Re: cannot connect to sql databse

2008-01-30 Thread Devinder Singh
Hi Liran This is my log file i cant find any errors for cannot connect to sql database Thanks Devinder 080124 14:48:58 mysqld ended 080124 14:48:58 mysqld started 080124 14:48:58 InnoDB: Started; log sequence number 0 43655 080124 14:48:58 [Note] /usr/sbin/mysqld: ready for connections.

Re: deactivate ldap.attrmap

2008-01-30 Thread Sebastian Heil
Hello again, Sebastian Heil wrote: Is there a way to deactivate the ldap.attrmap file? Edit the source code re-compile. Maybe i will try it... never done before... :-) thanks anyway. i have got another problem. since the authentication via ldap works now quite ok, i would like to

Re: cannot connect to sql databse

2008-01-30 Thread YvesDM
On Jan 30, 2008 10:15 AM, Devinder Singh [EMAIL PROTECTED] wrote: Hi Liran This is my log file i cant find any errors for cannot connect to sql database Thanks Devinder 080124 14:48:58 mysqld ended 080124 14:48:58 mysqld started 080124 14:48:58 InnoDB: Started; log sequence number

Re: trouble seting up freeradius :((

2008-01-30 Thread orion
the certificate`s password in the eap.conf is wrong. On 30/01/2008, SnahaD00 [EMAIL PROTECTED] wrote: Hi, I really (desperatelly) need freeradius to work on my schools network - it's urgent. I've got server on Ubuntu 7.04. I setup freeradius accoring to some howtoos and tutorials, but

Re: memory corruption when proxying accounting requests

2008-01-30 Thread Alan DeKok
Jørn Kostøl wrote: Local auth and acct works fine, and proxying auth works. But as soon as I try to proxy accounting then Freeradius crashes. The issue isn't proxying, but dealing with attributes that aren't in the dictionaries. Bug #514 was recently filed about this. The solution is in

Re: cannot connect to sql databse

2008-01-30 Thread Devinder Singh
I have hard times with Dial Up Admin Shoud i proceed with daloradius do i install in in srv/www folder like dial up On 28/01/2008, liran tal [EMAIL PROTECTED] wrote: Hey Devinder, On Jan 28, 2008 4:35 AM, Devinder Singh [EMAIL PROTECTED] wrote: Hi I am using Dial Up Admin on

Re: cannot connect to sql databse

2008-01-30 Thread Devinder Singh
Yes i can access mysql rom CLI On 30/01/2008, YvesDM [EMAIL PROTECTED] wrote: On Jan 30, 2008 10:15 AM, Devinder Singh [EMAIL PROTECTED] wrote: Hi Liran This is my log file i cant find any errors for cannot connect to sql database Thanks Devinder 080124 14:48:58 mysqld

Re: deactivate ldap.attrmap

2008-01-30 Thread Alan DeKok
Sebastian Heil wrote: ... i added the following lines to the ldap-section: ... rlm_ldap: could not start TLS Can't contact LDAP server Maybe you need to check that there is an LDAP server listening on that port? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: eap authentication problem

2008-01-30 Thread Alan DeKok
Mike Zoeteweij wrote: Can anyone tell me what I'm doing wrong here? Read eap.conf. Look for Windows. See also the wiki. Sending Access-Challenge of id 3 to 192.168.100.5:4855 ... Waking up in 6 seconds... --- Walking the entire request list --- This *exact* behavior is explained in

Re: one RADIUS server per realm setup

2008-01-30 Thread Alan DeKok
Wm. Josiah Erikson wrote: I'm not sure what the syntax rules for the authorize{} section of the config files are; I was unable to find any description in the docs of how one goes about figuring out how to write these conditional statements. What language is it? $ man unlang It seems

Re: cannot connect to sql databse

2008-01-30 Thread Liran Tal
On Jan 30, 2008 10:15 AM, Devinder Singh [EMAIL PROTECTED] wrote: Hi Liran This is my log file i cant find any errors for cannot connect to sql database If you don't find any connection attempts information then it means that dialupadmin isn't initiating a connection due to one of the

Re: trouble seting up freeradius :((

2008-01-30 Thread Alan DeKok
SnahaD00 wrote: When I issue command freeradius -x i got this: rlm_eap_tls: Loading the certificate file as a chain rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt The password you put in the configuration file is not the same as the password

Re: cannot connect to sql databse

2008-01-30 Thread Ivan Kalik
1. You are not sending login requests to this server, or at least they are not getting there. Is server set up not to recieve auth requests from the network (only local reqests)? Can you log into it from a different machine? 2. Is this server restarting on it's own or are you doing that? Ivan

Re: cannot connect to sql databse

2008-01-30 Thread Devinder Singh
Hi Liran Do u have Yahoo IM or IRC channel to chat Ok i will instal and configure daloradius Will it work well with FreeRadius server Where do i extract the tar file i have srv/www folder Thanks Devinder On 30/01/2008, Liran Tal [EMAIL PROTECTED] wrote: On Jan 30, 2008 10:15 AM, Devinder

Re: Logging from another PC

2008-01-30 Thread Ivan Kalik
Yes. Use VLANs and port based authentication and they won't be able to do that. If they manually change IP address to a different VLAN connection will become unusable. Ivan Kalik Kaliki Informatika ISP Dana 29/1/2008, [EMAIL PROTECTED] [EMAIL PROTECTED] piše: Hi, I have a question. When the

Re: deactivate ldap.attrmap

2008-01-30 Thread Sebastian Heil
Sebastian Heil wrote: ... i added the following lines to the ldap-section: ... rlm_ldap: could not start TLS Can't contact LDAP server Maybe you need to check that there is an LDAP server listening on that port? Alan DeKok. thanks for your fast answer, alan. but i am afraid,

Re: Problems using EAP-TLS with freeradius version 2

2008-01-30 Thread Stefan Puch
Stefan Puch wrote: Then some people came with their mobile devices which are running Windows Mobile 2003, Windows Mobile 5 (WM5) or Windows Mobile6 (WM6) and the problems began. The same EAP-TLS certificate which worked fine on a Windows XP machine doesn't work on e.g. Windows Mobile 6 PDA.

RE: memory corruption when proxying accounting requests

2008-01-30 Thread Jørn Kostøl
I tried the latest snapshot freeradius-server-snapshot-20080130.tar.bz2 but this has the same problem. -Opprinnelig melding- Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] På vegne av Alan DeKok Sendt: 30. januar 2008 10:35 Til: FreeRadius users mailing list Emne: Re: memory

Re: one RADIUS server per realm setup

2008-01-30 Thread Wm. Josiah Erikson
Oh. Now I'm embarrassed. Thanks and sorry! :) -Josiah Alan DeKok wrote: # As of 2.0.0, FreeRADIUS supports a simple processing language # in the authorize, authenticate, accounting, etc. sections. # See man unlang for details. Alan DeKok. - List

Re: memory corruption when proxying accounting requests

2008-01-30 Thread Alan DeKok
Jørn Kostøl wrote: I tried the latest snapshot freeradius-server-snapshot-20080130.tar.bz2 but this has the same problem. That's nice. Did you download it from CVS as instructed? The bug was fixed about 15 minutes before I sent my email. The fix is *not* in that snapshot

Re: deactivate ldap.attrmap

2008-01-30 Thread Wm. Josiah Erikson
What struck me was that you need more attributes, but maybe I missed them: -cacertfile -certfile -keyfile -Josiah Sebastian Heil wrote: Sebastian Heil wrote: ... i added the following lines to the ldap-section: ... rlm_ldap: could not start TLS Can't contact LDAP

Re: sql accounting - no records - 2.0.1 RESOLVED

2008-01-30 Thread Andrew Long
I expected to see some traffic too soon, now it's coming... but where are the accounting queries? Andrew On Jan 30, 2008 8:52 AM, Andrew Long [EMAIL PROTECTED] wrote: I've just installed 2.0.1 on CentOS 5 with MySQL 5.x. I can get the clients to authenticate and I see accounting requests come

RE: memory corruption when proxying accounting requests

2008-01-30 Thread Jørn Kostøl
tried the latest snapshot freeradius-server-snapshot-20080130.tar.bz2 but this has the same problem. That's nice. Did you download it from CVS as instructed? The bug was fixed about 15 minutes before I sent my email. The fix is *not* in that snapshot. It *is* in CVS, as I said. Honestly

Re: deactivate ldap.attrmap

2008-01-30 Thread Thierry CHICH
Le mercredi 30 janvier 2008, Sebastian Heil a écrit : Sebastian Heil wrote: ... i added the following lines to the ldap-section: ... rlm_ldap: could not start TLS Can't contact LDAP server It doesn't seem that your TLS is well initiated. I don't think it is an ldap or

Re: Problems using EAP-TLS with freeradius version 2

2008-01-30 Thread Reimer Karlsen-Masur, DFN-CERT
Stefan Puch wrote on 30.01.2008 11:13: Hello everyone, I've got some problems with the new version of freeradius, but before I'm going to open a new bugreport or post long debugtraces from radiusd -X I want to ask here if someone else has made similar experiences. I've set up a

FR2: combining round-robin and fail-over home server pools

2008-01-30 Thread John Horne
Hello, I am in the process of configuring FreeRADIUS 2.0.1. For some realms we proxy the authentication request to three other servers (svr-1, svr-2, svr-3). However, what we wanted was to, in effect, round-robin two of the servers (svr1 and svr-2), and then only use the third server (svr-3) if

Re: sql accounting - no records - 2.0.1 RESOLVED

2008-01-30 Thread JB
Hi Andrew, in mysql.conf, there should be another file included: $INCLUDE sql/${database}/dialup.conf So, in your case that would be $INCLUDE sql/mysql/dialup.conf There you should find several accounting queries. JB Andrew Long (30.01.2008 15:49): I expected to see some traffic too soon,

need help in using free radius

2008-01-30 Thread johnson elangbam
Hi, When I first run the free Radius using the command radtest test test localhost 0 testing123 i found the following errors. Please help rad_recv: Access-Request packet from host 127.0.0.1 port 32775, id=80, length=56 User-Name = test User-Password = test

Re: need help in using free radius

2008-01-30 Thread Wm. Josiah Erikson
How do you want it to authenticate? Is there a username/password pair somewhere of test/test or just you did expect it to work that way out of the box for some reason? I think it did what it was supposed to - it checked a bunch of different authentication methods and didn't find a

Re: need help in using free radius

2008-01-30 Thread Ivan Kalik
rlm_pap: WARNING! No known good password found for the user. Authentication m ay fail because of this. So, where is your password stored? Ivan Kalik Kaliik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Setting radiusd user/cert permissions in Mac OSX

2008-01-30 Thread Info
Good afternoon, When setting user/group to nobody in radiusd.conf, I get some permissions problems with loading the certs and just wanted to know how to properly set them to avoid this: rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied rlm_eap_tls: Error reading

2.0.1 Segfault

2008-01-30 Thread Michael J. Hartwick
Hi, I know that this post may not contain all of the required information, this is just to get things going while I investigate further. I have had a problem with FreeRADIUS segfaulting intermittently for a number of months which makes it hard to gather the required information. The only

anyone provide consulting services to setup a radius server?

2008-01-30 Thread Chad Whitten
Very simple setup - 1 server - novell suse enterprise 10.0, 1 nas - Lucent TNT, 700 or so users - all dialup. Would like to use a mysql database to store usernames and passwords and use the freeradius dialupdamin web tool for management of users. NAS is currently authenticating against a remote

Re: Setting radiusd user/cert permissions in Mac OSX

2008-01-30 Thread Wm. Josiah Erikson
You could, as an account with sudo privs (administrator), from Terminal, type: sudo chown nobody /opt/local/etc/raddb/certs/server.pem or sudo chown -R nobody /opt/local/etc/raddb to change the ownership of that entire directory to nobody. HOWEVER: Nobody is not a secure system account. I

pap Cleartext-Password, sql etc...

2008-01-30 Thread Andrew Long
When I have (radcheck) attribute `User-Password', authentication succeeds but we see the following: rlm_pap: Found existing Auth-Type, not changing it. ++[pap] returns noop rad_check_password: Found Auth-Type CHAP !!!

Re: pap Cleartext-Password, sql etc...

2008-01-30 Thread Kevin Bonner
On Wednesday 30 January 2008 15:31:51 Andrew Long wrote: If I change the attribute to `Cleartext-Password', authentication fails and I see: rlm_pap: WARNING! No known good password found for the user. Authentication may fail because of this. ++[pap] returns noop rad_check_password: Found

Re: trouble seting up freeradius :((

2008-01-30 Thread SnahaD00
SnahaD00 wrote: When I issue command freeradius -x i got this: rlm_eap_tls: Loading the certificate file as a chain rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt The password you put in the configuration file is not the same as the password used

Re: cannot connect to sql databse

2008-01-30 Thread Devinder Singh
Thanks Liran On 30/01/2008, Liran Tal [EMAIL PROTECTED] wrote: On Jan 30, 2008 10:42 AM, Devinder Singh [EMAIL PROTECTED] wrote: I have hard times with Dial Up Admin Shoud i proceed with daloradius do i install in in srv/www folder like dial up Yes you install it wherever

Re: pap Cleartext-Password, sql etc...

2008-01-30 Thread Ivan Kalik
Can you post users entry in the database. it's quite likely that you left == as the operator instead of using :=. Ivan Kalik Kalik Informatika ISP Dana 30/1/2008, Andrew Long [EMAIL PROTECTED] piše: When I have (radcheck) attribute `User-Password', authentication succeeds but we see the

Re: pap Cleartext-Password, sql etc...

2008-01-30 Thread Andrew Long
With attribute `User-Password' and op = `==' we get this: rlm_sql (sql): Reserving sql socket id: 4 expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id - SELECT id, username,

RE: radiusd service do not start [SEC=UNCLASSIFIED]

2008-01-30 Thread Ranner, Frank MR
UNCLASSIFIED From: [EMAIL PROTECTED] g [mailto:[EMAIL PROTECTED] adius.org] On Behalf Of Nicolas Sent: Thursday, 31 January 2008 03:04 To: freeradius-users@lists.freeradius.org Subject: radiusd service do not start Hi, I installed freeradius to manage the wifi network of our organization

RE: Issue reading from detail to sql (buffered-sql virtual server)

2008-01-30 Thread Nick Freeman
I've done some more digging as to why the database only gets one update.. With no detail or detail.work file, freeradius will wake up every 1 second to check for creation - when it gets updated, it puts it into the database fine. However it never deletes or changes the detail.work file - so

Re: Problems using EAP-TLS with freeradius version 2

2008-01-30 Thread Alan DeKok
Stefan Puch wrote: Then some people came with their mobile devices which are running Windows Mobile 2003, Windows Mobile 5 (WM5) or Windows Mobile6 (WM6) and the problems began. The same EAP-TLS certificate which worked fine on a Windows XP machine doesn't work on e.g. Windows Mobile 6 PDA.

Re: cannot connect to sql databse

2008-01-30 Thread YvesDM
On Jan 30, 2008 10:41 AM, Devinder Singh [EMAIL PROTECTED] wrote: Yes i can access mysql rom CLI Did you try to create another mysql user account for dialupadmin and give him the correct rights on the radius database? - List info/subscribe/unsubscribe? See

sql accounting - no records - 2.0.1

2008-01-30 Thread Andrew Long
I've just installed 2.0.1 on CentOS 5 with MySQL 5.x. I can get the clients to authenticate and I see accounting requests come in, also I see the accounting query as it should be updated to mysql, i.e., expand: UPDATE radacct I also see the accounting response returned to the client, but no

Problems using EAP-TLS with freeradius version 2

2008-01-30 Thread Stefan Puch
Hello everyone, I've got some problems with the new version of freeradius, but before I'm going to open a new bugreport or post long debugtraces from radiusd -X I want to ask here if someone else has made similar experiences. I've set up a freeradius server version 1.1.7 in our club to

Problem with XP Clients

2008-01-30 Thread Patrice OLIVER
Hello, I recently setup freeradius 1.1.7 to run a EAP-TLS authentication. My clients run on windows xp pro sp2, with microsoft hotfixes to be abble to use WPA2 and EAP. Encryption is WPA2-AES. All certificates (root and client) are installed in the computer storage and in the user storage,

Re: Radclient multihomed host

2008-01-30 Thread Jacques Marneweck
Hi Etienne, Use the configuration option: bind_address = IP.ADD.RE.SS Regards --jm On 30 Jan 2008, at 2:48 PM, Etienne Pretorius wrote: Hello list, Is there anyway that I could make radclient send a packet from a diffrent src ipaddress on a multihomed host -- Kind Regards Etienne

radiusd service do not start

2008-01-30 Thread Nicolas
Hi, I installed freeradius to manage the wifi network of our organization (17 wifi ap) It works well when launched in command line (radiusd –X), but I can’t make it work as a service, ‘Service radiusd start’ seems to work, but radius close immediately after, so a status will say that

Radclient multihomed host

2008-01-30 Thread Etienne Pretorius
Hello list, Is there anyway that I could make radclient send a packet from a diffrent src ipaddress on a multihomed host -- Kind Regards Etienne Pretorius Network Administrator Kingsley Technologies Email: [EMAIL PROTECTED] Tel: 086 11 KTECH Local Fax: 086 611 5001 International Fax: +27 21

Re: deactivate ldap.attrmap

2008-01-30 Thread Sebastian Heil
Le mercredi 30 janvier 2008, Sebastian Heil a écrit : Sebastian Heil wrote: ... i added the following lines to the ldap-section: ... rlm_ldap: could not start TLS Can't contact LDAP server It doesn't seem that your TLS is well initiated. I don't think it is an