RE: Mulitple sql groups or User in Multiple groups

2006-12-08 Thread Stavros Patiniotis
> > DEFAULT Auth-Type := Local, NAS-IP-Address == "10.0.0.1" > > Exec-Program-Wait = "/program for nas1" > > You don't need to set Auth-Type. In the SQL database I am not setting it, its merely the NAS IP. > And if the per-NAS configuration is fairly static, you can use > rlm_passwd to map

Re: compile problem on tru64

2006-12-08 Thread Matthias Henze
is no one able to help me with my compiler problem ? :-( Am Mittwoch, 6. Dezember 2006 09:02 schrieb Matthias Henze: > hi, > > i try to build freeradius 1.1.3 on tru64. at first every thing worked as > expected. near the end of the buildprocess i get the following message i'm > unable to interpre

Logging into MySQL doesnt work, how enable MAC address control on MySQL

2006-12-08 Thread Andrej Simko
Hello everybody I have a problem in setting up my freeradius to log all querries into database. The radacct is still empty. I read some messages from this mailing group and I found that the NAS server is not sending anything about Start time or Stop time. My naslist looks like: # NAS Name Short N

FreeRadius + Ldap + EAP-TTLS + WPA - Need your help

2006-12-08 Thread Tho Nguyen
Hello Everyone, I am trying to configure our system to authenticate through LDAP. I have hard time to figure out what cause my system not working. Please view the log and let me know what I can fix. Thanks very much for your help in advance. Starting - reading configuration files ... reread_co

Freeradius and biometric devices

2006-12-08 Thread Kenneth Penza
Hi, I am trying to setup a biometric authentication using freeradius, first the user gives his/her password and then uses fingerprint information. On positive matches the user is authenticated. Can it be implemented? Is there literature that I need to have a look at? Thanks in

LDAP->RADIUS Attribute Mapping

2006-12-08 Thread Owen DeLong
I have an environment where I am already using LDAP for AAA for a number of things. We have historically used the AuthorizedService attribute in LDAP to control the level of access available to the user. We would like to continue to do so. However, in order for that to work, I need to map

Re: FreeRadius + Ldap + EAP-TTLS + WPA - Need your help

2006-12-08 Thread Alan DeKok
Tho Nguyen wrote: > I am trying to configure our system to authenticate through LDAP. I > have hard time to figure out what cause my system not working. Please > view the log and let me know what I can fix. Thanks very much for your > help in advance. .. > Sending Access-Challenge of id 24 to 1

Re: Freeradius and biometric devices

2006-12-08 Thread Alan DeKok
Kenneth Penza wrote: > > I am trying to setup a biometric authentication using > freeradius, first the user gives his/her password and > then uses fingerprint information. On positive matches > the user is authenticated. > > Can it be implemented? Is there literature that I > need to

Re: Logging into MySQL doesnt work, how enable MAC address control on MySQL

2006-12-08 Thread Alan DeKok
Andrej Simko wrote: > > I have a problem in setting up my freeradius to log all querries into > database. The radacct is still empty. I read some messages from this > mailing group and I found that the NAS server is not sending anything > about Start time or Stop time. My naslist looks like: The

Re: PEAP+MSCHAP+AD (please help)

2006-12-08 Thread Phil Mayers
[EMAIL PROTECTED] wrote: Hi there, this is an old issue, but AFAIAC hasn't been solved yet, that's why I'm asking for help with this problem which is driving me crazy. In the first attempt the user has checked the option "Automatically use my Windows logon name and password (and domain if any

How to pass information between modules?

2006-12-08 Thread Martin Gadbois
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Let's say I have the following authorize {} section: authorize { ldap sql } What would be the best way to pass information between ldap and sql? For example, if I were to extract a group name from "ldap" and pass it to "sql" to get all the

Re: How to pass information between modules?

2006-12-08 Thread Alan DeKok
Martin Gadbois wrote: > What would be the best way to pass information between ldap and sql? In the same way that all of the other modules do it: Put the information into attributes. That's what the "config item" list is for. > For example, if I were to extract a group name from "ldap" and pa

Re: LDAP->RADIUS Attribute Mapping

2006-12-08 Thread Alan DeKok
Owen DeLong wrote: > We have historically used the AuthorizedService attribute in LDAP to > control the level > of access available to the user. We would like to continue to do so. > However, in order > for that to work, I need to map AuthorizedService to different RADIUS > attributes in > the r

Re: How to pass information between modules?

2006-12-08 Thread Martin Gadbois
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alan DeKok wrote: >> What would be the best way to pass information between ldap and sql? > > In the same way that all of the other modules do it: Put the > information into attributes. That's what the "config item" list is for. My subconscious Fr

Re: Choosing The best replication system.

2006-12-08 Thread Sarkis Gabriel
Anyone out there with some guide or atleast some pitfalls i should try and avoid on Replicating the radius server ? Sarky -- Original Message --- From: "Sarkis Gabriel" <[EMAIL PROTECTED]> To: FreeRadius users mailing list Sent: Thu, 7 Dec 2006 17:29:22 +0100 Subject: Choosing T

Re: TTLS : where to indicate User/Password ?

2006-12-08 Thread Bruno Costacurta
On Monday 04 December 2006 22:21, Alan DeKok wrote: > Bruno Costacurta wrote: > > I'm trying to configure FreeRadius using TTLS (certificate on server side > > only) and MySQL. Client is a Linux laptop using wpa_supplicant. > > I'm in a learning curve regarding 802.1x and FreeRadius and especially