Authentication failed from Radius server

2009-01-05 Thread Aravind Arjunan
Radius(freeradius) server has configured and integrated with Openldap server for user authentication in RHEL 5. Using radtest, NTRadPing and Radiustest (Utility) it is working fine. I got Access-Acept by using this utility. When i try from enduser through Wireless access point i may not able to

Re: NAS-Identifier and radgroupcheck table

2009-01-05 Thread John Dennis
t...@kalik.net wrote: Now I have NAS-Identifier attribute in group table, but it is ignored and the user can connect from different NAS. That's how sql groups work. If the group check doesn't match - group is ignored. User is not rejected. If you wan't to force this use unlang or hungroup

Re: NAS-Identifier and radgroupcheck table

2009-01-05 Thread A . L . M . Buxey
Hi, > I recently posted a howto explaining how to implement huntgroups in SQL > using unlang in 2.x, look in the mail archives. It also illustrates how > to use the SQL huntgroups to control logon access based on the NAS. > Perhaps I should put this on the wiki. certainly! things posted to t

Re: newbie new freeradius install fails to start...

2009-01-05 Thread A . L . M . Buxey
Hi, > A different solution is to fix the "bootstrap" script to just run the > commands directly. I've done that now. good call - a lot of people dont want/need devloper or build tools on their production servers. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users

Re: NAS-Identifier and radgroupcheck table

2009-01-05 Thread tnt
>Now I have NAS-Identifier attribute in group table, but it is ignored and >the user can connect from different NAS. > That's how sql groups work. If the group check doesn't match - group is ignored. User is not rejected. If you wan't to force this use unlang or hungroups (or users) file. Ivan Ka

Re: [HELP] FreeRadius and External Script

2009-01-05 Thread tnt
> >authorize { >} > >authenticate { >Auth-Type Perl { >perl >} >} > >in users.conf: > >DEFAULT Auth-Type = Perl >Fall-Through = 1 > > > > >If i understand, when he receive a authentification request of my cisco, >he start the script >(Test-Auth.pl are a copy

NAS-Identifier and radgroupcheck table

2009-01-05 Thread Arrigo Savio
Hi everybody. I'm configuring FreeRADIUS Version 2.1.1 on a Fedora 9 server. I'm trying to create different groups containing different users. The final result is to differentiate radius checks depending on which service users are trying to authenticate. For example: us...@realm1 (in radius group1

Re: somewhat ot: Check radius server name on linux supplicant

2009-01-05 Thread A . L . M . Buxey
hi, its down to the supplicant to have the option and ability to do these checks. Sure, most of them have a 'is cert okay'? option but if you've chosen to use a public auth then anyone else can get a cert signed by that auth and start playing around...which is a weakness. I'd certainly recommen

Re: Authentication failed from Radius server

2009-01-05 Thread Alan DeKok
Aravind Arjunan wrote: > Radius(freeradius) server has configured and integrated with Openldap > server for user authentication in RHEL 5. > Using radtest, NTRadPing and Radiustest (Utility) it is working fine. I > got Access-Acept by using this utility. Yes. Because they're not doing EAP.

Re: [HELP] FreeRadius and External Script

2009-01-05 Thread Phibee Network Operation Center
Hi All that's work now, very thanks at Alan, Luciano and Ivan ;=) bye jerome - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: [HELP] FreeRadius and External Script

2009-01-05 Thread Phibee Network Operation Center
a.l.m.bu...@lboro.ac.uk a écrit : Hi, When i start manually the script, we have: ./example.pl: line 26: use: command not found ./example.pl: line 29: syntax error near unexpected token `(' ./example.pl: line 29: `use vars qw(%RAD_REQUEST %RAD_REPLY %RAD_CHECK);' how are you running t

Digest authentication and perl authorization

2009-01-05 Thread Luciano Afranllie
Hi, I have a test deployment with a sip proxy (kamailio) and a back to back user agent (sippy b2bua) pointing to freeradius. SIP proxy is making digest authentication of users and that is working fine. My plan is to use b2bua for prepaid calls authorization and call dropping (sip proxy forward c

Re: [HELP] FreeRadius and External Script

2009-01-05 Thread A . L . M . Buxey
Hi, > When i start manually the script, we have: > > ./example.pl: line 26: use: command not found > ./example.pl: line 29: syntax error near unexpected token `(' > ./example.pl: line 29: `use vars qw(%RAD_REQUEST %RAD_REPLY %RAD_CHECK);' how are you running this script manually? looks like you'r

Re: [HELP] FreeRadius and External Script

2009-01-05 Thread Phibee Network Operation Center
a.l.m.bu...@lboro.ac.uk a écrit : Hi, Ok, now i think's that this script are started but i don't understand hit, he have a lot of sub but sub are not launched. if i understand, i put all of my perl script into the sub test_call no ? its quite easy. in the experimental.conf file you

Re: [HELP] FreeRadius and External Script

2009-01-05 Thread A . L . M . Buxey
Hi, > Ok, now i think's that this script are started but i don't understand > hit, he have a lot of sub but > sub are not launched. > > if i understand, i put all of my perl script into the sub test_call no ? its quite easy. in the experimental.conf file you state which routines you would like

Re: Digest authentication and perl authorization

2009-01-05 Thread tnt
>I am thinking in something like this: > >- Radius client (b2bua) sends an access-request with Service_type = >"Authorize-Only" >- Adding perl module to authorization section. >- In authorize function of perl module check if the balance is enough >to make the call. if yes add an attribute to the re

sending attributes from sql

2009-01-05 Thread Andrew Long
Looking for a little guidance on how to send user specific attributes to over-ride NAS defaults. NAS is a Colubris MSC-3200. In their public access guide, Colubris explains how to set a welcome-url for different groups... ie. "Add the following entry to the RADIUS profile for the basic cust welcom

[HELP] FreeRadius and External Script

2009-01-05 Thread Phibee Network Operation Center
Hi i request your help because i don't understand the process of FreeRadius and i am limited in the time ;=) Very thanks to all men that accept to help me. I have installed FreeRadius and my Cisco can talk with it without problems. Now i want that FreeRadius start a perl script for get the au

Re: [HELP] FreeRadius and External Script

2009-01-05 Thread Luciano Afranllie
On Mon, Jan 5, 2009 at 10:05 AM, Phibee Network Operation Center wrote: > a.l.m.bu...@lboro.ac.uk a écrit : > > Hi, > > > > When i start manually the script, we have: > > ./example.pl: line 26: use: command not found > ./example.pl: line 29: syntax error near unexpected token `(' > ./example.pl: l