access-Challenge Fail

2006-12-05 Thread Alan DeKok
Daniel Romero wrote: > I'm stucked... i don't know what to do... ... > Sending Access-Challenge of id 3 to 192.168.100.185 ... > Waking up in 5 seconds... See the FAQ. http://wiki.freeradius.org/index.php/FAQ#PEAP_Doesn.27t_Work Alan DeKok. -- http://deployingradius.com - The web sit

Re: EAP

2006-12-05 Thread Stefan Winter
Hi, > rlm_eap: SSL error error:0906D06C:PEM routines:PEM_read_bio:no start line > rlm_eap_tls: Error reading private key file > rlm_eap: Failed to initialize type tls That sounds pretty clear, doesn't it? Apparently the server was not able to load the certificate's private key. Check the filenam

Re: EAP

2006-12-05 Thread romero.cl
Hi. The problem was that the password of the certificate and the password of eap.conf doesn't match. Layer 8 problem, between the chair and the keyboard... - Original Message - From: "rolando" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Tuesday, December 05, 2006 10:

Assertion failed in listen.c, line 621

2006-12-05 Thread Guilherme Franco
Hello, Freeradius-snapshot-20061203 crashes, when running just "radiusd" with proxy ("radiusd -X" doesn't crash): It logs the following "Error: Assertion failed in listen.c, line 621", which is "rad_assert(request->proxy_listener == listener);" Thanks. - List info/subscribe/unsubscribe? See ht

Sending Access-Challenge Fail

2006-12-05 Thread Daniel Romero
I'm stucked... i don't know what to do... rlm_sql (sql): Released sql socket id: 1 modcall[authorize]: module "sql" returns ok for request 3 modcall: leaving group authorize (returns updated) for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate se

Re: EAP

2006-12-05 Thread rolando
Check out you file permissions. chmod 600 /path/to/certs Can you post you raduisd.conf, users, eap.conf. I would like to use them as a reference. I am trying to setup PEAP myself. I have several windows machines setup but am having trouble with linux and wpa_supplicant. Daniel Romero wrote:

EAP

2006-12-05 Thread Daniel Romero
rlm_eap_tls: Loading the certificate file as a chain rlm_eap: SSL error error:0906D06C:PEM routines:PEM_read_bio:no start line rlm_eap_tls: Error reading private key file rlm_eap: Failed to initialize type tls radiusd.conf[1]: eap: Module instantiation failed. radiusd.conf[399] Unknown module "eap

EAP

2006-12-05 Thread Daniel Romero
Any ideas? ... Module: Loaded eap eap: default_eap_type = "peap" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA

Re: SQL reconnect

2006-12-05 Thread Alan DeKok
Guido wrote: > Hi list, I'm using freeradius with Ms-SQL. Freeradius can open > connections as many as are configured in mssql (num_sql_socks = 3). It > is ok, but when SQL go down, or when connection with SQL go down > freeradius can't connect to SQL until freeradius is restarted. So, I > need a

SQL reconnect

2006-12-05 Thread Guido
Hi list, I'm using freeradius with Ms-SQL. Freeradius can open connections as many as are configured in mssql (num_sql_socks = 3). It is ok, but when SQL go down, or when connection with SQL go down freeradius can't connect to SQL until freeradius is restarted. So, I need a way to rstart freer

Re: FreeRadius core dump on FreeBSD

2006-12-05 Thread Lisa Besko
I'm re-posting this and at the bottom I'll attach what the debugger (gdb)is giving me. Lisa Besko wrote: I'm getting a core dump with freeradius when I try to use Kerberos authentication on a FreeBSD box running 6.1-Stable with an AMD64 platform. I can run FreeRadius with Kerberos authenticat

Re: client log

2006-12-05 Thread A . L . M . Buxey
Hi, > I have installed freeradius 1.0.4 in my AAA servers. I work several years > with this service and funcion very well. > I am develeping a PHP platform for my people who install hotspots. Well, I > want to log if a nas can not authenticate with my RADIUS server because of > any reason. >

Re: Challenge-response with mod_auth_radius

2006-12-05 Thread Alan DeKok
Arnaud Dostes wrote: > What we want to do is EAP-CTG, I'll investigate further in that direction. It's EAP-GTC, and no, you probably don't want that. See rlm_example for a sample challenge-response implementation in the server. See rlm_otp for a *working* implementation that integrates with

Re: Problems with Lucent ISDN Router.txt

2006-12-05 Thread Alan DeKok
Andreas Krummrich wrote: > With this config, dialing in is no problem and works fine. But dialing > out with callback doesn't work. The call goes out and is terminated > without any call back. ... > I dont't see any errors. The lucent retries several times and then gives > up. If you're sending

Re: client log

2006-12-05 Thread Alan DeKok
Santiago Balaguer García wrote: > I wish only to log failed NAS request such as: > -- > rad_recv: Access-Request packet from host 192.168.1.247:1027, id=4, > length=245 > Ignoring request from unknown client 192.168.1.247:1027 > --- Walking the

Re: Redundant Modules

2006-12-05 Thread Alan DeKok
Wilmar Campos wrote: > What I have to do then? Look in rlm_sql to see why it isn't reconnecting, and fix it. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius

Re: Proxy Problems

2006-12-05 Thread Alan DeKok
Daniel Romero wrote: > I think that this error was caused by a bad concept of radius functión. > > Now, all proxy go off, but it stops when send: Rather than trying to figure out what you're doing wrong, my suggestion is for you to follow the documentation on the Wiki & on my web site. It expl

client log

2006-12-05 Thread Santiago Balaguer García
Hi people, I have installed freeradius 1.0.4 in my AAA servers. I work several years with this service and funcion very well. I am develeping a PHP platform for my people who install hotspots. Well, I want to log if a nas can not authenticate with my RADIUS server because of any reason. I wi

Problems with Lucent ISDN Router.txt

2006-12-05 Thread Andreas Krummrich
Hi, i have trouble, dialing out with a lucent max1800 isdn router, using freeradius under sles9. Here is an extract of the users file: <<< user-in Password == "xxx" Service-Type == Framed-User, Framed-Protocol = ASCEND-MPP, Framed-Address = yyy.yyy.yyy.yyy, Framed-Netmask = zzz.z

Re: Redundant Modules

2006-12-05 Thread Wilmar Campos
What I have to do then? Thanks, On 12/4/06, Alan DeKok <[EMAIL PROTECTED]> wrote: Wilmar Campos wrote: > The problem is when the MySQL sever came up, the module does not try > the MySQL module, it stays until I restart the service. It's a bug. I have no idea why it's happening. Alan DeKo

Re: Problem cheking multivalued attributes in LDAP schemas.

2006-12-05 Thread Erling Paulsen
Kostas Kalevras wrote: Erling Paulsen wrote: I try to make a decision based on checking for a value in a certain attribute of a LDAP schema. The problem is that this is a multivalued attribute, and it seems somewhat undefined when I try to check against it! My exact problem is checking agai

Re: Challenge-response with mod_auth_radius

2006-12-05 Thread Arnaud Dostes
What we want to do is EAP-CTG, I'll investigate further in that direction. Please just let me know if for some reason freeradius doesn't support that. Regards Arnaud Dostes <[EMAIL PROTECTED]> Envoyé par : [EMAIL PROTECTED] 05.12.2006 12:17 Veuillez répondre à FreeRadius users mailing li

Re: Problem authenticating with Checkpoint Integrity.

2006-12-05 Thread Ian Walker
>>Ian Walker wrote: > >> I'm attempting 802.1x authentication with Checkpoint Integrity. I > have > >> it working with peap no problems and usings mschapv2. However, when > I > >> attempt with Integrity, I have to choose "Zone Labs Cooperative > >> Enforcement" within the Windows 802.1x authent

Re: Problem starting freeradius 1.1.3

2006-12-05 Thread Ian Walker
>>Ian Walker wrote: >> I used the "rpmbuild -ta" command to build an rpm of freeradius-1.1.3 >> and all went well with the build. I then installed the rpm, and I'm >> getting the following error message after running radiusd -X. >>... >> radiusd: symbol lookup error: radiusd: undefined symbol:

Challenge-response with mod_auth_radius

2006-12-05 Thread Arnaud Dostes
Hello, We would like to use freeradius with a 'home made' challenge response authentication scheme (we will build our own module) using mod_auth_radius. Ultimately we would like to prompt the user (after successfull authentication) with a challenge that he would have to enter in a securID lik