Re: authentication problem with sql

2007-10-24 Thread Alan DeKok
hadi golestani wrote: No one knows? Edit the users file, and delete the entry setting Auth-Type to System. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: authentication problem with sql

2007-10-24 Thread A . L . M . Buxey
Hi, No one knows? On 10/23/07, hadi golestani [EMAIL PROTECTED] wrote: ^ you posted less than 24 hours ago. this isnt a commercial support contract. maybe someone knows and is currently busy or away. looking from the logs, it seems that your FR is configured to use system

Re: FreeRadius Server: Installation problem

2007-10-24 Thread A . L . M . Buxey
Hi, I am trying to install 1.1.6. When i try to make the SUSE Linux Package and run the rpm build command then an error message comes which reads: freeRadius 1.1.5.gz file not present. check the Version line in the freeradius.spec file of the 1.1.6 suse directory. probably

Re: authentication problem with sql

2007-10-24 Thread hadi golestani
sorry alan, problem solved, tnx a lot , It's a great community. On 10/24/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi, No one knows? On 10/23/07, hadi golestani [EMAIL PROTECTED] wrote: ^ you posted less than 24 hours ago. this isnt a commercial support contract.

R: Ip pool lease migration

2007-10-24 Thread Francesco Cristofori
Is it a good idea to use rlm_ippool_tool to extract leases from radA and then inserting them in radB with rlm_ippool_tool -n ? Why? Because I thought radrelay would send only accounting records and not ip lease information. :-) If you need to copy information from one server to

R: Ip pool lease migration

2007-10-24 Thread Francesco Cristofori
I'm going to try it, thanks for the suggestion. Is it correct to set up two servers radA relaying to radB and radB relaying to radA ? I'd like to have an active/active radius server setup. Sorry, I didn't read the docs. :-) I have both servers using the same sql backend for accounting (not

Re: R: Ip pool lease migration

2007-10-24 Thread Alan DeKok
Francesco Cristofori wrote: I have both servers using the same sql backend for accounting (not sql_ippool at the moment), so I have a doubt: Then there's a lot less reason to run two servers. You still have one central point of failure: the SQL server. If you're insistent on running just

Newbie Question o.O

2007-10-24 Thread Bernd
Hi! I'm trying to set up a WLAN (5 APs) with a RADIUS Server (SuSe 10.2). RADIUS should authenticate the MAC Adresses of the WLAN Users to grant them access to the network. There are often new computers, which should get access to the Network immediately and without installing anything. RADIUS

Accounting requests and LDAP relation

2007-10-24 Thread Amr el-Saeed
Dear All, Is there any relation between the accounting requests and the LDAP, in case i'm using LDAP for authentication and MySql for accounting. Now i have many accounting requests and my DB machine is loaded , but what i can't understand is why my LDAP machine is loaded too. i make a debug

R: R: Ip pool lease migration

2007-10-24 Thread Francesco Cristofori
Then there's a lot less reason to run two servers. You still have one central point of failure: the SQL server. The sql server is actually a mysql master/master replication cluster with one virtual IP address I pointed the servers to. I think this solution avoids s.p.o.f., isn't it? If

Re: R: R: Ip pool lease migration

2007-10-24 Thread Alan DeKok
Francesco Cristofori wrote: The sql server is actually a mysql master/master replication cluster with one virtual IP address I pointed the servers to. I think this solution avoids s.p.o.f., isn't it? You didn't say that... H... But ip pools are managed through local files on each

Re: Accounting requests and LDAP relation

2007-10-24 Thread Alan DeKok
Amr el-Saeed wrote: Is there any relation between the accounting requests and the LDAP, in case i'm using LDAP for authentication and MySql for accounting. No. Now i have many accounting requests and my DB machine is loaded , but what i can't understand is why my LDAP machine is loaded

Re: Newbie Question o.O

2007-10-24 Thread Alan DeKok
Bernd wrote: I'm trying to set up a WLAN (5 APs) with a RADIUS Server (SuSe 10.2). RADIUS should authenticate the MAC Adresses of the WLAN Users to grant them access to the network. Do the AP's send RADIUS requests to authenticate the MAC when they see a new machine? If not, you can't do

R: R: R: Ip pool lease migration

2007-10-24 Thread Francesco Cristofori
You didn't say that... Sorry, I thought it wasn't so relevant. :-) Use sqlippool. It's the easiest way to get what you want. Ok, thanks for helping. Francesco. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

AW: Newbie Question o.O

2007-10-24 Thread Bernd
Do the AP's send RADIUS requests to authenticate the MAC when they see a new machine? If not, you can't do it. How do I know if they do? -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Alan DeKok Gesendet: Mittwoch, 24. Oktober 2007 11:21

Re: Are SHA-256 certificates supported?

2007-10-24 Thread hannu . lammi
Hi, So, I'd like to know if FreeRADIUS supports SHA-256 certificates? If it doesn't, is the support for them planned? FreeRADIUS doesn't support SSL. It uses OpenSSL, which *does* support SSL. So if there are SSL issues, find out why OpenSSL doesn't like the TLS session. I debugged this

Re: Accounting requests and LDAP relation

2007-10-24 Thread Amr el-Saeed
i just noticed that this happens in the Interim-Update packet only not the Start or the Stop !! Alan DeKok wrote: Amr el-Saeed wrote: Is there any relation between the accounting requests and the LDAP, in case i'm using LDAP for authentication and MySql for accounting. No.

Re: AW: Newbie Question o.O

2007-10-24 Thread Alan DeKok
Bernd wrote: Do the AP's send RADIUS requests to authenticate the MAC when they see a new machine? If not, you can't do it. How do I know if they do? ... Unfortunately, you're being told to go read the NAS documentation. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Accounting requests and LDAP relation

2007-10-24 Thread Amr el-Saeed
can i just drop the Interim-Update packet from the RADIUS server ?? Amr el-Saeed wrote: i just noticed that this happens in the Interim-Update packet only not the Start or the Stop !! Alan DeKok wrote: Amr el-Saeed wrote: Is there any relation between the accounting requests and the

AW: AW: Newbie Question o.O

2007-10-24 Thread Bernd
I'm sorry...I never worked with RADIUS, please consider that. I don't mind reading documentations :) - but I don't know where I can find the NAS documentation -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Alan DeKok Gesendet: Mittwoch, 24.

Re: Are SHA-256 certificates supported?

2007-10-24 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I debugged this and it seems that FreeRADIUS doesn't initialize SHA-256 digest. OpenSSL_add_all_digests() isn't used and I found only calls to EVP_md5() and EVP_sha1() in the sources. OK. I can live with this hack in my test server, but would appreciate it if

Re: Fwd: clients linux

2007-10-24 Thread Brian A. Seklecki
On Mon, 22 Oct 2007 08:19:31 -0500 [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I want work with linux clients (fedora core 4), but how i do for that Google: pam_radius -- Brian A. Seklecki [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: AW: AW: Newbie Question o.O

2007-10-24 Thread Alan DeKok
Bernd wrote: I'm sorry...I never worked with RADIUS, please consider that. I don't mind reading documentations :) - but I don't know where I can find the NAS documentation We don't have copies of it. You haven't even said what kind of NAS it is, so it's impossible for us to help you.

Access-Reject in a php script

2007-10-24 Thread manIP
Hi all! I am using a script for the authentication and it is working well. I can send a list of attributes without any problem. Now I want to send an Access-Reject if the authentication fails but I do not know how...I would be very grateful if someone could tell me how to do so. herein is a test

FR-2.0.0-pre2 - virtual server configuration problem - how to use client and listen

2007-10-24 Thread Tomasz Zieleniewski
Hi, I have some doubts about the rules of applying client and listen blocks in comparison to virtual server setting. Is it this way that both client and listen blocks can appear in the main radiusd.conf file so that they will behave like default global setting for all defined virtual servers?? If

Re: Access-Reject in a php script

2007-10-24 Thread Alan DeKok
manIP wrote: I am using a script for the authentication and it is working well. I can send a list of attributes without any problem. Now I want to send an Access-Reject if the authentication fails but I do not know how...I would be very grateful if someone could tell me how to do so. herein

Re: FR-2.0.0-pre2 - virtual server configuration problem - how to use client and listen

2007-10-24 Thread Alan DeKok
Tomasz Zieleniewski wrote: I have some doubts about the rules of applying client and listen blocks in comparison to virtual server setting. raddb/sites-available/README contains the documentation for that. Is it this way that both client and listen blocks can appear in the main

Re: Access-Reject in a php script

2007-10-24 Thread A . L . M . Buxey
Hi, echo Session-Timeout:=100; else echo Access-Reject; //NOT WORKING!! hmmm, normally/properly you dont send such attributes back - thats a server job. you should simply exit with the return code that equals reject. alan - List info/subscribe/unsubscribe? See

Re: AW: AW: Newbie Question o.O

2007-10-24 Thread Sebastian Wild
Bernd please correct your system date. You keep sending mails dated in the future! Sebastian Am Mittwoch, den 31.10.2007, 14:20 +0100 schrieb Bernd: I'm sorry...I never worked with RADIUS, please consider that. I don't mind reading documentations :) - but I don't know where I can find the NAS

Re: AW: AW: Newbie Question o.O

2007-10-24 Thread Andy Billington
which explains why gmail shows all his mails as being 0 minutes ago. Not even Google has harnessed time travel (don't tell the shareholders tho) On 24/10/2007, Sebastian Wild [EMAIL PROTECTED] wrote: Bernd please correct your system date. You keep sending mails dated in the future! Sebastian

Fw: FreeRadius Server: Installation problem

2007-10-24 Thread j v
Please guide from where to get these tools libtool is needed by freeradius-1.1.6-0.i586 libtool-ltdl-devel is needed by freeradius-1.1.6-0.i586 - Forwarded Message From: j v [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Wednesday, 24