Re: 2.1.1-pre

2008-09-18 Thread Alan DeKok
[EMAIL PROTECTED] wrote: PS - it appears thatt he .tar.gz file thats available to download from that location is for a 2.0.6 release. just thought I'd mention it The tar file on the web site is old. The web site has pointers to downloading updated tar files from github. Alan DeKok. -

Re: 2.1.1-pre

2008-09-18 Thread Alan DeKok
[EMAIL PROTECTED] wrote: just tried a GIT checkout and got something nasty. config files work fine with the 2.1.0 release Fixed, thanks. There was a bug in the new list home servers functionality. This is what it now outputs: $ ./radmin -e show home_server list 192.168.0.139 1812auth

No authenticate method (Auth-Type) configuration found

2008-09-18 Thread browan.jason
Hi all, I have got some problems when use freeradius. freeradius version: FreeRADIUS Version 1.0.5, for host , built on Sep 9 2008 at 11:11:51 My system: Fedora core 4 Kernel version: 2.6.11-1.1369_FC4 When i test the radius server, I have add something into /usr/local/etc/raddb/users like

Authentication flow

2008-09-18 Thread Sudarshan Soma
I have three authentication modules -- pam_radius_auth.so (for remote authentication) -- pam_unix ( unix local authentication) -- pam_opie (challenge/response) and other accounting modules such as pam_abl, which does user lockout/iplocking. I would like to choose a better authentication for

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, The tar file on the web site is old. The web site has pointers to downloading updated tar files from github. yes, I noted...a lot of other people wont read the other 60% of the page and will just click the first .tar.gz they see alan - List info/subscribe/unsubscribe? See

PERL fix/patch for CentOS is now out!

2008-09-18 Thread A . L . M . Buxey
hi, just a quick note for those folk out there running lots of PERL DBI things etc with their FreeRADIUS systems on CentOS/RHEL - theres been a problem with PERL with this distro for some time - massive speed penalty - over 100x slower than ubuntu/suse/etc etc this quick PERL script should

Re: No authenticate method (Auth-Type) configuration found

2008-09-18 Thread Syed Anwarul Hasan
Hi Jason, I also have the same problem before. Change the User-Password to Cleartext-Password := your password in the users file. I hope it will work. SYED On Thu, Sep 18, 2008 at 8:15 AM, browan.jason [EMAIL PROTECTED]wrote: Hi all, I have got some problems when use freeradius.

Re: Authentication flow

2008-09-18 Thread Alan DeKok
Sudarshan Soma wrote: I have three authentication modules -- pam_radius_auth.so (for remote authentication) -- pam_unix ( unix local authentication) -- pam_opie (challenge/response) and other accounting modules such as pam_abl, which does user lockout/iplocking. This is really a PAM

Re: No authenticate method (Auth-Type) configuration found

2008-09-18 Thread Alan DeKok
browan.jason wrote: FreeRADIUS Version 1.0.5, for host , built on Sep 9 2008 at 11:11:51 Upgrade. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Re: No authenticate method (Auth-Type) configuration found

2008-09-18 Thread browan.jason
Dear Syed, Thank you very much. I have try the method as you say, but ,it seems to be the same error. modcall: group authorize returns ok for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user.

Re: Re: No authenticate method (Auth-Type) configuration found

2008-09-18 Thread Jason
Hi Alan, Thanks, I have tried the new version(freeradius-server-2.1.0) before, But when i compile it, some error appeared: listen.c:97:54: unterminated argument list invoking macro rad_assert listen.c: In function `client_listener_find': listen.c:99: `rad_assert' undeclared (first use in this

Re: No authenticate method (Auth-Type) configuration found

2008-09-18 Thread tnt
rad_recv: Access-Request packet from host 192.168.121.43:32768, id=161, length=57 User-Name = test1 User-Password = 123456 NAS-IP-Address = 255.255.255.255 NAS-Port = 0 This is a pap request. Processing the authorize section of radiusd.conf modcall: entering

Re: Re: No authenticate method (Auth-Type) configuration found

2008-09-18 Thread Jason
This is a pap request. preprocess, chap, mschap, suffix, eap - no pap listed in authorize section. List it last. Ivan Kalik Kalik Informatika ISP Yes, There are pap section in the configure file. but have error, too. Now, I use another version of freeradius,1.1.7, and test, every thing is OK

Re: PERL fix/patch for CentOS is now out!

2008-09-18 Thread Marinko Tarlac
Thanks for info #yum update perl is a solution On Thu, Sep 18, 2008 at 9:20 AM, [EMAIL PROTECTED] wrote: hi, just a quick note for those folk out there running lots of PERL DBI things etc with their FreeRADIUS systems on CentOS/RHEL - theres been a problem with PERL with this distro

Debugging access point behaviour

2008-09-18 Thread Giovanni Lovato
First of all, this is not a FR problem. I use FR 2.1.0 and it works very well! BTW, I'm trying to configure an access point to authenticate against FR, but the process fails. Maybe someone here can tell me where is the issue, so I attach the log of FR... Some details: OS: Debian Lenny FR version:

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, got a problem with GIT version of 2.1.1 - it doesnt fail in debug mode (-X) but when run as a service, it soon dies (in less than 5 minutes) - as stated before, in full debug mode it runs all day. I am currently trying to discover the fault alan - List info/subscribe/unsubscribe? See

Re: 2.1.1-pre

2008-09-18 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I am currently trying to discover the fault $ gdb --args radiusd -f (gdb) run ... (gdb) arg There were a few changes to fix problems found in 2.1.0, and a whole whack of new development to add useful new features. Unfortunately, it looks like the new development

Re: XP windows Validating identity blues

2008-09-18 Thread scott woodard
Hi, I commented out realms in proxy.conf This is the output of radiusd -X -z I am still getting rlm_realm: No '@' in User-Name = scott, looking up realm NULL..    Message-Authenticator = 0x1fbb1743154dc6aa8cd2ecbdd581ed69   Processing the authorize section of radiusd.conf modcall:

SQL and ippool

2008-09-18 Thread Xiaochen Jing
Hello all, The scenario will be: when Freeradius receives a user request, it forwards it to SQL server (local or remote) for authenticating the username/password. If the username/password is valid, then Freeradius will use a certain ippool to assign IP address to the user, based on

Re: 2.1.1-pre

2008-09-18 Thread John Horne
On Wed, 2008-09-17 at 11:48 +0200, Alan DeKok wrote: I've made a number of changes to fix issues in 2.1.0. Can some people please try git head? See git.freeradius.org for how to get a tar file. If there are no complaints, we can issue 2.1.1 tomorrow. FYI - Installing 2.1.1 gives this

Re: SQL and ippool

2008-09-18 Thread Maxim Sirenko
Hi! I think, SQL server with some stored procedures should think of it. But I doubt that it's possible to bind username to pool. If I'm right NAS already has to know the name of pool from which it requests the IP for client and SQL server simply returns to radius free ip from this pool.

Re: 2.1.1-pre

2008-09-18 Thread Alan DeKok
John Horne wrote: Creating/updating files in /usr/local/etc/raddb install: snmp.conf does not exist find: /usr/local/etc/raddb/snmp.conf: No such file or directory It seems that Makefile has 'snmp.conf' listed as a file to be installed, but no such file exists. OK, I've fixed

Re: SQL and ippool

2008-09-18 Thread Alan DeKok
Xiaochen Jing wrote:= The scenario will be: when Freeradius receives a user request, it forwards it to SQL server (local or remote) for authenticating the username/password. No. It READS the username/password from the DB. SQL isn't an authentication protocol. Can this be accomplished? I

Re[2]: redundant ippools using rlm_ippool in v1.1.3

2008-09-18 Thread Michael Chernyakhovsky
Здравствуйте, FreeRadius! Вы писали 16 сентября 2008 г., 23:23:13: The patch works as promised in version 1.1.3 if applied. The post-auth section in radiusd.conf doesn't though. As suggested by Michael with Kostas' patch applied you have to pass DEFAULT as Pool-Name check attribute in

Re: 2.1.1-pre

2008-09-18 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I am currently trying to discover the fault I found something that may be it. Please grab an updated copy of src/main/event.c Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, There were a few changes to fix problems found in 2.1.0, and a whole whack of new development to add useful new features. Unfortunately, it yes - very aware of the new features (which is why I want to migrate from 2.0.5 to 2.1.1) - something is lurking for sure. alan - List

Re: Unknown AVPs

2008-09-18 Thread Jeffrey Sewell
Found it! Thanks. That's quite extensive, I'll have to spend some quality time with this new version. Well done! On Sep 17, 2008, at 10:47 PM, Alan DeKok wrote: Jeffrey Sewell wrote: That was the solution: 2.1.0. The dictionary was the culprit. I can't seem to find the 2.1 equivalent of

Download/use luser error

2008-09-18 Thread Alex Moen
Hey all, I am having a problem connecting to a Cisco 10k. Here's the user: [EMAIL PROTECTED] Password == ctdn Service-Type = Framed-User, Framed-Protocol = PPP, Context-Name = wherever.com, Cisco-Account-Info = Andtc_512, Cisco-AVPair =

Re: XP windows Validating identity blues

2008-09-18 Thread tnt
I am still getting rlm_realm: No '@' in User-Name = scott, looking up realm NULL.. That's OK. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rlm-perl lc usernames

2008-09-18 Thread Charlie B
Hello, Anyone can help me with this perl script (at bottom) which seem to be causing more than a simple lc, it seems to move the first character to the end... rlm_perl: Added pair User-Name = *\\raduser rlm_perl: Added pair EAP-Message = 0x02020011014e494e545c52616455736572 rlm_perl: Added

Re: Download/use luser error

2008-09-18 Thread A . L . M . Buxey
Hi, So I downloaded the latest and greatest, gunzipped it (even tried the bunzip version), but when I try to untar the file, I get tar: directory checksum error... wget ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.1.0.tar.bz2 tar -xjvf freeradius-server-2.1.0.tar.bz2 alan

Re: Unknown AVPs

2008-09-18 Thread Alan DeKok
Jeffrey Sewell wrote: That's quite extensive, I'll have to spend some quality time with this new version. Well done! Thanks. 2.1.1 has a *very* enhanced admin CLI, and sample scripts for munin, to display pretty graphs of packets sent/received by the server. Alan DeKok. - List

Re: Download/use luser error

2008-09-18 Thread tnt
You should use += instead of = to add multiple attributes with the same name to the reply. No idea if that works in pre 1.0 version. Ivan Kalik Kalik Informatika ISP Dana 18/9/2008, Alex Moen [EMAIL PROTECTED] piše: Hey all, I am having a problem connecting to a Cisco 10k. Here's the user:

RE: SQL and ippool

2008-09-18 Thread Xiaochen Jing
Thanks Alan and Maxim, So after Freeradius reads the username/password in SQL, how can we bind username/password to a specific ippool? Like what I do in /users, Username Cleartext-Password := password, Pool-Name := poolname Thanks in advance Xiaochen -Original Message- From: [EMAIL

RE: SQL and ippool

2008-09-18 Thread tnt
So after Freeradius reads the username/password in SQL, how can we bind username/password to a specific ippool? Like what I do in /users, Username Cleartext-Password := password, Pool-Name := poolname http://wiki.freeradius.org/SQL_HOWTO#Populating_SQL Ivan Kalik Kalik Informatika ISP - List

Re: Fedora 9 EAP issue

2008-09-18 Thread Charlie B
Hello Thomas, Can we take this and start from scratch or walk thru it? Let me know (send me an email) as we can walk thru offline if you like We are running Fedora 9 32bit and 64bit with freeradius 2.0.5 eap-peap-mschapv2 eap-ttls-mschapv2 eap-ttls-pap against LDAP (AD) with group filtering

Re: Create EAP TLS with Windows CA

2008-09-18 Thread Charlie B
Hello Jason, Did you get this worked out? Alan has a great readme that details how to generate your certificate request, then simply get your WinCA to sign it, copy it over and if required convert to pem from the csr/base64 Let me know if you need anything more... - List

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, There were a few changes to fix problems found in 2.1.0, and a whole whack of new development to add useful new features. Unfortunately, it looks like the new development added issues of it's own... just to report that i've got the latest GIT version now installed and running alan

WARNING! No known good password found for the user

2008-09-18 Thread Martin Silvero
Hello comrades again. I have been presented the following problem and by what I see is a user problem, teachme if I am wrong. The theme is already created certificates and installed on the user as I read in the howto but does not connect to the network. I put all passwords equally by the doubts,

Re: WARNING! No known good password found for the user

2008-09-18 Thread tnt
rad_recv: Access-Request packet from host 10.0.31.40 port 1645, id=3, length=128 Framed-MTU = 1400 Called-Station-Id = 0019.2fdb.9e00 Calling-Station-Id = 001f.3c22.44c5 Service-Type = Login-User Message-Authenticator = 0x59eaaf3452a4d4924059fd281add53cd

WARNING! No known good password found for the user

2008-09-18 Thread Martin Silvero
Is what we mean is that access point is wrong? Is this bad set? Is this bad or configured in the notebook user? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Cisco IOS - rlm_pap

2008-09-18 Thread Sturgis, Grant
Good day all, Trying to get Cisco IOS to authenticate to FR 2.0.5 using rlm_pap. I've followed the instructions from here: http://wiki.freeradius.org/index.php/Cisco but am still having problems. I'm hoping someone can point out my error. Thanks in advance: FreeRADIUS Version 2.0.5, for

Re: Cisco IOS - rlm_pap

2008-09-18 Thread A . L . M . Buxey
Hi, Trying to get Cisco IOS to authenticate to FR 2.0.5 using rlm_pap. I've followed the instructions from here: http://wiki.freeradius.org/index.php/Cisco but am still having problems. I'm hoping someone can point out my error. FreeRADIUS is happy - and its sending the result back to

Re: WARNING! No known good password found for the user

2008-09-18 Thread tnt
Something is wrong with the access point. Ivan Kalik Kalik Informatika ISP Dana 18/9/2008, Martin Silvero [EMAIL PROTECTED] piše: Is what we mean is that access point is wrong? Is this bad set? Is this bad or configured in the notebook user? - List info/subscribe/unsubscribe? See

Re: Cisco IOS - rlm_pap

2008-09-18 Thread Sturgis, Grant
[EMAIL PROTECTED] wrote: Hi, Trying to get Cisco IOS to authenticate to FR 2.0.5 using rlm_pap. I've followed the instructions from here: http://wiki.freeradius.org/index.php/Cisco but am still having problems. I'm hoping someone can point out my error. FreeRADIUS is happy - and its

Re: 2.1.1-pre

2008-09-18 Thread Jim L.
I've made a number of changes to fix issues in 2.1.0. Can some people please try git head? See git.freeradius.org for how to get a tar file. I saw that there were a few changes since this message was sent. I did a new git clone a couple hours ago and installed from there. Here is the

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, I saw that there were a few changes since this message was sent. I did a new git clone a couple hours ago and installed from there. Here is the result. As a reminder, I am using a configuration based on the robust-proxy-accounting example. FR 2.1.0 crashes for me when the remote

Users can't authenticate through PEAP

2008-09-18 Thread Alex Wong
I'm using Fedora Core 9 with freeradius 2.1.0. I've follow the steps in http://www.tldp.org/HOWTO/8021X-HOWTO/freeradius.html#confradius to configure it. However, when I key in the username and password in Windows XP SP2, it doesn't seems to be able to authenticate. It goes into loop and I can't

Freeradius Accounting using different virtual server

2008-09-18 Thread Ryan Setiawan H
Hi, I'm using freeradius 2.0.5... many client authenticate againt us that is segmented by realm ( / IPASS). the server will strip the username realm and proxying to localhost with different port number ( so i create many listen section with point to their own virtual server ) ex like this

Chillispot on different machine

2008-09-18 Thread Tanya Muluw
Dear all, I have just install eashyhotspot, a linux captive portal distro based on Xubuntu, which consist of Chillispot, Freeradius, and billing application, in a single machine. It's work fine. Now I want to install another Chillispot in a different Gentoo Linux machine, which will connect to

MySQL not in the default port

2008-09-18 Thread Marcelo Freitas
Hello, I had to install my MySQL not in the default port (3306), and I'm not able to connect to the server ... I tried everything in the sql.conf like localhost:5999, my.IP:5999, hostname, etc and nothing makes it to connect ... Is there any (right) way to specify a port to connect ? is it