Re: Post-Proxy attr_filter on Access-Accept Packets only

Mike O'Connor wrote: How do I only add a radius attribute via attr_filter on Accept-Accept Packets ? Run attr_filter only on the post-auth section. Or, are you doing proxying? My current config is adding the attribute on accounting reply packets also. That doesn't matter too much. It

Re: EAP+MD5+SQL trouble

It is probably a default setting of FreeRadiusto go Local when it doesn't find an Auth method. No. You are setting it. If it's not in radcheck, then in radgroupcheck table. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: IPv6 deployment howto

Matthias Cramer wrote: No, i unse 1.1.3 because this is the last version which seams not to have the sighup bug. seems. *NO* version of 1.x is safe under HUP. Maybe it's easier to reproduce in 1.1.4 and later. But 1.1.3 isn't safe, either. I've been doing some massive code changes in

Accounting with Oracle and stored procedures

Hi. I'm having problems integrating FreeRADIUS with Oracle (Instantclient 10.2.0.3 library). My client makes two stored procedures available to me: FUNCTION session_start(id_in IN VARCHAR2, terminal_address_in IN VARCHAR2, nas_address_in IN VARCHAR2, msisdn_in IN VARCHAR2, apn_in IN VARCHAR2,

Question regarding the Expiration attribute

FreeRADIUS Version 1.1.7 on Novell SLES10 The question is simple but I can't seem to find the answer to it so I will apologize in advance. Can some one tell me the format for entering the date in the Expiration attribute? I'm using the users file to authenticate users on a small wireless

RE: Simultaneous-Use and PEAP doesn't work correctly.

Hi, You said it's a bug in 1.x. I just tried the latest code in the cvs repository (2.0 I believe) and I still get the same problem. After the PEAP failure, it sends an Access-Challenge rather than an Access-Reject. Am I missing anything else here? Thank you in advance. Regards, -Tyler

Re: Question regarding the Expiration attribute

Terry Pelley a écrit : FreeRADIUS Version 1.1.7 on Novell SLES10 The question is simple but I can't seem to find the answer to it so I will apologize in advance. Can some one tell me the format for entering the date in the Expiration attribute? I'm using the users file to authenticate

Re: Simultaneous-Use and PEAP doesn't work correctly.

Marcotte, Tyler wrote: Hi, You said it's a bug in 1.x. I just tried the latest code in the cvs repository (2.0 I believe) and I still get the same problem. After the PEAP failure, it sends an Access-Challenge rather than an Access-Reject. That's completely different from what you said

RE: Simultaneous-Use and PEAP doesn't work correctly.

Marcotte, Tyler wrote: Hi, You said it's a bug in 1.x. I just tried the latest code in the cvs repository (2.0 I believe) and I still get the same problem. After the PEAP failure, it sends an Access-Challenge rather than an Access- Reject. That's completely different from what you

Re: Simultaneous-Use and PEAP doesn't work correctly.

Marcotte, Tyler wrote: ... PEAP: Got tunneled reply RADIUS code 3 Reply-Message := \r\nYou are already logged in - access denied\r\n\n PEAP: Processing from tunneled session code 0x81667248 3 Reply-Message := \r\nYou are already logged in - access denied\r\n\n PEAP:

RE: Simultaneous-Use and PEAP doesn't work correctly.

So? Why would you expect it to send an Access-Reject? If you watch what happens next in the conversation, you should see the side effects of the Simultaneous-Use. I'm not surprised at this behavior. It's what is *supposed* to happen. Alan DeKok. I can understand that nowhere in

802.1x kerberos

Is there a way to do 802.1x with Kerberos authentication using Freeradius? If their is can anyone point me in the right direction? We have been trying eap-ttls most recently with very little luck but everything I have read says this should be possible. What are we missing? Thanks, LB -

Problem with LDAP and Groups

Hello all. First off here's what I want to accomplish in the end. Use LDAP as the backend to store all user information including radius attributes, shell info and access to specific devices in specific locations. For example, Johnny needs access to all linux boxes in Atlanta and priv-level

Re: 802.1x kerberos

It should be. Use EAP-TTLS/PAP and configure kerberos module in radiusd.conf: http://wiki.freeradius.org/index.php/Rlm_krb5 Make sure that it works without EAP first. Ivan Kalik Kalik Informatika ISP Dana 10/10/2007, Lisa Besko [EMAIL PROTECTED] piše: Is there a way to do 802.1x with

Get raddb/certs/bootstrap to work on systems where make is not gnu make

Attached is a simplistic patch to get raddb/certs/bootstrap to work on systems where make is not GNU make. The patch is to: radiusd/configure to add ./raddb/certs/bootstrap to the ac_config_files. radiusd/raddb/certs/bootstrap to get it ready to be repo-copied to

Re: Problem with LDAP and Groups

You can group devices in huntgroups and add Hungroup-Name to those DEFAULT profiles. Ivan Kalik Kalik Informatika ISP Dana 10/10/2007, Bryan Evege [EMAIL PROTECTED] piše: Hello all. First off here's what I want to accomplish in the end. Use LDAP as the backend to store all user information

Re: Post-Proxy attr_filter on Access-Accept Packets only

Hi Alan Do you see it in the response packet? Or in debug mode? Or both? Yes with verbose turned on in radclient you see the extra value pair printed on the screen. CVS head has this fixed. You can run separate pre/post proxy sections for authentication and for accounting. Ok