Re: CISCO VPN + FREERADIUS + CERTIFICATES

I read the FAQa and HOWTOs but their are either unavailable or do not give me the clue - all I want is to have certificates for my users to authenticate. Alan DeKok pisze: Gabriel Starczewski wrote: I successfully set up radius-based authentication with mysql database and local database

SQL statement in radcheck

Hello, I'm trying to allow a user to log in from few Calling-Station-Ids, but to load them at run-time (read them from mysql table). For that I'm trying to use sql statement in radcheck, but it doesn't seem to be working. Here is a simplified example (mysql, table radcheck):

Information required regarding the freeradius.

Hi, I am a newbie for FreeRadius. I need some information on freeradius regarding my requirement for authentication and session control. I want to setup the system like.. 1 One centralized server running on a Linux machine for authentication. 2 Client Linux machine in the network which should

Re: CISCO VPN + FREERADIUS + CERTIFICATES

Gabriel Starczewski wrote: I read the FAQa and HOWTOs but their are either unavailable or do not give me the clue - all I want is to have certificates for my users to authenticate. Perhaps you could try reading the HOWTO's on my web site, as I suggested? Alan DeKok. - List

AW: Realm delimiter characters

Hello Alan! Here is the output of a sample RADIUS Request with the realm host as the prefix. It seems as if the rlm_realm is only looking for the @ character as a delimiter. Below my output I have pasted the relevant content of the /opt/etc/raddb/modules file. Listening on proxy address *

Re: Unable to authenticate to 10.5.4 open directory

You are using outdated version of the server which doesn't support virtual servers. In current version eap is processed by the default virtual server while inner tunnel is processed by - inner-tunnel virtual server. If you don't want to upgrade you can emulate this by using - real ones. Set up

[no subject]

Hi, Does the PAM module support access challenge sent from the radius server? //robert - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re:

Robert Svensson wrote: Hi, Does the PAM module support access challenge sent from the radius server? It's supposed to. It was tested with X9.9 token cards. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Unable to authenticate to 10.5.4 open directory

2008/9/2 Ivan Kalik [EMAIL PROTECTED]: You are using outdated version of the server which doesn't support virtual servers. In current version eap is processed by the default virtual server while inner tunnel is processed by - inner-tunnel virtual server. If you don't want to upgrade you can

EAP-Message help

hi, iam using fedora 9 and freeradius 2.0.5 i am new at freeradius i configured freeradius by using wiki.freeradius.com howto wpa and mysql connectin everting is ok when test with radtest or NTRadPing it is working then i create certificates by using make /etc/raddb/certs/make then configure

EAP-Message help

hi,iam using fedora 9 and freeradius 2.0.5 i am new at freeradiusi configured freeradius by using wiki.freeradius.com howto wpaand mysql connectineverting is ok when test with radtest or NTRadPing it is workingthen i create certificates by using make/etc/raddb/certs/makethen configure

Re: GnuTLS support?

Greg wrote: Hi all, Are there still plans to add in GnuTLS support for freeradius, or have those died? I looked through the mail archives and found references to people wanting to do it in 2003 and 2006, against pre-2.0 code, and wondered if things had changed (either in freeradius or gnutls)

Re: Unknown AVPs

On Aug 29, 2008, at 11:23 PM, Alan DeKok wrote: Jeffrey Sewell wrote: I've got a FreeRADIUS server that takes in Accounting data that is proxied to it from another server. In the Accounting packets I see AVPs that are tagged Unknown-Attribute. Hm... unknown attributes should be printed

radact into sql

hello, I have one small problem, and I am not sure.. I had a FreeRadius 1.0.x and there I had a loging radact into SQL now I have freeradius-1.1.0-6.amd64 and everything is working fine, but I have radact empty :( I think, that I should add accounting { detail sql } and I

sql table

Hy all, I have an oracle database storing authentication information for thousounds of differents users. This database is of course, not compliant at all with freeradius requirements (users file like). What is the best practice to make it work. I have many attributes to manage in checks as well

Re: radact into sql

Przemysław Backiel a écrit : hello, I have one small problem, and I am not sure.. I had a FreeRadius 1.0.x and there I had a loging radact into SQL now I have freeradius-1.1.0-6.amd64 and everything is working fine, but I have radact empty :( I think, that I should add accounting {

Re: sql table

Alexandre Chapellon wrote: I have an oracle database storing authentication information for thousounds of differents users. This database is of course, not compliant at all with freeradius requirements (users file like). What is the best practice to make it work. You can edit the default

Re: Unknown AVPs

Jeffrey Sewell wrote: Hm... unknown attributes should be printed as Vendor-123-Attr-456. I'm going off the raw tcpdump view, maybe they get translated at a higher level. I'll re-check. Ah, OK. FreeRADIUS does that translation when it prints the attributes to the detail file. And I'd

Re: GnuTLS support?

John Dennis wrote: This may or may not be relevant or helpful to you, but Red Hat and the Fedora project has slowly been migrating packages from OpenSSL to NSS (http://www.mozilla.org/projects/security/pki/nss). I'd prefer that to GNUtls, from what I've seen of the two systems. Please note

Re: AW: Realm delimiter characters

Nemec Christopher wrote: Here is the output of a sample RADIUS Request with the realm host as the prefix. It seems as if the rlm_realm is only looking for the @ character as a delimiter. Below my output I have pasted the relevant content of the /opt/etc/raddb/modules file. You have

Re: SQL statement in radcheck

Ljupco Vangelski wrote: I'm trying to allow a user to log in from few Calling-Station-Ids, but to load them at run-time (read them from mysql table). For that I'm trying to use sql statement in radcheck, but it doesn't seem to be working. Here is a simplified example (mysql, table radcheck):

ippool

Hi again, Looking at freeradius online doc, i saw that sqlippool requires transmission of interim-updates packets to the accounting server to function correctly (http://wiki.freeradius.org/Rlm_sqlippool#Important_Info). I what would like to use sqlippool to manage ip allocation of framed-users,