Clark J. Wang wrote:
> I've configured a proxy RADIUS server in `proxy.conf' and an LDAP server
> in `radiusd.conf' and they work well. I want to forward those requests
> rejected by the proxy RADIUS server to the LDAP server and
> re-authenticate them again. Can I do that in FreeRADIUS? And how
On 6/5/07, Phil Mayers <[EMAIL PROTECTED]> wrote:
Clark J. Wang wrote:
> I've configured a proxy RADIUS server in `proxy.conf' and an LDAP server
> in `radiusd.conf' and they work well. I want to forward those requests
> rejected by the proxy RADIUS server to the LDAP server and
> re-authenticat
Hi all,
we use Freeradius as proxy based on prefix realm.
We have to send an immediate reject reply to requests with a specified
realm
At the moment our freeradius proxy sends these requests to an IP address
assigned to nothing...Is there a better way to do this?
-
List info/subscribe/un
It will work fine if you set the pool to override the IP address already
set.
1. Leave the # Default profile for everyone in the users file
2. Make groups SUSPENDED, DSL500 etc. in groupcheck table. You need 2
entries for group SUSPENDED, and one for others:
(GroupName, Attribute, op, Value)
SUS
Add notrealm in that realms configuration if you need to keep it in your
radiusd/proxy.conf for some reason.
Ivan Kalik
Kalik Informatika ISP
Dana 5/6/2007, "Nicola Iotti" <[EMAIL PROTECTED]> piše:
>Hi all,
>we use Freeradius as proxy based on prefix realm.
>We have to send an immediate
Hi all,
thank you for answers...but I think my problem is a little
different...we have to reject request with a specified realm, not
without realm.
I mean for example we have to reject immediately requests with realm =
'office01' and to proxy requests with realm = 'office02'
Regards
>Hi a
Hi all, I'm use FreeRadius as DHCP server (sqlippool).
Data Base is Oracle 10g. Freeradius+Oracle.
How to use binding variable in Oracle?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
If you don't set up realm "office1" requests will be processed
locally, whole office1\username will be treated as username and since
such user doesn't exist (I hope) in your local database, request will
be rejected.
Ivan Kalik
Kalik Informatika ISP
Dana 5/6/2007, "Nicola Iotti" <[EMAIL PROTECTE
I'm trying to write my own module and come into some problems.
I'm trying to access request attributes using pairfind() as mentioned in
the Wiki. I can get normal attributes without problem but having
problem with VSAs.
I tried to access some Cisco VSAs like h323-conf-id, h323-call-origin by
using
Hi
In log file i am not able to get anyhting.First time i got one log saying
its started and all. After that if again i start the server no logs are
coming.But if i run in debug mode (RADIUS -X) its throwing all procedure and
user is able to connect also
Due to this i am unabe to change my p
Were you ever able to solve the issue of multipe OU's? I have about 100
OU's that have users under them, running without a specified OU doesn't
work, and obviously once I drop into an OU it hits the users that live
there, and no others.
Ryan
On 4/29/07, Jacob Jarick <[EMAIL PROTECTED]> wrote
hi all,
i m trying to get EAP-TLS working for free radius, but i m not able to figure
out how to handle all those certificates. Can u tell me how are u using those
certificates and are u using openssl for generating those certificates and do
need to run openssl explicitly along with radius serve
On Tue, 2007-06-05 at 09:22 -0500, Ryan Kramer wrote:
>
> Were you ever able to solve the issue of multipe OU's? I have about
> 100 OU's that have users under them, running without a specified OU
Why can't you specify a top-level OU and use subtree searches?
> doesn't work, and obviously once
i have configured my freeradius as proxy, and i have used in fisrt eap type
md5! now i want to use it with eap-peap and use active directory in windows
server 2003! my application must be use the authentication which start
windows session on a domain server in active directory to authenticate use
I'm having some trouble with the ldap group configuration against AD and
need a little help.
Freeradius 1.1.4
MS 2003 Active Directory
radiusd.conf
groupname_attribute = "cn"
groupmembership_filter = "(member=%{Ldap-UserDn})"
groupmembershi
Hi List
Since hours i am trying to get dynamic vlan-assigning working with a
Dell PowerConnect 3448 Switch and Freeradius 1.1.6.
In my Users-File I have the following Default-Entry (like seen in
some other tutorials, often used with Cisco-devices).
DEFAULT Auth-Type := EAP
Tunnel-
Dourty, Brian R. (IATS) wrote:
> I’m having some trouble with the ldap group configuration against AD and
> need a little help.
>
>
>
> Freeradius 1.1.4
Upgrade.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I just got Freeradius up and running
I have am having the users online showing user on several times (note below)
This is from users online from the query to the radacct table in mysql
jldevore 6/5/2007 7:19:55 PM
jldevore 6/5/2007 7:19:40 PM
jldevore 6/5/2007 7:19:25 PM
jldevore 6/5/20
http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO
Dana 5/6/2007, "parfait kouassi nda" <[EMAIL PROTECTED]> piše:
>
>
>i have configured my freeradius as proxy, and i have used in fisrt eap type
>md5! now i want to use it with eap-peap and use active directory in windows
>se
These are suspiciously spaced exactly at 15 minutes. Are you inserting
accounting updates into radacct table?
Ivan Kalik
Kalik Informatika ISP
Dana 6/6/2007, "Jeff" <[EMAIL PROTECTED]> piše:
>I just got Freeradius up and running
>
>I have am having the users online showing user on several tim
to be quite honest not even sure.
What must I check to be certain?
One thing I do no, the user is offline now, and
they still are there in as online same entrys
_
From: [EMAIL PROTECTED]
To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED]
Sent: Tue, 05 Jun 2007 21:45:47
of next modules, the user is accepted without
any groups.
This patch fixes that issue:
diff ./src/modules/rlm_sql/rlm_sql.c.orig
./src/modules/rlm_sql/rlm_sql.c
1044c1044
< return RLM_MODULE_NOTFOUND;
---
return RLM_MODULE_REJECT;
After that patch the FR
hi shantunu
see my comments below..
On 6/5/07, shantanu choudhary <[EMAIL PROTECTED]> wrote:
hi all,
i m trying to get EAP-TLS working for free radius, but i m not able to
figure out how to handle all those certificates.
You need one CA , one server certificate and one client certificate,
Hi,
I was just trying to do the same thing - the device has to support the VLAN settings from Radius, otherwise you are screwed :-(
download the radius dictionary for powerconnect 3448 and look if the parameters are in here - in my case they were not and got
ignored as well...
Jan Schermer
Li
24 matches
Mail list logo