Thank you Allan for all the explanations; the problem was solved and the
next thing I'll do will be to upgrade to FreeRadius 1.1.7
Cristian NOVAC
Alan DeKok wrote:
Cristian Novac wrote:
The authentication is still not working
I attached the log I got when running in debug mode;
Could you add this to the wiki ?
http://wiki.freeradius.org/Cisco
Done.
I myself don't use any Cisco kit, but the situation is much the same
with HP Procurve Switches.
On all but the most expensive switches TACACS+ is the only way to define
command lists, on all the others your
either a
to send RADIUS packets to
FreeRadius server, as we can see from file
/var/log/radius/radacct/127.0.0.1/detail-20080107:
Mon Jan 7 09:38:45 2008
Acct-Status-Type = Stop
Asterisk-Acc-Code =
Asterisk-Src = amihalicek
Asterisk-Dst = s
Asterisk-Dst-Ctx = default
Hi Stefan,
It may be primarily Cisco that pushes TACACS+ because ACS is a much
better TACACS+ server than it is a RADIUS server. However, there are
many vendors that offer some degree of support for TACACS+ just to
avoid one of the barriers to entering the many Cisco only networks.
:-)
Rgds,
The recent cvs seems to contain a new spec file for suse.
With that spec I tried to build an rpm on 10.2.
rpmbuild -ba freeradius.spec
checking for SQLConnect in -liodbc... no
checking for isql.h... no
configure: error: set --without-rlm_sql_iodbc to disable it explicitly.
configure: error:
Hi,
I am getting this error in my radius log, do you know why this is so and how to
get this resolved?
'The maximum number of threads (32) are active, cannot spawn new thread to
handle request'
Also, do people know what is the maximum simultaneous incoming authentication
calls that the radius
Norbert Wegener wrote:
As I don't need everything, I modifyed the configure instruction in the
spec-file and added:
--without-rlm_sql_iodbc \
--without-rlm_sql_firebird \
--without-rlm_sql_db2 \
Instead of listing everything I'd suggest to
Hi,
'The maximum number of threads (32) are active, cannot spawn new thread to
handle request'
FreeRADIUS is getting many many requests but cannot handle them in
real time - usually due to the authentication or accounting being
too slow - you use SQL or AD for authentication? SQL for
with Asterisk, only for accounting purposes.
In my case, I managed to configure Asterisk to send RADIUS
packets to FreeRadius server, as we can see from file
/var/log/radius/radacct/127.0.0.1/detail-20080107:
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks Alan,
We are using SQL for authentication and accounting - do you think this could be
the issue?
I could potentially have thousands of requests coming in almost simultaneously,
is this going to be too much for the process to handle?
Ackbar
-Original Message-
From: [EMAIL
Norbert Wegener wrote:
The recent cvs seems to contain a new spec file for suse.
With that spec I tried to build an rpm on 10.2.
rpmbuild -ba freeradius.spec
I have removed strict dependency checking from the SUSE Spec file.
That should let it continue past the missing dependencies (which
Hi,
Thanks Alan,
We are using SQL for authentication and accounting - do you think this could
be the issue?
I could potentially have thousands of requests coming in almost
simultaneously, is this going to be too much for the process to handle?
i dont know how good your SQL database is -
Thanks Alan, will try this.
-Original Message-
Sent: 07 January 2008 12:40
To: FreeRadius users mailing list
Subject: Re: Error on radius
Hi,
Thanks Alan,
We are using SQL for authentication and accounting - do you think this could
be the issue?
I could potentially have thousands
Hi Alan,
thank you for your quick answer.
Please send me some example about this proxy configuration.
Rgdrs,
Radim
Hi,
Everything work OK, Ovislink send request to FreeRadius
server, FreeRadius send Access-Request to IAS (mschapv2)
IAS send Access-Accept, but Ovislink received
Hi,
Hi Alan,
thank you for your quick answer.
Please send me some example about this proxy configuration.
for example,
your-proxied.realm.com
Service-Type == Framed-User,
Service-Type == Login-User,
Login-Service == Telnet,
Login-Service == Rlogin,
Hello,
is that implemented in FR, be it 1.1 or 2.0? According to
http://wiki.freeradius.org/RFC it shouldn't be.
From my reading of the RFC, defining it by hand in radreply is not
considered good enough, because it has a specific logic behind it:
(2.1)
If a home RADIUS server that supports
Stefan Winter wrote:
is that implemented in FR, be it 1.1 or 2.0? According to
http://wiki.freeradius.org/RFC it shouldn't be.
It's in the dictionaries...
From my reading of the RFC, defining it by hand in radreply is not
considered good enough, because it has a specific logic behind
-snip-
I thought that FreeRadius will somehow map these
values from Asterisk to values which can be put to radacct table, e.g.
Asterisk-Start-Time --- acctstarttime, etc. Obviously, it doesn't.
I've been googling for whole day concerning this problem, and I wasn't
able to find anything
I was installing freeradius today and the only way I could get it to
recognize my ssl install, which is in a custom location, was to change
line 21268 of the 'configure' script to from
LIBS=-lssl -lcrypto $LIBS
LIBS=-lssl $LIBS
For some reason, even when I add '-lcrypto' to LDFLAGS it does not
19 matches
Mail list logo
