Re: Debugging RLM modules

2008-02-02 Thread Alan DeKok
Ali Majdzadeh wrote: Is there any way to debug an RLM module using gdb? Yes. The modules are just shared libraries. See the gdb manual for how to deal with shared libraries. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Quick question RE: FreeRADIUS Trusted Root CA List

2008-02-02 Thread Sebastian Heil
Original-Nachricht Datum: Fri, 1 Feb 2008 10:39:27 -0800 Von: Cerney, Lawrence [EMAIL PROTECTED] An: freeradius-users@lists.freeradius.org Betreff: Quick question RE: FreeRADIUS Trusted Root CA List I work in a test environment and need to test with certs created with

Re: Terminate EAP-PEAP client connection at FreeRadius Proxy andproxy(forward) request as PAP

2008-02-02 Thread Jayal1972
Hi Ivan, I can´t thank you enough for the help. Have different names for a server realm and user domain so you can choose when to proxy. Could you please leave me a hont how to do that. Why doesn´t it do PAP? When the connection reach the home server it´s encrypted? // J Ivan Kalik wrote:

Re: Terminate EAP-PEAP client connection at FreeRadius Proxy andproxy(forward) request as PAP

2008-02-02 Thread Jayal1972
Hi again, I mean: how to detect a special name in the request. And to NOT proxy local calls... Is my configuration OK? // J Jayal1972 wrote: Hi Ivan, I can´t thank you enough for the help. Have different names for a server realm and user domain so you can choose when to proxy. Could

Re: Terminate EAP-PEAP client connection at FreeRadius Proxyandproxy(forward) request as PAP

2008-02-02 Thread Ivan Kalik
Have different names for a server realm and user domain so you can choose when to proxy. Could you please leave me a hont how to do that. Just split user and server realms. Make users realm (SECURACCESS) a local one (you have instructions in proxy.conf how yo make local realms. And rename the

Re: Terminate EAP-PEAP client connection at FreeRadius Proxyandproxy(forward) request as PAP

2008-02-02 Thread Ivan Kalik
Eap-Type != peap. Local ones are using PEAP and remote EAP-TTLS/PAP, right? Ivan Kalik Kalik Informatika ISP Dana 2/2/2008, Jayal1972 [EMAIL PROTECTED] piše: Hi again, I mean: how to detect a special name in the request. And to NOT proxy local calls... Is my configuration OK? // J

xpextension problems...

2008-02-02 Thread SnahaD00
Hi, now I managed to setup and made freeradius -x is sending this: ... bunch of code... ... rad_recv: Access-Request packet from host 192.168.1.1:2049, id=0, length=150 User-Name = Client Certificate NAS-IP-Address = 192.168.1.1 Called-Station-Id = 0018f8db044b

Re: Using freeradius integrated with Active Directory toautenticatecisco passwords

2008-02-02 Thread Markus Moeller
You can use pam with a pam_krb5 module to authenticate users to AD. Markus Ivan Kalik [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] rad_recv: Access-Request packet from host 10.131.23.252:1645, id=84, length=79 NAS-IP-Address = 10.131.23.252 NAS-Port = 11

ascend data filters not being returned

2008-02-02 Thread Don James
Hi, When I run radtest, I get the following response: Sending Access-Request of id 64 to 192.168.1.41 port 1645 User-Name = [EMAIL PROTECTED] User-Password = donjames NAS-IP-Address = 255.255.255.255 NAS-Port = 5 rad_recv: Access-Accept packet from host

Re: ascend data filters not being returned

2008-02-02 Thread Ivan Kalik
You havent turned anything on (including the debug). What should match so the user gets this information? Ivan Kalik Kalik Informatika ISP Dana 2/2/2008, Don James [EMAIL PROTECTED] piše: Hi, When I run radtest, I get the following response: Sending Access-Request of id 64 to 192.168.1.41

Re: Debugging RLM modules

2008-02-02 Thread Doug Hardie
On Feb 2, 2008, at 01:14, Alan DeKok wrote: Ali Majdzadeh wrote: Is there any way to debug an RLM module using gdb? Yes. The modules are just shared libraries. See the gdb manual for how to deal with shared libraries. Some additional info may be helpful. You can attach to a running

Re: Debugging RLM modules

2008-02-02 Thread Alan DeKok
Doug Hardie wrote: Yes. The modules are just shared libraries. See the gdb manual for how to deal with shared libraries. Some additional info may be helpful. Many of my unhelpful answers are intended to get people to read the documentation, and to think for themselves. If people are

Re: ascend data filters not being returned

2008-02-02 Thread donaldbjames
That's what I would like to know. I ran freeradius in the debug mode, but I still can't figure out why freeradius is not sending the data back to the ascend data filter. Don James - Original Message - From: Ivan Kalik [EMAIL PROTECTED] To: FreeRadius users mailing list

Re: ascend data filters not being returned

2008-02-02 Thread Ivan Kalik
So, who is the boss there - you or the machine? ;-) Right, where did you put those attributes you want returned? Can you post those entries? Any chance of posting that debug? Ivan Kalik Kalik Infprmatika ISP Dana 2/2/2008, [EMAIL PROTECTED] [EMAIL PROTECTED] piše: That's what I would like to

Re: Detail cisco logging

2008-02-02 Thread Ivan Kalik
You have mistaken this list for Cisco technical support. Ivan Kalik Kalik Informatika Dana 1/2/2008, Vijay Avarachen [EMAIL PROTECTED] piše: Hello, I have successfully configured freeradius 2.x to do AAA for my Cisco Catalyst 3560. Using modules rlm_detail I am able to log when the