Re: Performance Stats

Arran Cudbard-Bell wrote: > It was PAP... > > Running with debugging mode *off* yields much better results ! Well, yes. > Still with completely vanilla install , > only getting > > [req] => 5000 > [parallel] => 10 > [total] => 5 > [start] => 1178820825.99 > [stop]

free radius 1.1.6 -eap-tls authentication

Hi list While doing eap-tls authentication i am getting the following debug message.Anybody please clarify. TLS_accept: Need to read more data: SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 eaptls_verify returned 1 eaptls_proces

Re: Performance Stats

[EMAIL PROTECTED] wrote: > Hi, > >> Running with debugging mode *off* yields much better results ! >> >> Still with completely vanilla install , >> only getting > > what are your results when running the performance testing method > as prescribed in the docs ? > > alan > - > List info/subscribe

Re: Performance Stats

Hi, > Running with debugging mode *off* yields much better results ! > > Still with completely vanilla install , > only getting what are your results when running the performance testing method as prescribed in the docs ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/li

Center for Internet Security - Call for Participation for FreeRADIUS Benchmark

***Thanks to moderators for allowing this post - it's for a good cause!*** Hi folks, I'd like to introduce myself. My name is Dave Shackleford, and I represent the Center for Internet Security. Some of you may know of us, and some of you may not. CIS is a non-profit that coordinates teams o

Performance Stats

It was PAP... Running with debugging mode *off* yields much better results ! Still with completely vanilla install , only getting [req] => 5000 [parallel] => 10 [total] => 5 [start] => 1178820825.99 [stop] => 1178820836.79 [period] => 10.791821003 [req_s]

RE: Authentication problem

I would have a look at radiusd.conf. Something is wrong there. None of the modules (PAP, CHAP, sql etc.) have loaded. Ivan Kalik Kalik Informatika ISP Dana 10/5/2007, "Elie Hani" <[EMAIL PROTECTED]> piše: >Hi; > >Sorry; this is the capital X output attached. > >Elie > >-Original Message

Re: Authentication problem

Hi, > Thank you Alan, I will review it. > I used the same configuration on Fedora core 4 and it's working perfectly. > When I installed Fedora 6, the freeradius version has been changed, does it > matter? the newer, the better . 1.1.6 is the current general stable release...and i prefer to roll

RE: Authentication problem

Thank you Alan, I will review it. I used the same configuration on Fedora core 4 and it's working perfectly. When I installed Fedora 6, the freeradius version has been changed, does it matter? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTE

Re: Authentication problem

Hi, > Sorry; this is the capital X output attached. and sorry, i see you are loading in via postgresql.conf however, i see no successful connect to the DB - so 1) did you compile FR yourself...or did you use RPM? 2) if compiled yourself, do you have postgresq-devel etc installed? (ie read t

Re: Authentication problem

Hi, > Sorry; this is the capital X output attached. yep. not a single mention of SQL - that means that you havent changed the config files to enable SQL. you need to read and edit at LEAST the following 2 files. $YOUR_CONFIG_LOCATION/sql.conf- to enable postgres engine and

LDAP/RACF authentication issue

radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 10.71.175.19:36661, id=228, length=59 User-Name = "NBCTST1"

RE: Authentication problem

Hi; Sorry; this is the capital X output attached. Elie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, May 10, 2007 6:34 PM To: FreeRadius users mailing list Subject: Re: Authentication problem Hi, > This is the output

Re: Authentication problem

Hi, > This is the output i'm getting with radiusd -x, but nothing about the SQL: > > Starting - reading configuration files ... > Using deprecated naslist file. Support for this will go away soon. > Initializing the thread pool... > Listening on authentication *:1812 > Listening on accounting *:1

RE: Authentication problem

This is the output i'm getting with radiusd -x, but nothing about the SQL: Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Initializing the thread pool... Listening on authentication *:1812 Listening on accounting *:1813 Ready to proce

Re: Problems with PEAP

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alan DeKok wrote: > pippo metallaro wrote: >> i use freeradius with eap -peap and MySQL...but the freeradius don't send an >> access-accept at the end of authentication ...the server send an >> access-challenge,i don't know what's the problem... >

Re: Problems with PEAP

pippo metallaro wrote: > i use freeradius with eap -peap and MySQL...but the freeradius don't send an > access-accept at the end of authentication ...the server send an > access-challenge,i don't know what's the problem... Perhaps you could try reading "eap.conf", or the FAQ, or other documen

Re: 1.1.6 with rlm_sqlippool: ip=[] len=0

Guilherme Franco wrote: > On my earlier posts (months ago, with 1.1.4), it has been told that the > latest CVS would solve the problem. I thought that 1.1.6 would include > the fix from the CVS head. > > 1.1.6 Changelog: > *Fixed bug in PostgreSQL module that caused server crash. The error you

Re: ttls problem

Hi again. I reconfigured securew2 but at this time i get "received invalid server certificate" error. Which part of my server certificate or root ca certificate could be missed. Could it be related with xpextensions. My radiusd for new configuration is listed below: --

Problems with PEAP

hi, i use freeradius with eap -peap and MySQL...but the freeradius don't send an access-accept at the end of authentication ...the server send an access-challenge,i don't know what's the problem... i'use a hp 2650 switch client,and a win xp supplicant, this is the the result of the debug mode

Re: 1.1.6 with rlm_sqlippool: ip=[] len=0

Hello Mr. DeKok, On my earlier posts (months ago, with 1.1.4), it has been told that the latest CVS would solve the problem. I thought that 1.1.6 would include the fix from the CVS head. 1.1.6 Changelog: *Fixed bug in PostgreSQL module that caused server crash. I thought that this would correct

execute more than one sql query

Dear All, I need to execute two queries using radius in sql.conf. i tried to put two queries like this : in the file i have accounting_update_query_alt = "query_1" i made it accounting_update_query_alt = "query_1 ; query_2" but i got an error from MySql concerning the second section '; quer

Re: ttls problem

My certificates have read write and execute permissions A.L.M.Buxey wrote: > > Hi, > > what are the permissions of your certificates? can radiusd (or whatever > the ID is of the freeradius process) read them? > > alan > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/l

Re: eap-tls authentication with free radius 1.1.6

Hi all I am trying to do eap-tls authentication with 1.1.6.My xp client is saying attempting to authenticate. So in the output i got when i tried to connect in debug mode is Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/ra

Re: ttls problem

Can i post my radiusd.conf and eap.conf here. Would it be helpfull? A.L.M.Buxey wrote: > > Hi, > > what are the permissions of your certificates? can radiusd (or whatever > the ID is of the freeradius process) read them? > > alan > - > List info/subscribe/unsubscribe? See > http://www.freer

Re: ttls problem

I posted the question to the forum. Thank you for your help. SecureW2 (List) wrote: > > tevfik, > > Post the question in the SecureW2 forum, www.securew2.com/forum/. I will > get back to you via the forum. > > Regards, > > Tom > > tevfik schreef: >>> did you configure SecureW2 to allow n

Re: ttls problem

tevfik, Post the question in the SecureW2 forum, www.securew2.com/forum/. I will get back to you via the forum. Regards, Tom tevfik schreef: >> did you configure SecureW2 to allow new connections? >> > > Yes i tried both combinations, nothing is changed. > > In addition to this when I ent

Re: ttls problem

Hi, what are the permissions of your certificates? can radiusd (or whatever the ID is of the freeradius process) read them? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: eap-tls authentication with free radius 1.1.5

On 5/10/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: anoop, please fix your quoting. Configurations are not interchangeable between the snapshot tree, 1.1.5 and 1.1.6 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authentication problem

Parameters for database access are in sql.conf. But post output from radiusd -X so we can see what's happening. If it can't access the database it will fail during server setup stage as well. Ivan Kalik Kalik Informatika ISP Dana 10/5/2007, "Elie Hani" <[EMAIL PROTECTED]> piše: > >Hi > >I have

RE: FR with MySQL - Stored Procedures

I added your hack to my version too. I also don't get any errors till now. It seems to work with SP, and also normal SQL-querys. I've modified your patch with some comments and also added a mysql_version check, so that the patch will only apply to MySQL version > 5. Here is the diff...so please,

Re: eap-tls authentication with free radius 1.1.5

Dear all With free radius 1.1.6 i am getting the following debug messages.Still authnticationi is not happenig [EMAIL PROTECTED] raddb]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: includin

Authentication problem

Hi I have configured freeradius on Fedora core 6, and using postgresql database. I've created also a username locally on the server, defining from which pool to take it's IP, it works fine, but when I do the necessary changes and re-do the tests again with a username and password from the databas

Re: ttls problem

tevfik wrote: > I wasn't able to see any problem with ldap configuration because it works > with radtest command. Which doesn't use EAP. It means that your server configuration is mostly correct, but something else might still go wrong. > Is there a problem with my ldap configuration. Is there

Re: FreeRadius performance requirements

O/H Arnnei Speiser έγραψε: > Hi Guys, > Any recommendations on the Server minimum configuration - memory, cpu > etc for using FR with 10k, 20k, 50k users ? Moved to freeradius-users!! The number of users is not the major factor. Rather the number of requests/sec. Where are the users stored (plai

Re: Long Access time

Josh Shamir wrote: > The strange problem is that the long authentication time are about the > same for Win XP build-in supplicant and MAC OS X supplicant. What kind > of changes can i made in supplicant configuration to try to minimize > authentication time? I don't know. > Ok, but could I impr

Re: ttls problem

>did you configure SecureW2 to allow new connections? Yes i tried both combinations, nothing is changed. In addition to this when I enter correct username but wrong password, I got similar debug log which i lised below. I wasn't able to see any problem with ldap configuration because it works w

Re: 1.1.6 with rlm_sqlippool: ip=[] len=0

Guilherme Franco wrote: > This was happening with 1.1.4 and I thought that 1.1.6 would correct > this. > > Wasn't 1.1.6 supposed to work this out? Which part of the ChangeLog said that? Alan DeKok. -- http://deployingradius.com - The web site of the book http://dep

Re: Date expansion fails for inner encryption tunnel log files.

Arran Cudbard-Bell wrote: > Firstly is is possible to specify return codes for users files depending > on matched sections ? Or will the files module always return ok ? You can't specify return codes from the "users" file. > Secondly, whats considered decent throughput in terms of (serial) >

Re: freeradius & redback sms

Samson Martinez wrote: > We are currently using a Redback SMS 500 to terminate PPPoE sessions for > client desktops. Up until now an older Steelbelted Radius server has > been used to authenticate RADIUS requests forwarded by the Redback and > it's worked ok. We want to transfer the RADIUS support

RE: FR with MySQL - Stored Procedures

Did some further research on the MySQL - FR Stored Procedure (SP) problem. When calling the SP, MySQL always returns two results. One is the actual result and the other is the number of affected rows, which is different to a normal e.g. SELECT query. SP: mysql> call CheckIt('myString'); +