Re: Password attrib problem

2008-09-11 Thread Alan DeKok
Yawar Hadi wrote: now when i send User-Password attrib in accounting stop request,and get it value like User-Passwords don't belong in accounting packets. pair=pairfind(request-vps,PW_User_Password); strcpy(pass,pair-strvalue;

Re: Segmentation fault in 2.1.0

2008-09-11 Thread Alan DeKok
Jim L. wrote: I believe the crash occurs when the accounting server is down and FS attempts to spool the request to a local file or perhaps when it attempts to read the local spool file. If the remote accounting server is up, FS does not crash. I've committed the fix to git. It will be in

Re: Problems with the authentication TLS

2008-09-11 Thread Alan DeKok
Martin Silvero wrote: unable to load CA private key 23294:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:461: 23294:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:425: make: *** [client.crt] Error 1 The password is incorrect. somewhere

Custom values for Post-Auth-Type

2008-09-11 Thread Matthias Witte
I am not sure, whether this is the correct way to do this: I would like to use a custom Post-Auth-Type section like post-auth { Post-Auth-Type SQL { sqlmainpool } ... The corresponding line in users is: DEFAULT Service-Type == Framed-User, User-Profile :=

Re: Custom values for Post-Auth-Type

2008-09-11 Thread tnt
users file is common for all virtual servers. You need to add this to all virtual servers not just default. Ivan Kalik Kalik Informatika ISP Dana 11/9/2008, Matthias Witte [EMAIL PROTECTED] piše: I am not sure, whether this is the correct way to do this: I would like to use a custom

Re: Password attrib problem

2008-09-11 Thread Yawar Hadi
dear alan, my code is correct .i know user-password not belongs to accounting packets.but its a requirment to have user-password in accounting packet. and code is correct 100 %. so kindly u just suggest me how i can get plain text password in accounting stop packets.

Re: Password attrib problem

2008-09-11 Thread Alan DeKok
Yawar Hadi wrote: dear alan, my code is correct It's not. The pairfind() function MAY return NULL. You are not checking for this. .i know user-password not belongs to accounting packets.but its a requirment to have user-password in accounting packet. For who? Your

Python Module with IPPOOL module

2008-09-11 Thread Michael da Silva Pereira
Hi there, I'm not sure if anybody has been able to do this, Haven't found much on the web for the Python with freeradius, but I'm trying to allocate a IP Pool to a specific set of users with a Python module. Now I know the Pool-Name is a check item and not a Reply Item, but can I do this

Re: Python Module with IPPOOL module

2008-09-11 Thread Alan DeKok
Michael da Silva Pereira wrote: I'm not sure if anybody has been able to do this, Haven't found much on the web for the Python with freeradius, but I'm trying to allocate a IP Pool to a specific set of users with a Python module. You should be able to set it in the output tuple: (return,

How To Install Freeradius with LDAP - Need Help

2008-09-11 Thread niel m
Hello Sir/Madam, Good Evening Im niel, I was researching about this topic Freeradius with LDAP support for authentication. I am very pressured because i want to implement such as this one using my AP in the office. If anyone can help me with this problem. Either some of below; - URL of a web

Failed to link EAP-Type/tls: rlm_eap_tls.so - Need Help

2008-09-11 Thread niel m
Hello Sir/Madam, Good Evening I have a problem with my Radius server with LDAP Authentication support. Below are some logs; // when i run freeradius -X for test run of freeradius rlm_eap: Loaded and initialized type gtc

Re: How To Install Freeradius with LDAP - Need Help

2008-09-11 Thread tnt
Freeradius builds with radius support by default. Look up build and rlm_ldap on freeradius wiki. Ivan Kalik Kalik Informatika ISP Dana 11/9/2008, niel m [EMAIL PROTECTED] piše: Hello Sir/Madam, Good Evening Im niel, I was researching about this topic Freeradius with LDAP support for

Re: Failed to link EAP-Type/tls: rlm_eap_tls.so - Need Help

2008-09-11 Thread tnt
Could you please bother to read the FAQ before asking questions. http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#It_says_.22Could_not_link_..._file_not_found.22.2C_what_do_I_do.3F Ivan Kalik Kalik Informatika ISP Dana 11/9/2008, niel m [EMAIL PROTECTED] piše: Hello Sir/Madam, Good

kick the frozen session

2008-09-11 Thread Przemysław Backiel
hey, I have freeradius-1.1.0-6.amd64 connected with rp-pppoe-server and now I have one frozen session how Can I drop this session from Freeradius? I have of cors username of that frozen user :) -- Z powazaniem Przemyslaw Backiel - List info/subscribe/unsubscribe? See

Re: Failed to link EAP-Type/tls: rlm_eap_tls.so - Need Help

2008-09-11 Thread Alan DeKok
niel m wrote: // when i run freeradius -X for test run of freeradius rlm_eap: Loaded and initialized type gtc rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory

Problems with the authentication TLS

2008-09-11 Thread Martin Silvero
the truth is that follow in the footsteps of the file certs / readme I looked at the howto - http://freeradius.org/doc/EAPTLS.pdf and says nothing of the buildup of certificates. I follow these steps: README

Re: Problems with the authentication TLS

2008-09-11 Thread Alan DeKok
Martin Silvero wrote: the truth is that follow in the footsteps of the file certs / readme Ok... I looked at the howto - http://freeradius.org/doc/EAPTLS.pdf and says nothing of the buildup of certificates. It *does* offer instructions for how to configure the server, and what the

Re: kick the frozen session

2008-09-11 Thread Przemysław Backiel
Przemysław Backiel pisze: hey, I have freeradius-1.1.0-6.amd64 connected with rp-pppoe-server and now I have one frozen session how Can I drop this session from Freeradius? I have of cors username of that frozen user :) the main question is how to kick/shut down stalle session (I know the

Problems with the authentication TLS

2008-09-11 Thread Martin Silvero
I wrote the documentation as redundancy, forgiveness if disturbed. What can be wrong password CA file? I got one at random, should be like any other? thanks!! -- -- Silvero Martin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: kick the frozen session

2008-09-11 Thread Przemysław Backiel
hint: use radzap :) -- Z powazaniem Przemyslaw Backiel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: kick the frozen session

2008-09-11 Thread Kirk Wallace
On Thu, 2008-09-11 at 17:01 +0200, Przemysław Backiel wrote: ... snip how to kick/shut down stalle session (I know the username) -- Z powazaniem Przemyslaw Backiel This is just a shot in the dark, but... Do you mean something like radkill? Here is a link, then search for kill:

2 questions about the python module

2008-09-11 Thread Jester
I have one question and one problem with the python module. I'll toss out the problem question first, and the curiosity second. Problem: When I run freeradius in debugging mode (-X switch) it will not terminate with a ctrl-C, in fact, when I run it as a service, the init.d script fails to

logging unknown clients

2008-09-11 Thread Greg Woods
Is there any way to get the freeradius 2.1 server to log requests coming from unknown clients? As far as I can tell, these are just silently discarded. I have read through all the comments on the log section in radiusd.conf but I don't see anything about this. Is there anywhere else where the

Re: logging unknown clients

2008-09-11 Thread tnt
This is deliberately not logged as DoS prevention measure. Such requests will be reported only in debug mode. Search for Ignoring request in listen.c. Ivan Kalik Kalik Informatika ISP Dana 11/9/2008, Greg Woods [EMAIL PROTECTED] piše: Is there any way to get the freeradius 2.1 server to log

Re: logging unknown clients

2008-09-11 Thread Alan DeKok
Greg Woods wrote: Is there any way to get the freeradius 2.1 server to log requests coming from unknown clients? As far as I can tell, these are just silently discarded. Yes. Attackers can send packets much more quickly than the server can log them. Logging unknown client could quickly

Problems with the authentication TLS

2008-09-11 Thread Martin Silvero
already achieved what !, restart the service, I started from scratch, cree certificates again. said the error was like your . was the password, which is in eap.conf Now I have a doubt AT THE howto tls two files that need to install the computer user is root.der and cert-clt.p12

Re: Problems with the authentication TLS

2008-09-11 Thread tnt
Name was changed. It's ca.der now. Ivan Kalik Kalik Informatika ISP Dana 11/9/2008, Martin Silvero [EMAIL PROTECTED] piše: already achieved what !, restart the service, I started from scratch, cree certificates again. said the error was like your . was the password, which is in

Problems with the authentication TLS

2008-09-11 Thread Martin Silvero
TNT perfect!! thank colleagues for their help, and we want to try it in my next doubt! thanks! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Failed to link EAP-Type/tls: rlm_eap_tls.so - Need Help

2008-09-11 Thread niel m
Thank you very much, I will try this :) I will reply later On Thu, Sep 11, 2008 at 9:44 PM, Alan DeKok [EMAIL PROTECTED]wrote: niel m wrote: // when i run freeradius -X for test run of freeradius rlm_eap: Loaded and