RE: groupmembership and vlan assignment

2008-07-30 Thread Matt Ashfield
Hmmm...welll I was hoping for another way to assign vlans based on ldap attributes, but I don't figure on rewriting rlm_ldap. Thanks Matt [EMAIL PROTECTED] -Original Message- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2008 3:49 PM To: [EMAIL PROTECTED]; FreeR

EAP-MSChapV2 Question

2008-07-30 Thread Garber, Neal
Is it possible to use PEAP/EAP-MSChapV2 (e.g., from a WinXP supplicant) and authenticate with a local user (i.e., defined in the "users" file with a Cleartext-Password). I'm thinking this isn't supported, but I thought I'd ask to be sure.. Thanks.. - List info/subscribe/unsubscribe? See http://ww

rlm_sqlippool

2008-07-30 Thread Leander Schäfer
Hi, I use FreeRADIUS 2.0.5 combined with PostgreSQL instead of using raddb/users file etc. . I tried to do the rlm_sqlippool HowTo (http://wiki.freeradius.org/Rlm_sqlippool) - and it worked out fine for me so far. BUT only if I put root ~ # cat /usr/local/etc/raddb/users leo Pool-Name :

Re: Openser+radiusclient-ng+Freeradius+IAS

2008-07-30 Thread António Rio Costa
Thanks, for the idea. I will try to understand what is going wrong using wireshark. > Date: Wed, 30 Jul 2008 08:38:14 +0200 > From: Alan DeKok <[EMAIL PROTECTED]> > Subject: Re: Openser+radiusclient-ng+Freeradius+IAS > To: FreeRadius users mailing list > > Message-ID: <[EMAIL PROTECTED]>

Adding a counter to raddb/sql/mysql/counter.conf

2008-07-30 Thread Liran Tal
Hey, How about adding more widely used counters to the counter.conf collection? One suggestion is the Access-Period counter which is provided with the attachment. Regards, Liran Tal. counter.conf.diff Description: Binary data - List info/subscribe/unsubscribe? See http://www.freeradius.org/li

EAP Autentication OK but missing some user attributes to client

2008-07-30 Thread Davi Baldin
List, I was finished with successful FreeRadius 2 with EAP configuration and MSCHAP2. Everything OK, but when the Access-Accept package are sent back to client, we missing some attributes mapped from LDAP user account. I need to sent attribute Expiration and Simultaneous-Use to client. How can

Re: groupmembership and vlan assignment

2008-07-30 Thread Alan DeKok
Matt Ashfield wrote: > That's what I was afraid of. Any suggestions to getting around this? Edit the source code to rlm_ldap to implement regex checks. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: groupmembership and vlan assignment

2008-07-30 Thread Matt Ashfield
That's what I was afraid of. Any suggestions to getting around this? Thanks Matt Ashfield [EMAIL PROTECTED] -Original Message- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: Monday, July 28, 2008 3:23 PM To: [EMAIL PROTECTED]; FreeRadius users mailing list Subject: Re: groupmembershi

Re: Possible bug in unlang?

2008-07-30 Thread Phil Mayers
Alan DeKok wrote: Phil Mayers wrote: We've recently moved our servers to FreeRadius 2, and we've been having reports of some problems with our wireless service. ... ...specifically, it seems that the xlat of this string is treating embedded "\" as escape characters. That needs to be fixed.

[PATCH] log escaped identities when they dont match

2008-07-30 Thread Phil Mayers
A more complex version replacing the previous version; this logs the escaped username, possibly useful if it contains various binary nonsense etc. --- src/modules/rlm_eap/eap.c | 12 ++-- 1 files changed, 10 insertions(+), 2 deletions(-) diff --git a/src/modules/rlm_eap/eap.c b/src/

[PATCH] log identitied when they dont match

2008-07-30 Thread Phil Mayers
This is a simple version of the patch, just logging the identities --- src/modules/rlm_eap/eap.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/modules/rlm_eap/eap.c b/src/modules/rlm_eap/eap.c index e9094c4..e947844 100644 --- a/src/modules/rlm_eap/eap.c +++ b/src

Re: %{2} not expanding for accounting packets?

2008-07-30 Thread Phil Mayers
Alan DeKok wrote: Phil Mayers wrote: Anyone have any ideas? evaluate.c was using one buffer for two different purposes. I've fixed that, and the problem is gone. Excellent; thanks a lot, looks like a subtle one. I'm liking this "git" thing a *lot*; I did a "git pull" of the change, git

RE: peap/mschapv2 + mysql + filter-id

2008-07-30 Thread Adam W. Sewell
Alan, Thanks for your response, here is my radiusd -x log. Which config files would you need to look at? Also, I should mention that I'm using freeradius 2.0.5 and in the radreply table in the database, I've got the user generic set as such: generic Filter-ID = Enterasys:version=1:polic

Re: SIGHUP

2008-07-30 Thread Alan DeKok
Raffael Himmelreich wrote: > I'm trying to change the detailfile location on the fly. But when I > edit the value in the config file and send the process a > HUP signal this is what I get: The configuration files are NOT reloaded on SIGHUP. > What I try to archive is dynamic relaying. I want to

Re: acct and syslog

2008-07-30 Thread Alan DeKok
Mustapha Bouikhif wrote: > I want to send acct logs to a central log server to meet our > organisation recommondations (logs must be kept one year). No problem > with size logs, I have necessary space for that. Use rsync. Or FTP. Or even RADIUS to proxy the accounting packets. Don't use sys

SIGHUP

2008-07-30 Thread Raffael Himmelreich
Hi there again, I'm trying to change the detailfile location on the fly. But when I edit the value in the config file and send the process a HUP signal this is what I get: Wed Jul 30 09:45:11 2008 : Debug: Received HUP signal. Wed Jul 30 09:45:11 2008 : Debug: Module: Trying to reload module

Re: acct and syslog

2008-07-30 Thread Mustapha Bouikhif
Alan DeKok a écrit : Mustapha Bouikhif wrote: Is there a simple way to send accounting logs (of FR 2.0.5) to syslog ? I mean the various detail files: auth_log, reply_log, pre||post_proxy_log ... You REALLY don't want to do that. It's a very bad idea. It is possible to append t

Re: %{2} not expanding for accounting packets?

2008-07-30 Thread Alan DeKok
Phil Mayers wrote: > Anyone have any ideas? evaluate.c was using one buffer for two different purposes. I've fixed that, and the problem is gone. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: acct and syslog

2008-07-30 Thread Alan DeKok
Mustapha Bouikhif wrote: > Is there a simple way to send accounting logs (of FR 2.0.5) to syslog ? > I mean the various detail files: auth_log, reply_log, > pre||post_proxy_log ... You REALLY don't want to do that. It's a very bad idea. > It is possible to append them to radius.log (who can be

Re: peap-tls support in freeradius

2008-07-30 Thread Alan DeKok
Gopinath Reddy N wrote: > Hi Alan, > > Could u please let me know whether I need to change any settings in > configuration files like eap.conf or radiusd.conf to make it work for > PEAP-TLS Read eap.conf, and configure it. Do you have *specific* questions about a problem, or do you want com

Re: peap-tls support in freeradius

2008-07-30 Thread Gopinath Reddy N
Hi Alan, Could u please let me know whether I need to change any settings in configuration files like eap.conf or radiusd.conf to make it work for PEAP-TLS Thanks a lot Gopi On Wed, Jul 30, 2008 at 9:43 AM, Gopinath Reddy N <[EMAIL PROTECTED]> wrote: > Hi Alan, > > Thanks for the info. Iam runni