Re: Build a custom module

2007-07-04 Thread baki
I use the makefile from the wiki, it includes -DNDEBUG. If I build freeradius and install on a fresh netinst Debian (without freeradius), my module works fine. But if I build only the module and use with a preinstalled freeradius, I get a segfault. Baki On Tue, 3 Jul 2007 16:07:02 -0700, Doug

Re: Build a custom module

2007-07-04 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I use the makefile from the wiki, it includes -DNDEBUG. If I build freeradius and install on a fresh netinst Debian (without freeradius), my module works fine. But if I build only the module and use with a preinstalled freeradius, I get a segfault. As you've

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread [EMAIL PROTECTED]
Hi, OK, I try to setup hostapd in freebsd to be my wireless NAS and configure the accounting server to my radius server. It works. Which mean the my previous NAS do not do the accounting job. Thank for your information. By the way, I do notice the accounting request sent by hostapd is very

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread Alan DeKok
[EMAIL PROTECTED] wrote: ... By the way, I do notice the accounting request sent by hostapd is very basic and what should I do if i need to add more attribute? Read the hostapd documentation. For example, the accounting packet do not include the full username i.e. [EMAIL PROTECTED] Looking

Re: Build a custom module

2007-07-04 Thread Doug Hardie
On Jul 4, 2007, at 00:15, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I use the makefile from the wiki, it includes -DNDEBUG. If I build freeradius and install on a fresh netinst Debian (without freeradius), my module works fine. But if I build only the module and use with a preinstalled

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread [EMAIL PROTECTED]
Hi Alan, Read the hostapd documentation. Nothing much the documentation about the attributes. If the User-Name in the Access-Request was [EMAIL PROTECTED], it looks like a bug in hostapd. If he User-Name in the Access-Request was user, then hostapd is functioning correctly.

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread Andreas Wetzel
Hi, [EMAIL PROTECTED] wrote: OK, I try to setup hostapd in freebsd to be my wireless NAS and configure the accounting server to my radius server. It works. Which mean the my previous NAS do not do the accounting job. Thank for your information. By the way, I do notice the accounting

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread Alan DeKok
Andreas Wetzel wrote: Did anybody notice, that hostapd *always* sends a NAS-Port with a value of 0 for *any* connected station? This happens for me with the hostapd 0.4.8 included with FreeBSD 6.2, as well as with hostapd 0.5.8. And it is presumably the reason, why I cannot seem to get radwho

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread Andreas Wetzel
Alan DeKok wrote: Andreas Wetzel wrote: Did anybody notice, that hostapd *always* sends a NAS-Port with a value of 0 for *any* connected station? This happens for me with the hostapd 0.4.8 included with FreeBSD 6.2, as well as with hostapd 0.5.8. And it is presumably the reason, why I

Re: Build a custom module

2007-07-04 Thread baki
Thank you! I deleted -DNDEBUG from the Makefile and now it works :) Baki On Wed, 4 Jul 2007 02:23:53 -0700, Doug Hardie [EMAIL PROTECTED] wrote: On Jul 4, 2007, at 00:15, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I use the makefile from the wiki, it includes -DNDEBUG. If I build

Re: Proxy and clear-text password

2007-07-04 Thread Luis Galan
Hello! great!! Fantastic!! it works!! Thank you very much for your help. You put me in the right direction and you help me to understand the whole thing. You should work as a teacher :-) I was really lost! Thanks Luis Marcel De Boer escribió: Hi! The secret key between nas and radius1

User not found using LDAP

2007-07-04 Thread Amr el-Saeed
Dear all, i'm using freeradius-1.1.0-1 i need to make a default action if a user is not found . i need to make this action ( allow) for a while, i mean if the radius searched the LDAP and didn't find the user reply to the router with OK. i didn't find anything in the docs. any ideas ??

Re: User not found using LDAP

2007-07-04 Thread Alan DeKok
Amr el-Saeed wrote: i'm using freeradius-1.1.0-1 Why? 1.1.6 has been out for months. i need to make a default action if a user is not found . i need to make this action ( allow) for a while, i mean if the radius searched the LDAP and didn't find the user reply to the router with OK. i

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread Alan DeKok
Andreas Wetzel wrote: Yes, but in the case of hostapd I believe this is a bug. Internally it assigns IDs starting at index 1, which should go into the NAS-Port attribute. But for some reason it always ends up with 0. Does it track multiple connections from the same host? i.e.

Re: Freeradius + LDAP + EAP-TTLS with PAP cannot login

2007-07-04 Thread Andreas Wetzel
Alan DeKok wrote: Andreas Wetzel wrote: Yes, but in the case of hostapd I believe this is a bug. Internally it assigns IDs starting at index 1, which should go into the NAS-Port attribute. But for some reason it always ends up with 0. Does it track multiple connections from the same

Re: Build a custom module

2007-07-04 Thread Hugh Messenger
Alan DeKok [EMAIL PROTECTED] said: Hugh Messenger wrote: flame I'm just wondering why some of the major Linux releases are still shipping 1.1.3. There are versions of redhat that still use 1.0.4. Ouch. Redhat either doesn't care, or doesn't have the resources to keep up to date

Re: disappearing configuration items in unlang

2007-07-04 Thread Hugh Messenger
Alan DeKok [EMAIL PROTECTED] wrote Hugh Messenger wrote: If I wrap an 'if' statement round something (in this case a query in mysql_dialup.conf), any config items seem to get blown away. You can't. if is a processing directive that is valid only when packets are being processed. The

Re: Shared secret is incorrect - but it is identical!

2007-07-04 Thread ken
Processing the authorize section of radiusd.conf modcall: entering group authorize for request 35 modcall[authorize]: module preprocess returns ok for request 35 radius_xlat: '/var/log/radius/radacct/nnn.nnn.nnn.nnn/auth-detail-20070704' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address

Wiki error

2007-07-04 Thread Roberto Greiner
I know this is probably not the best place to report a problem with the wiki, but I don't have a login in it and there is no page to create one, and the 'bug report' link doesn't get to anywhere. The problem is in the http://wiki.freeradius.org/WPA_HOWTO page. Instead of having anything useful,

Re: Wiki error

2007-07-04 Thread Arran Cudbard-Bell
Roberto Greiner wrote: I know this is probably not the best place to report a problem with the wiki, but I don't have a login in it and there is no page to create one, and the 'bug report' link doesn't get to anywhere. The problem is in the http://wiki.freeradius.org/WPA_HOWTO page. Instead

Re: Shared secret is incorrect - but it is identical!

2007-07-04 Thread ken
Edvin Seferovic wrote: Does this have anything to do with the authentication method and AD ? I don't think so. Neither do I! We're not looking at AD yet. A colleague of mine tried to set it up for JRS by roughly copying someone else's configuration. It failed. So I reinstalled FreeRadius

pool-key issue in rlm_sqlippool

2007-07-04 Thread Hugh Messenger
I have a problem with the pool-key in rlm_sqlippool. The pool-key is defined in the 'global' sqlippool.conf thusly: ## Attribute which should be considered unique per NAS ## Using NAS-Port gives behaviour similar to rlm_ippool. ## Using Calling-Station-Id works for NAS that send fixed

RE: pool-key issue in rlm_sqlippool

2007-07-04 Thread Hugh Messenger
I have a problem with the pool-key in rlm_sqlippool. PS, I'm using 2.0.0pre1. Or at least I will be. My dialups currently talk to my original Funk RADIUS, and I have a live FreeRadius 1.1.7 for wireless (which uses Calling-Station-Id as the pool-key). But once 2.0.0 is ready for prime time,

Re: Wiki error

2007-07-04 Thread Peter Nixon
On Wed 04 Jul 2007, Arran Cudbard-Bell wrote: Roberto Greiner wrote: I know this is probably not the best place to report a problem with the wiki, but I don't have a login in it and there is no page to create one, and the 'bug report' link doesn't get to anywhere. The problem is in the

Re: pool-key issue in rlm_sqlippool

2007-07-04 Thread Peter Nixon
On Wed 04 Jul 2007, Hugh Messenger wrote: I have a problem with the pool-key in rlm_sqlippool. The pool-key is defined in the 'global' sqlippool.conf thusly: You can run two copies of the module. As long as you don't have the same pool name in both, just assign your pool name based on hunt

Re: Shared secret is incorrect - but it is identical!

2007-07-04 Thread A . L . M . Buxey
Hi, I acan make ntlm_auth work from command line but not from FreeRadius yet - so I dropped it and am trying to ensure I can run a minimal test. permissions. make sure that /var/cache/samba/winbind_priviledged is owned by freeradius or the freeradius group. alan - List

Re: disappearing configuration items in unlang

2007-07-04 Thread Alan DeKok
Hugh Messenger wrote: It would be very nice, and very intuitive. How hard would it be to just provide that one simple construct (if config item related condition {}) during parsing of the startup config? Extremely difficult, unfortunately. The problem is that the config assignments are

Re: Shared secret is incorrect - but it is identical!

2007-07-04 Thread Alan DeKok
ken wrote: ... User-Password = \356za\360V\202oljug\263\025M!) (1) The shared secret is wrong (2) The code is buggy There are no alternatives. This is often due to broken MD5 libraries, or 32/64-bit issues. But FreeRADIUS hasn't had those kind of bugs for *years*. Alan

Re: Wiki error

2007-07-04 Thread Alan DeKok
Roberto Greiner wrote: I know this is probably not the best place to report a problem with the wiki, but I don't have a login in it and there is no page to create one, and the 'bug report' link doesn't get to anywhere. The problem is in the http://wiki.freeradius.org/WPA_HOWTO page. Instead