Re: Turning on sql in accounting - 2 questions

2008-05-18 Thread Alan DeKok
NPY wrote: I found out why. NAS is sending the Accounting Request packet 3 times to the radius server because the radius server is not acknowledging, even though it receives the packets. So... read the debug log to see why. Is there any config that I miss out that causes freeradius not to

Re: SNMP error

2008-05-18 Thread Amr el-Saeed
Hi Alan, I have patches attached from RedHat for freeradius 1.1.3 . Can we have a patched release from freeradius 1.1.7 ?? Thanks Amr Alan DeKok wrote: Edvin Seferovic wrote: I am also curious about the answer on this question ! Are there any plans to implement AgentX

Problem with CHAP, rlm_ldap, edir

2008-05-18 Thread Lothar . Haeger
Hi all, I am trying to get freradius with edir to work. PAP is working already, but CHAP does some strange things... here's a trace Started freeradius 2.0.4 on SLES10SP1 by typing: radiusd -X hamburgauth01:~ # radiusd -X FreeRADIUS Version 2.0.4, for host i686-suse-linux-gnu, built on May 7

Re: Problem with CHAP, rlm_ldap, edir

2008-05-18 Thread Arran Cudbard-Bell
[EMAIL PROTECTED] wrote: Hi all, I am trying to get freradius with edir to work. PAP is working already, but CHAP does some strange things... here's a trace Started freeradius 2.0.4 on SLES10SP1 by typing: radiusd -X hamburgauth01:~ # radiusd -X FreeRADIUS Version 2.0.4, for host

append avpair to proxied packet

2008-05-18 Thread Jules Desforges
Hi, I receive DSL service from Supplier A, and provide DSL service to Customers A and B Supplier A -- My Radius Server --- Customer A | _Customer B Supplier A proxies the realms for Customer A,B to my server, I then proxy on the requests

accounting_onoff_query and acctsessiontime = 0

2008-05-18 Thread Tuc at T-B-O-H.NET
Hi, For the following : accounting_onoff_query = \ UPDATE ${acct_table1} \ SET \ acctstoptime = '%S', \ acctsessiontime= unix_timestamp('%S') - \ unix_timestamp(acctstarttime), \

Re: accounting_onoff_query and acctsessiontime = 0

2008-05-18 Thread Tuc at T-B-O-H.NET
Hi, For the following : accounting_onoff_query = \ UPDATE ${acct_table1} \ SET \ acctstoptime = '%S', \ acctsessiontime= unix_timestamp('%S') - \ unix_timestamp(acctstarttime),

Re: accounting_onoff_query and acctsessiontime = 0

2008-05-18 Thread Ivan Kalik
Yes. This query doesn't update sessions that have recieved accounting update packets but are left open when NAS rebooted. Query in 2.0.4 does it for those packets as well. Ivan Kalik Kalik Informatika ISP Dana 18/5/2008, Tuc at T-B-O-H.NET [EMAIL PROTECTED] piše: Hi, For the following

Re: accounting_onoff_query and acctsessiontime = 0

2008-05-18 Thread Tuc at T-B-O-H.NET
Hi Ivan, Ok, thanks. I like the one that does for all packets, so I've made that change. The other thing I'm finding is that the statement isn't getting all the records anyway. I went into phpMyAdmin and tried to cut/paste from sqltrace.sql, and no records were updated. I went

Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
Ivan Kalik wrote: Please don't mess with configuration. Default one works. Your problem was with the user certificate. http://www.procurve.com/NR/rdonlyres/06538B80-6DB0-4AC6-893E-8E8E12A180C6/0/ConfiguringFreeRADIUSwithIDMbyExample_Dec_07_WW_Eng_Ltr.pdf On page 52 you have a picture of

Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Ivan Kalik
you can view screenshots of the certificate here: - CA Certificate that i imported on XP with DER format: http://img357.imageshack.us/img357/2264/cacertificate1wj4.jpg - Client Certificate with p12 format: http://img164.imageshack.us/img164/2894/certifclient1kf1.jpg

Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
Yes! it is in the personal store! - so problem is not with certificate ?? in this case, wht should be checked? - config? - hardware? i'd like to use eap-tls and/or eap-peap MBA OYONE Joël Lot. El Firdaous Bât GH20, Porte A 204, Appt 8 2 Oulfa Casablanca - Maroc Tél. : +212 69 25 85 70

Re: accounting_onoff_query and acctsessiontime = 0

2008-05-18 Thread Alan DeKok
Tuc at T-B-O-H.NET wrote: I guess then I ask the powers to be to change the dialup.conf in the sql/mysql directory to use IS NULL for accounting_onoff_query and probably simul_count_query/simul_verify_query since it currently (FR 2.0.4) says = NULL . :) $ cvs log

Re: accounting_onoff_query and acctsessiontime = 0

2008-05-18 Thread A . L . M . Buxey
hi, CVS version (and hence 2.0.5 release) mysql/dialup.conf WHERE acctstoptime IS NULL peter nixon , iirc, caught this one when the work concerning 0 accounting session stop times was fixed up alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: append avpair to proxied packet

2008-05-18 Thread Alan DeKok
Jules Desforges wrote: This works fine, however I would like to append an AV-Pair to each respective customer, so they are given separate VRF's on the Cisco NAS. I need to append the following :- ... I'm a bit confused as to where I add this, pre_proxy, post_proxy, and if the location of the

Re: SNMP error

2008-05-18 Thread A . L . M . Buxey
hi, just a quick check... the smux.c patches ARE applied to the 2.0.x smux.c (but not part of the last 1.1.7 release). the radius_snmp.c patches - converting an int to a long (handling 64 bit better I'd guess)... havent been incorporated into the 2.0.x tree. alan - List

Re: Turning on sql in accounting - 2 questions

2008-05-18 Thread NPY
I found out why. freeradius is running as uid 'freeradius', so it cannot create files under /var/log. and the Unix module bombed because of that, and therefore no ack. The debug log was indeed the key :) Thanks, -npy - Original Message - From: Alan DeKok [EMAIL PROTECTED] To:

Re: Turning on sql in accounting - 2 questions

2008-05-18 Thread NPY
I found out why. freeradius is running as uid 'freeradius', so it cannot create files under /var/log. and the Unix module bombed because of that, and therefore no ack. The debug log was indeed the key :) Thanks, -npy - Original Message - From: Alan DeKok [EMAIL PROTECTED] To:

Re : Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
Ok, we assume my certificates are corrects. So i have some more questions: - Certificate should be import for user accounts or for computer account ? - i use the file users as database for my accounts; when using eap-tls when trying eap-peap my accounts looks like that: johndoe

RE: Re : Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Ivan Kalik
Ok, we assume my certificates are corrects. So i have some more questions: - Certificate should be import for user accounts or for computer account ? Who/what ever is you supplicant trying to authenticate. If the supplicant can't find the correct certificate it will give up. - i use the

Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
So i really wonder where is the problem !!! maybe it is due to the hardware i use... my switch is wireless controller -all AP rceive their config (RF, SSID, channels, Power Radio, security styuffs, etc..) from the switch. so when RADIUS authentication is set-up, every AP have to be