Using the outer envelope attributes in an EAP-TTLS request?

2008-02-11 Thread Marcus Packard
Hi all, My problem has been fixed by setting"copy_request_to_tunnel = yes" in the eap.conf file. Thanks to all that responded. Rgds, begin:vcard fn:Marcus Packard n:Packard;Marcus org:Flinders University;Information Services Division adr:GPO Box 2100;;;Adelaide;SA;5001;Australia e

Using the outer envelope attributes in an EAP-TTLS request?

2008-02-11 Thread Marcus Packard
Hi, I am currently configuring a Cisco WiSM blade (software version 4.1.185.0) and a FreeRadius Server (Version 1.1.3, for host i686-redhat-linux-gnu, built on Apr 25 2007) for EAP-TTLS I’ve have gotten VLAN override to work on the WiSM (no problem there). However, what I am trying to do now

Re: error after updating to freeradius 2.0.1

2008-02-11 Thread Damjan
> > Check that nothing is listening on port 1812, even for IPv6. > > Nothing listening except for ssh. Since ssh is TCP, you know that radius is UDP and you need to check with "netstat -ulnp" > ERROR: Failed to open socket: > /etc/freeradius/radiusd.conf[182]: Error binding to port for 0.0.0.

RE: error after updating to freeradius 2.0.1

2008-02-11 Thread Joep Ruiter
> Check that nothing is listening on port 1812, even for IPv6. Nothing listening except for ssh. > Also try posting the full debug log. Maybe there's another "listen" > section which is conflicting with the 0.0.0.0:1812. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.

mod_auth_radius question

2008-02-11 Thread Jeremiah Millay
I have a question regarding mod_auth_radius which doesn't seem to be addressed by the included documentation or anything I have found with a google search. When configuring the module in the apache configuration (I'm using the latest 1.3 branch) is it possible to specify more than one radius ser

Re: eap_tnc.c source not stricly C

2008-02-11 Thread Alan DeKok
Andrew Hood wrote: > I know good style says newbies should lurk before posting, but anyway: > > Is freeradius supposed to be C89? It's supposed to be as portable as possible. > src/modules/rlm_eap/types/rlm_eap_tnc/eap_tnc.c > > Is full of C++ comments and C99isms. Yes. Most of those shou

eap_tnc.c source not stricly C

2008-02-11 Thread Andrew Hood
I know good style says newbies should lurk before posting, but anyway: Is freeradius supposed to be C89? src/modules/rlm_eap/types/rlm_eap_tnc/eap_tnc.c Is full of C++ comments and C99isms. -- REALITY.SYS not found: Universe halted. - List info/subscribe/unsubscribe? See http://www.freeradius.

Re: Different IP Pool per proxied realm

2008-02-11 Thread Alan DeKok
Tony Spencer wrote: > Right I've now managed to get v2.0.1 working on our radius server. > Although for some reason its not logging to radiusd.log. > Previously we have logged accounting to the log file and the radacct table. > If anyone can spare a thought on why this isn't now logging to the > ra

Re: error after updating to freeradius 2.0.1

2008-02-11 Thread Alan DeKok
Joep Ruiter wrote: > ERROR: Failed to open socket: > /etc/freeradius/radiusd.conf[182]: Error binding to port for 0.0.0.0 port > 1812 This is likely due to the system having IPv6 support. Version 2.0 adds IPv6, and there are issues with binding to IPv4 and IPv6 sockets. > All 1.1.x versions h

error after updating to freeradius 2.0.1

2008-02-11 Thread Joep Ruiter
Hi After i found out today that Freeradius 2.0.1 was out i updated my old 1.1.7 release and installed this version. Problem is, that it won't start. I keep getting: ERROR: Failed to open socket: /etc/freeradius/radiusd.conf[182]: Error binding to port for 0.0.0.0 port 1812 All 1.1.x versions h

RE: Different IP Pool per proxied realm

2008-02-11 Thread Tony Spencer
Right I've now managed to get v2.0.1 working on our radius server. Although for some reason its not logging to radiusd.log. Previously we have logged accounting to the log file and the radacct table. If anyone can spare a thought on why this isn't now logging to the radiusd.log file I would appreci

Re: Freeradius with OpenLDAP (Suse Enterprise 10)

2008-02-11 Thread Markus Krause
Zitat von David W Bell <[EMAIL PROTECTED]>: Markus Krause wrote: Zitat von David W Bell <[EMAIL PROTECTED]>: Markus Krause wrote: Zitat von David W Bell <[EMAIL PROTECTED]>: LDAP is installed and working out of the box, having been set to be used for authenication during the SUSE install.

Re: Freeradius with OpenLDAP (Suse Enterprise 10)

2008-02-11 Thread David W Bell
Markus Krause wrote: Zitat von David W Bell <[EMAIL PROTECTED]>: Markus Krause wrote: Zitat von David W Bell <[EMAIL PROTECTED]>: LDAP is installed and working out of the box, having been set to be used for authenication during the SUSE install. This is proven by the ability to log in to th

Re: rlm_perl with huge load (~1000-1500 request per minute)

2008-02-11 Thread Phil Mayers
John S. Doe wrote: Hello! i use freeradiusd 1.7, rlm_perl with thread conf: thread pool { start_servers = 100 max_servers = 1500 min_spare_servers = 1 max_spare_servers = 10 max_requests_per_server = 10 } rlm_sql uses mysql. All works fine, but sometim

Re: rlm_perl with huge load (~1000-1500 request per minute)

2008-02-11 Thread A . L . M . Buxey
Hi, > Hello! > > i use freeradiusd 1.7, rlm_perl with thread conf: > > thread pool { > start_servers = 100 > max_servers = 1500 > min_spare_servers = 1 > max_spare_servers = 10 > max_requests_per_server = 10 > } > > rlm_sql uses mysql. > > All works fin

Re: EAP session matching the State variable.

2008-02-11 Thread Alan DeKok
Norbert Wegener wrote: > As usually, Alan has made a great job. After more than 7 eap > authentications everything is still working fine. > The bug is obviously fixed. ! Thanks for the testing. We can release 2.0.2 this week. Alan DeKok. - List info/subscribe/unsubscribe? See http://w

Re: rlm_perl with huge load (~1000-1500 request per minute)

2008-02-11 Thread Alan DeKok
John S. Doe wrote: > i use freeradiusd 1.7, rlm_perl with thread conf: > > thread pool { ... > max_requests_per_server = 10 This should always be zero. > and radiusd like "frozen", take 99% of CPU time, and not response for > client's request. Run it in debugging mode (-fxxx for thr

rlm_perl with huge load (~1000-1500 request per minute)

2008-02-11 Thread John S. Doe
Hello! i use freeradiusd 1.7, rlm_perl with thread conf: thread pool { start_servers = 100 max_servers = 1500 min_spare_servers = 1 max_spare_servers = 10 max_requests_per_server = 10 } rlm_sql uses mysql. All works fine, but sometime, at moment with hig

Re: EAP session matching the State variable.

2008-02-11 Thread Norbert Wegener
As usually, Alan has made a great job. After more than 7 eap authentications everything is still working fine. The bug is obviously fixed. Thanks Alan Norbert Wegener Norbert Wegener wrote: I am runnning those tests at the moment with the modified version. I will post the result of 7

Re: Freeradius with OpenLDAP (Suse Enterprise 10)

2008-02-11 Thread Markus Krause
Zitat von David W Bell <[EMAIL PROTECTED]>: Markus Krause wrote: Zitat von David W Bell <[EMAIL PROTECTED]>: LDAP is installed and working out of the box, having been set to be used for authenication during the SUSE install. This is proven by the ability to log in to the box, both locally

Re: EAP session matching the State variable.

2008-02-11 Thread A . L . M . Buxey
Hi, > i am sorry, but my server doesn't have any internet-access... so, i can't use > cvs for updating. use CVS on another machine, tar up the resulting CVS checkout, copy it to the server and recompile. it must have networking or some sort to be a radius server, n'est pas? ;-) alan - List info

Re: EAP session matching the State variable.

2008-02-11 Thread Norbert Wegener
I am runnning those tests at the moment with the modified version. I will post the result of 7 authentications later. Norbert Wegener Sebastian Heil wrote: is there anything, i can try to test? $ cvs update $ cd src/modules/rlm_eap $ make clean $ make ... and re-run the tests.

Re: EAP session matching the State variable.

2008-02-11 Thread Sebastian Heil
> > is there anything, i can try to test? > > $ cvs update > $ cd src/modules/rlm_eap > $ make clean > $ make > > ... and re-run the tests. > i am sorry, but my server doesn't have any internet-access... so, i can't use cvs for updating. is there another easy way to test your patch, alan?

Re: Freeradius with OpenLDAP (Suse Enterprise 10)

2008-02-11 Thread David W Bell
Markus Krause wrote: Zitat von David W Bell <[EMAIL PROTECTED]>: LDAP is installed and working out of the box, having been set to be used for authenication during the SUSE install. This is proven by the ability to log in to the box, both locally and via SSH I installed freeRADIUS from the l

Re: Different IP Pool per proxied realm

2008-02-11 Thread Alan DeKok
Tony Spencer wrote: > We are running freeradius on Centos and the most supported package that gets > installed by "yum update" is freeradius-1.0.1-3.RHEL4.5, which I now have > installed. Ugh. > I've tried to upgrade by downloading the latest version, 2.0.1. > Although it builds and installs it

RE: Different IP Pool per proxied realm

2008-02-11 Thread Tony Spencer
[EMAIL PROTECTED]' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): User [EMAIL PROTECTED] not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 21 modcall[authorize]: module "sql" returns notfound fo

Re: Freeradius with OpenLDAP (Suse Enterprise 10)

2008-02-11 Thread Markus Krause
Zitat von David W Bell <[EMAIL PROTECTED]>: LDAP is installed and working out of the box, having been set to be used for authenication during the SUSE install. This is proven by the ability to log in to the box, both locally and via SSH I installed freeRADIUS from the latest source and it is w

Freeradius with OpenLDAP (Suse Enterprise 10)

2008-02-11 Thread David W Bell
LDAP is installed and working out of the box, having been set to be used for authenication during the SUSE install. This is proven by the ability to log in to the box, both locally and via SSH I installed freeRADIUS from the latest source and it is working also. freeRADIUS seems unable to find

Re: Using freeradius integrated with Active Directory toautenticatecisco passwords

2008-02-11 Thread Fernando Coelho
Still not working. When I added krb5 { } at the radius.conf file, it gave me the following error at startup /usr/local/etc/raddb/radiusd.conf[589]: Unexpected end of section Errors reading radiusd.conf Regards, 2008/2/8, [EMAIL PROTECTED] <[EMAIL PROTECTED]>: > > Hi, > > > Thank you all. >

Re: segmentation fault over perl script.

2008-02-11 Thread Oguzhan Kayhan
> hello > i am trying to install freeradius over debian with perl support. > I am running the same config with same perl script over ubuntu. > I compiled 1.1.7 version, copied config files and script to same folder. > and when i try to run it i get the folllowing output. > > Starting - reading con

segmentation fault over perl script.

2008-02-11 Thread Oguzhan Kayhan
hello i am trying to install freeradius over debian with perl support. I am running the same config with same perl script over ubuntu. I compiled 1.1.7 version, copied config files and script to same folder. and when i try to run it i get the folllowing output. Starting - reading configuration fi

Re: EAP session matching the State variable.

2008-02-11 Thread Alan DeKok
Sebastian Heil wrote: > i don't know, if it's my stupid configuration or the freeradius, that > produces following: No. It's a bug. I committed a fix over the weekend. ... > Then, the server switches back to "normal" state-variables... > example: > State = 0x03040db7c026e2b769757300

Re: EAP session matching the State variable.

2008-02-11 Thread Sebastian Heil
> Sebastian Heil wrote: > > Hmm, i have the same error in 2.0.1. > > i did kind of a eap-tls-stress-test with a perl script based on the > rad_eap_test script. there are a lot of "login oks" in my log-file, but about > 5-10% are "login incorrect" with the same error-message as above. > > > > i d