Error rlm_exec

2006-12-07 Thread Serg Max
I can't start freeradius 1.1.3_1 on FreeBSD6 radius.log: Error: radiusd.conf[226] Failed to link to module 'rlm_exec': /usr/local/lib/rlm_exec.a: invalid file format ??? Sergu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SQL connections and radius restart

2006-12-07 Thread Alan DeKok
Guido wrote: The exactly question is, how could I detect when freeradius loses connection with the SQL and how can I reconnect it automatically. The code in rlm_sql should do this, but apparently sometimes it doesn't. The solution is to track down the bugs in rlm_sql, and fix them. Alan

Re: NAS Port always 0

2006-12-07 Thread Phil Mayers
Tom Murphy wrote: I put in some debugging code there to spit out the ifname and devname. For some reason, they are both blank. I'm using openl2tpd and that may Hmm be messing up the reporting of the ppp interface, but, my question is this: At the time the RADIUS authentication is being

Problem with EAP/MD5 behind proxy

2006-12-07 Thread Hans Bornemann
Hi, I run into this problem: Config: 802.1x client (Windows XP with 802.1x / md5 ) -- freeradius-proxy -- freeradius-server Same prg-version on both server (1.1.0) same radius.conf same users file if i try to authenticate against the proxy without realm, everything ist o.k. if i try this

RE: Problem with EAP/MD5 behind proxy

2006-12-07 Thread Josh Howlett
You're stripping the realm at the proxy; add nostrip to the realm stanza defined in realms.conf for the server you're proxying to. Josh. -Original Message- From: [EMAIL PROTECTED] us.org [mailto:[EMAIL PROTECTED] freeradius.org] On Behalf Of Hans Bornemann Sent: 07 December

RE: Problem with EAP/MD5 behind proxy

2006-12-07 Thread Hans Bornemann
Hi Josh, Thats what i want: stripping the realm at the proxy: proxy.conf: .. realm notebook { type= radius authhost= 111.222.111.111:1812 accthost= 111.222.111.111:1813 secret = blabla } users: testuserUser-password

Re: Problem with EAP/MD5 behind proxy

2006-12-07 Thread A . L . M . Buxey
Hi, testuser User-password == testing testuser User-Password == testing, Auth-Type := local alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Authentication registers on MySQL

2006-12-07 Thread Felipe Neuwald
Hi Folks, I'm building a new freeradius server here, and I wanna make some implementations: 1. Log every authentication (sucessfull or not) to MySQL database; 2. but, log *only* the last 10 registers of authentication in database. The database connection is already working ok, and I'm

Re: Problem with EAP/MD5 behind proxy

2006-12-07 Thread Hans Bornemann
Hi Alan, Auth-Type := Local produced the following failure: users: steve Auth-Type := Local, User-Password = testing Debug output: Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 129.217.169.240:1645, id=134, length=149 User-Name = steve Service-Type =

Re: Problem with EAP/MD5 behind proxy

2006-12-07 Thread A . L . M . Buxey
Hi, Hi Alan, Auth-Type := Local produced the following failure: users: steve Auth-Type := Local, User-Password = testing do i have to query you on this one? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error rlm_exec

2006-12-07 Thread Hernan Antolini
What messages did you have when you compiled it ? It seems that it could not build rlm_exec correctly. You could look at the config.log file within the build directory. Hernan Antolini [EMAIL PROTECTED] wrote on 12/07/2006 05:51:07 AM: I can't start freeradius 1.1.3_1 on FreeBSD6

Re: Problem with EAP/MD5 behind proxy

2006-12-07 Thread Hans Bornemann
Sorry, only a typing error in the mail. the users file ist correct: steve Auth-Type := Local, User-Password == testing Hans Hi, Hi Alan, Auth-Type := Local produced the following failure: users: steve Auth-Type := Local, User-Password = testing

Choosing The best replication system.

2006-12-07 Thread Sarkis Gabriel
Hello all, With the way work is and the pops are growing looks like i need to start centralising the database. At the moment i have 4 pops around the country and all are feeding from a satellite links, as the company is growing it is becoming very hard to maintain and we are looking to

Global address pool

2006-12-07 Thread Paul Khavkine
Hi folks. I'm looking into ways to implement a global address pool for multiple NASes and multiple RADIUS servers. I see that there's 2 possible ways of doing it with FreeRADIUS. 1) use rlm_ippool 2) use rlm_sqlippool I'm leaning towards rlm_sqlippool since it can be used to lease an

Re: Global address pool

2006-12-07 Thread Jan Mulders
from what I've seen on the lists, sqlippool is full of bugs and holes. If you're planning to put it into a production environment, I'd strongly suggest booking a coder for a couple of days :-) Such is the nature of open-source I guess. There is no other truly feasable way of leasing IPs over

FreeRadius Framed-IP-Address

2006-12-07 Thread Daniel Romero
Hi. I have freeradius working with eap/peap. The users can autenthicate them, but the Framed-IP-Address don't work, they can't get an ip address... but, if I connect an DHCP to the network, all work fine: authentication-get address- network access What can be wrong with the Framed-IP-Address???

Re: FreeRadius Framed-IP-Address

2006-12-07 Thread Alan DeKok
Daniel Romero wrote: Hi. I have freeradius working with eap/peap. The users can autenthicate them, but the Framed-IP-Address don't work, RADIUS cannot assign IP addresses when PEAP (or any 802.1x authentication) is used. they can't get an ip address... but, if I connect an DHCP to the

Re: FreeRadius Framed-IP-Address

2006-12-07 Thread Daniel Romero
Cool hint... thanks again my master xD So, IP address assign works only on ¿.? On 12/7/06, Alan DeKok [EMAIL PROTECTED] wrote: Daniel Romero wrote: Hi. I have freeradius working with eap/peap. The users can autenthicate them, but the Framed-IP-Address don't work, RADIUS cannot

Re: FreeRadius Framed-IP-Address

2006-12-07 Thread Alan DeKok
Daniel Romero wrote: Cool hint... thanks again my master xD So, IP address assign works only on ¿.? PPP. Dial-up... Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See

Re: help

2006-12-07 Thread Alan DeKok
John Wan wrote: But I would like to use the Windows 2k3 AD to authenticate the username and password instead of using the user name and password from the file /etc/raddb/users or in mysql. See the Wiki my web site for instructions on using Active Directory. Alan DeKok. --

RE: Mulitple sql groups or User in Multiple groups

2006-12-07 Thread Stavros Patiniotis
Hi again, I just want to clarify my previous email. What I want is to authenticate one user who is in multiple groups. I am assuming that the group binding is occurring as a result of the check items, but this is where it appears to fail. In fact two separate problems are occurring with point 5

Re: Mulitple sql groups or User in Multiple groups

2006-12-07 Thread Alan DeKok
Stavros Patiniotis wrote: For clarity I am trying to achieve the SQL equivalent of the lines below, however as we are doing chap I need to have the usernames and passwords stored in the database (radcheck). DEFAULT Auth-Type := Local, NAS-IP-Address == 10.0.0.1 Exec-Program-Wait =