Re: Authenticating with two or more modules

2008-08-25 Thread Alan DeKok
Christian Lete wrote: > I'm wondering if it is possible to authenticate using 2 modules by ANDing > them? (the 2 modules must return true, to be a sucessfully authentication). > If so, would you please give me some pointers to documents, I will take it > from there. Yes. See "man unlang". You

Re: compiling freeradius with oracle support

2008-08-25 Thread Alan DeKok
Alexandre Chapellon wrote: > Do you remember which version of oracle instantclient you used to > successfully compil rlm_sql_oracle? Oracle 10, IIRC. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: NAS-IP-Address, rlm_perl, and loopback

2008-08-25 Thread Alan DeKok
Sewell, Adam W wrote: > Thanks for the help guys, but I don't think that's going to work > for me. I was doing some testing today and it doesn't seem like > I can add a filter-id to the access-accept packet from the > post-auth function. Uh... no. You can add almost anything to the Access-Accep

RE: NAS-IP-Address, rlm_perl, and loopback

2008-08-25 Thread Sewell, Adam W
Thanks for the help guys, but I don't think that's going to work for me. I was doing some testing today and it doesn't seem like I can add a filter-id to the access-accept packet from the post-auth function. Our switches require that to set the policy. Am I missing something here? - Origi

Re: compiling freeradius with oracle support

2008-08-25 Thread Alexandre Chapellon
Alan DeKok a écrit : > Alexandre Chapellon wrote: > >> then could you point me to the place where you get the oracle libs stuff? >> > > I've always just built with whatever libraries Oracle put on the > system. i.e. it was pre-installed at customer sites. > > I'd suggest rooting thro

Authenticating with two or more modules

2008-08-25 Thread Christian Lete
Hi everybody, I'm wondering if it is possible to authenticate using 2 modules by ANDing them? (the 2 modules must return true, to be a sucessfully authentication). If so, would you please give me some pointers to documents, I will take it from there. Best Regards, Christian Lete - List info/

Re: compiling freeradius with oracle support

2008-08-25 Thread Alexandre Chapellon
Do you remember which version of oracle instantclient you used to successfully compil rlm_sql_oracle? Alan DeKok a écrit : > Alexandre Chapellon wrote: > >> then could you point me to the place where you get the oracle libs stuff? >> > > I've always just built with whatever libraries Ora

Re: mysql configuration

2008-08-25 Thread Ivan Kalik
Read instructions at the end of radiusd.conf. It tels you where are those sections in 2.0.5. Ivan Kalik Kalik Infoprmatika ISP Dana 25/8/2008, "Ahmet DÜLGAR" <[EMAIL PROTECTED]> piše: > >hi everyone >i use fedora 9 and freeraidus 2.0.5 >i want to use mysql database for user lists and i want to

Re: mysql configuration

2008-08-25 Thread Alan DeKok
Ahmet DÜLGAR wrote: > hi everyone > i use fedora 9 and freeraidus 2.0.5 > i want to use mysql database for user lists and i want to limit time > users login for example 3 hour or 3 days > i looked documents for howto wpa Or... just read the examples that come with the server? > but i only cant

mysql configuration

2008-08-25 Thread Ahmet DÜLGAR
hi everyone i use fedora 9 and freeraidus 2.0.5 i want to use mysql database for user lists and i want to limit time users login for example 3 hour or 3 days i looked documents for howto wpa i create the radius db by db_mysql.sql configure the sql.conf by writein login mysql password and include

Re: Question about Logging

2008-08-25 Thread Alan DeKok
Aaron Spanik wrote: > As you no doubt know, once I used > %{proxy-request:Packet-Dst-Ip-Address} I started seeing exactly what I > wanted to see in my logs. Yup. > That sounds excellent; I will check out the GIT version. Can you > comment on how long it is likely to take before those features

Re: Question about Logging

2008-08-25 Thread Aaron Spanik
On Sat, 23 Aug 2008 07:04:11 +0200 Alan DeKok <[EMAIL PROTECTED]> wrote: > Aaron Spanik wrote: > > *snip* > > I suggest getting access. Sorry... but it's the simplest way to debug > things when something is going wrong. Always. But sometimes one is forced to prove something is wrong before t

Re: Quota Control based on freeradius and SSG

2008-08-25 Thread ahmed adel
Can anyone send me a sample for the configuration for Quota control service profile in users file. - Original Message From: Ivan Kalik <[EMAIL PROTECTED]> To: FreeRadius users mailing list Sent: Monday, August 25, 2008 6:22:09 PM Subject: Re: Quota Control based on freeradius and SSG

TLS_accept:error in SSLv3 read client certificate A

2008-08-25 Thread Martin Silvero
the method is eap+tls, ticket that need to know and what post. thanks!!! -- -- Silvero Martin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Pop3 and LDAP authentication...Multiple radius servers

2008-08-25 Thread Ivan Kalik
http://radiuswiki.suntel.com.tr/Proxy.conf Ivan Kalik Kalik Informatika ISP Dana 25/8/2008, "Eric Martell" <[EMAIL PROTECTED]> piše: >Hi, > We have radius server which is inhouse which does the LDAP authentication > We got a new request from third party to do authentication for "their" users

Pop3 and LDAP authentication...Multiple radius servers

2008-08-25 Thread Eric Martell
Hi,    We have radius server which is inhouse which does the LDAP authentication. We got a new request from third party to do authentication for "their" users using POP3. So the request comes to radiusA (our inhouse radius). If the user has realm as @xyz.net ..then we forward the request to thi

Re: Quota Control based on freeradius and SSG

2008-08-25 Thread Ivan Kalik
It is a separate entry (in users file). Documentation does explain what needs to be in the service profile in order to generate an additional request. Use += operator to put multiple service info attributes in a reply packet. http://www.cisco.com/en/US/docs/ios/12_2/12_2b/12_2b4/feature/guide/12bs

Re: Quota Control based on freeradius and SSG

2008-08-25 Thread ahmed adel
I don't get a request for Quota, where does the Quota belong, I don't know where else to define it - Original Message From: Ivan Kalik <[EMAIL PROTECTED]> To: FreeRadius users mailing list Sent: Monday, August 25, 2008 1:11:41 PM Subject: Re: Quota Control based on freeradius and SSG

Re: Quota Control based on freeradius and SSG

2008-08-25 Thread Ivan Kalik
Post the debug. If you have set things up properly you should get three requests: one for the user, one for the service and one for the quota. Quota doesn't belong in service profile. Ivan Kalik Kalik Informatika ISP Dana 25/8/2008, "ahmed adel" <[EMAIL PROTECTED]> piše: >Hi > I have a setu

Quota Control based on freeradius and SSG

2008-08-25 Thread ahmed adel
Hi I have a setup where there is cisco 7200 router having SSG enabled on it, I want to enable quota control using SSG and radius. I made a service profile: quota Password := "cisco" Service-Type = Outbound-User, Cisco-Service-Info = "R0.0.0.0;0.0.0.0", Cisco-Control