Re: FREERADIUS + MYSQL +DHCP3

2006-12-12 Thread Phil Mayers
Alan DeKok wrote: Phil Mayers wrote: how can work mysql and dhcp3 together That's a pretty difficult thing to do. There's no in-built solution, you would have to manufacture something. DHCP is UDP. RADIUS is UDP. Both use packed attribute-value pairs. The main question is, is

RE : NotBefore and Epiration (was Temporary Accounts), Enhancement proposal

2006-12-12 Thread Thibault Le Meur
-Message d'origine- De : [EMAIL PROTECTED] radius.org [mailto:[EMAIL PROTECTED] sts.freeradius.org] De la part de Alan DeKok Envoyé : lundi 11 décembre 2006 19:47 À : FreeRadius users mailing list Objet : Re: NotBefore and Epiration (was Temporary Accounts), Enhancement

Re: Problem with unprintable characters in the password

2006-12-12 Thread Kamyk
Hello, I searched that on google and that forum :( but i dindn't find any resolve. The worst is, that i didnt change anythings on that server, and it's doesn't works :( BR, Kamyk -- View this message in context:

Re: Logging into MySQL doesnt work, how enable MAC address control on MySQL

2006-12-12 Thread Andrej Simko
Hi So this is detail file from NAS, but there is no Start time or Stop type. So How can I setup NAS to send also this information? Thank you for your reply. AnDY PS: My authentication that I want to have is: PEAP + MySQL ( username,pass )+ MAC address control from MySQL database Packet-Type

Re: !!! Assertion failed in listen.c, line 621 !!!

2006-12-12 Thread Peter Nixon
On Tue 12 Dec 2006 03:08, Guilherme Franco wrote: No way man! :) I've done a CVS clean install now (EVERYTHING old deleted before install and rebooted machine) but the same error occurs! It's just like the log from the previous post (below). radiusd dies after Sending Access-Request to

rlm_perl - Debian sarge

2006-12-12 Thread Graeme Hinchliffe
Hi, I have written a module for use with freeRADIUS which seems to work fine and dandy on my desktop Fedora box. However when I drop this module and config on one of the production (and now test) Debian Sarge boxes running the same initial config with same version of freeRADIUS I get :

Re: !!! Assertion failed in listen.c, line 621 !!!

2006-12-12 Thread Guilherme Franco
Yes, I'm using it single-threaded, since September. I don't want to go back to 1.1.3 since it gave me problems. Thanks. On 12/12/06, Peter Nixon [EMAIL PROTECTED] wrote: On Tue 12 Dec 2006 03:08, Guilherme Franco wrote: No way man! :) I've done a CVS clean install now (EVERYTHING old

RE: rlm_perl - Debian sarge

2006-12-12 Thread Jonathan De Graeve
Hi, I have written a module for use with freeRADIUS which seems to work fine and dandy on my desktop Fedora box. However when I drop this module and config on one of the production (and now test) Debian Sarge boxes running the same initial config with same version of freeRADIUS I get

MySQL: don't logging to radacct

2006-12-12 Thread Felipe Neuwald
Hi Folks, I'm using freeradius-1.1.3_1 on FreeBSD 6.2-PRERELEASE and mysql-server-5.0.27. My database connection is ok, and I'm sucessfully authorizeing on MySQL databse. After user connection, a entry is added on radpostauth table. My problem is cause there is no entry on radacct table.

RE : MySQL: don't logging to radacct

2006-12-12 Thread Thibault Le Meur
-Message d'origine- De : [EMAIL PROTECTED] radius.org [mailto:[EMAIL PROTECTED] sts.freeradius.org] De la part de Felipe Neuwald Envoyé : mardi 12 décembre 2006 18:06 À : freeradius-users@lists.freeradius.org Objet : MySQL: don't logging to radacct Hi Folks, I'm using

Re: RE : MySQL: don't logging to radacct

2006-12-12 Thread Felipe Neuwald
Hi Dennis and Thibault, I redirected some users of my old radius to this new radius and I still have no accounting. I redirected traffic in firewall directly from ISP to old server to new server. And here the results of radclient: [EMAIL PROTECTED] /tmp]# cat radius.teste | radclient

Re: MySQL: don't logging to radacct

2006-12-12 Thread Dennis Skinner
Felipe Neuwald wrote: Does somebody knows why there is no entry on my radacct table? Yes. [EMAIL PROTECTED] /usr/local/etc/raddb]# radtest brt adsl 127.0.0.1 0 teste Sending Access-Request of id 206 to 127.0.0.1 port 1812 User-Name = brt User-Password = adsl

upgrade from .9 to latest

2006-12-12 Thread Andrew Long
Would like to upgrade from .9 to latest build; what is recommended upgrade procedure? I have successfully built a new server (on another box) but can find no docs outlining upgrade procedure, especially such a large step. Is it possible to upgrade, or do I build a build another server on the same

Re: RE : MySQL: don't logging to radacct

2006-12-12 Thread Felipe Neuwald
Hi Dennis and Thibault, I redirected some users of my old radius to this new radius and I still have no accounting. I redirected traffic in firewall directly from ISP to old server to new server. And here the results of radclient: [EMAIL PROTECTED] /tmp]# cat radius.teste | radclient 127.0.0.1

Re: upgrade from .9 to latest

2006-12-12 Thread Alan DeKok
Andrew Long wrote: Would like to upgrade from .9 to latest build; what is recommended upgrade procedure? I have successfully built a new server (on another box) but can find no docs outlining upgrade procedure, especially such a large step. Is it possible to upgrade, or do I build a build

problem with ldap search filter with '/'s (front slashes)

2006-12-12 Thread Mark T. Valites
I'm trying to set up authentication to a SunOne Directory that requires not only a successful bind with by radius on behalf of the user attempting to authticate to it, but also a specified LDAP search filter to return a result as well. I can't seem to get the freeradius ldap module to return

Re: Counter

2006-12-12 Thread Sean
Hi Alan, Thanks for all the help last night. I've made a lot of progress today. Max-Daily-Session is now being recognised as a valid attribute and users with the attribute are being authenticated. The problem I now have is that the users are being disconnected after their allocated time has

Re: Counter

2006-12-12 Thread Alan DeKok
Sean wrote: Hi Alan, Thanks for all the help last night. I've made a lot of progress today. Max-Daily-Session is now being recognised as a valid attribute and users with the attribute are being authenticated. The problem I now have is that the users are being disconnected after their

Re: !!! Assertion failed in listen.c, line 621 !!!

2006-12-12 Thread Alan DeKok
Peter Nixon wrote: Running CVS HEAD in single threaded mode works around the problem for the time being... Ugh. After staring at the code a little more, the bug is in threads.c, where it was passing 'request-proxysecret' rather than 'request' to the 'listener-send' function. It should

Re[2]: upgrade from .9 to latest

2006-12-12 Thread Andrew Long
Would like to upgrade from .9 to latest build; what is recommended upgrade procedure? I have successfully built a new server (on another box) but can find no docs outlining upgrade procedure, especially such a large step. Is it possible to upgrade, or do I build a build another server on the

Re: problem with ldap search filter with '/'s (front slashes)

2006-12-12 Thread Kostas Kalevras
Mark T. Valites wrote: I'm trying to set up authentication to a SunOne Directory that requires not only a successful bind with by radius on behalf of the user attempting to authticate to it, but also a specified LDAP search filter to return a result as well. I can't seem to get the freeradius

Re: RE : MySQL: don't logging to radacct

2006-12-12 Thread Dennis Skinner
Felipe Neuwald wrote: Hi Dennis and Thibault, I redirected some users of my old radius to this new radius and I still have no accounting. I redirected traffic in firewall directly from ISP to old server to new server. And here the results of radclient: [EMAIL PROTECTED] /tmp]# cat

Re: upgrade from .9 to latest

2006-12-12 Thread Alan DeKok
Andrew Long wrote: Can you tell me what options I should change in the compile to be sure nothing interferes with the running server - will it be just the install paths, or is there more? $ ./configure --prefix=... Will install it into a directory that you name, which can be different

Re: !!! Assertion failed in listen.c, line 621 !!!

2006-12-12 Thread Guilherme Franco
Thanks a lot! I gonna test it right now! On 12/12/06, Alan DeKok [EMAIL PROTECTED] wrote: Peter Nixon wrote: Running CVS HEAD in single threaded mode works around the problem for the time being... Ugh. After staring at the code a little more, the bug is in threads.c, where it was passing

Re: FREERADIUS + MYSQL +DHCP3

2006-12-12 Thread Alan DeKok
Phil Mayers wrote: True. And you've already got the parser for hierarchical configs as well as an SQL and logging infrastructure. Exactly. It's not something I'd use but I can imagine it being very very useful in smaller and/or simpler deployments (which is not to say trivial). There

Huntgroups, Users and Proxy

2006-12-12 Thread Walt Reynolds
I am going in circles here and not getting anywhere. I will try to describe what I want to do starting with huntgroups. huntgroup: All NAS-IP-Address == 10.213.226.1 All NAS-IP-Address == 10.213.226.2 All NAS-IP-Address == 10.213.226.3 All

Re: problem with ldap search filter with '/'s (front slashes)

2006-12-12 Thread Mark T. Valites
On Tue, 12 Dec 2006, Kostas Kalevras wrote: Mark T. Valites wrote: I'm trying to set up authentication to a SunOne Directory that requires not only a successful bind with by radius on behalf of the user attempting to authticate to it, but also a specified LDAP search filter to return a

Re: Counter

2006-12-12 Thread Sean
On Tue, 2006-12-12 at 22:35 +0100, [EMAIL PROTECTED] wrote: Sean wrote: Hi Alan, Thanks for all the help last night. I've made a lot of progress today. Max-Daily-Session is now being recognised as a valid attribute and users with the attribute are being authenticated. The problem I now

Username to IP matching

2006-12-12 Thread Daniel Davidson
I have a working freeradius system that is logging the hardware addresses of the users as they successfully connect through the system. I would like to also match the userid to the hardware address, and try as I might I cannot really figure/find out how to do that. Can someone show me the way or

Advice on poptop - freeradius - ldap

2006-12-12 Thread Dirk Enrique Seiffert
Hello, I am trying to get Poptop, Freeradius and Openldap to work together. Basically our VPN users should login with their credentials, to be checked against ldap. I don't want to store radius attributes in LDAP, just assign objectclass=pptpServerAccount for VPN useres in LDAP. I set ldap in

Re: Counter

2006-12-12 Thread Alan DeKok
Sean wrote: The accounting works for Max-All-Session and Expiration. Also the user is disconnected after the correct time has elapsed under Max-Daily-Session. The problem is that he can log back on again straight away, instead of having to wait twenty four hours. You've said that lots.

Re: Advice on poptop - freeradius - ldap

2006-12-12 Thread Alan DeKok
Dirk Enrique Seiffert wrote: I set ldap in authorize {} and authenticate {}. In users I added DEFAULT Auth-Type := LDAP Fall-Through = 1 Why? That's not necessary. When i try to connect from an pptp client my logs show: Tue Dec 12 19:07:31 2006 : Debug: