SQLCounter configuration

2009-01-09 Thread Hanno Schupp
Dear All, I have a few questions regarding the rlm_sqlcounter module and its configuration. I have a freeradius 2.1.0 communicating with a router running chillispot 1.1 I set up counters for time, data volume, and with different reset periods. All works fine and as expected. Here my questi

Re: Error in SQL statement expansion? And how to correct it?

2009-01-09 Thread tnt
>Sat Jan 10 10:21:47 2009 : Debug: expand: SELECT COUNT(*) >FROM radacct WHERE username = >'%{SQL-User-Name}' AND acctstoptime IS NULL >AND callingstationid <> '{%Calling-Station-Id}' '%{SQL-User-Name}' '{%Calling-Station-Id}' Can y

Re: Error in SQL statement expansion? And how to correct it?

2009-01-09 Thread Alan DeKok
Hanno Schupp wrote: > I found the following in my freeradius 2.1.0 debug on Ubuntu 8.10 for my > simultaneous use check: You have edited the default configuration and broken it. > Sat Jan 10 10:21:47 2009 : Debug: expand: SELECT > COUNT(*) FROM > radacct

RE: Authentication Problem with PEAP and openldap

2009-01-09 Thread tnt
>it was a bit ambiguous. The term "md4 encoded utf-16e password hash" should >express, that it is an NTLM Hash. Sorry for the confusion. > smbencrypt is distributed with the server. Use it to check the password hash. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://

Error in SQL statement expansion? And how to correct it?

2009-01-09 Thread Hanno Schupp
Dear All, I found the following in my freeradius 2.1.0 debug on Ubuntu 8.10 for my simultaneous use check: ... Sat Jan 10 10:21:47 2009 : Debug: expand: SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctsto

RE: Authentication Problem with PEAP and openldap

2009-01-09 Thread Michael Poser
Hello Thiabault, >> native wired xp 802.1X client with PEAP (mschapv2) tries to authenticate >> via freeradius against openldap with an md4 encoded utf-16e password hash. > This is just not possible. > PEAP (mschapv2) requires you can read the user password either as a > cleartext password or as

Re: Problem whith upgrade

2009-01-09 Thread tnt
>These attributes in reply come from attrs file, the missing is >ERX-Egress-Police-Name. > >In radreply it entry is: > >ID Username >Attribute op value >521 testesd...@sercomtel.com.brERX-Egress-Police-Name > =

RE: eap/tls freeradius openssl

2009-01-09 Thread Craig White
No - you download the fedora source rpm and build from spec file and it compiles using openssl-devel (and other development libraries as required) Craig On Fri, 2009-01-09 at 14:54 -0500, Brian Ertel wrote: > Hi Craig, > > So if I install freeradius as an rpm is there also a freeradius-openssl a

RE: eap/tls freeradius openssl

2009-01-09 Thread Brian Ertel
Hi Craig, So if I install freeradius as an rpm is there also a freeradius-openssl and freeradius-openssl-dev rpm? Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Craig White Sent: Fri 1/9/2009 2:41 PM To: freeradiu

RE: eap/tls freeradius openssl

2009-01-09 Thread Craig White
http://wiki.freeradius.org/Red_Hat_FAQ nice wiki On Fri, 2009-01-09 at 14:21 -0500, Brian Ertel wrote: > Alan, > > I am running CentOS 5. > > Thanks, > > Brian > > > -Original Message- > From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on > behalf of Alan De

Re: Problem whith upgrade

2009-01-09 Thread Marcelo Henique Cabral Ariza
These attributes in reply come from attrs file, the missing is ERX-Egress-Police-Name. In radreply it entry is: ID Username Attribute op value 521 testesd...@sercomtel.com.brERX

RE: eap/tls freeradius openssl

2009-01-09 Thread Brian Ertel
Alan, I am running CentOS 5. Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Alan DeKok Sent: Fri 1/9/2009 2:15 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: > I

Re: Problem whith upgrade

2009-01-09 Thread tnt
>[suffix] Proxying request from user testesdx520 to realm sercomtel.com.br >[suffix] Preparing to proxy authentication request to realm >"sercomtel.com.br" It would help if you mention that this is a proxy reply. .. >rad_recv: Access-Accept packet from host 2x port 1812, id=217, >length=2

Re: eap/tls freeradius openssl

2009-01-09 Thread Alan DeKok
Brian Ertel wrote: > I am ready to get flamed. I reinstalled the newest ver. of Freeradius > and did not change anything. It started up in debug mode. I am trying > to put together a system that will do eap/tls. Wireless client -> WAP > -> Radius... I also just installed the newest version of

eap/tls freeradius openssl

2009-01-09 Thread Brian Ertel
Ok, I am ready to get flamed. I reinstalled the newest ver. of Freeradius and did not change anything. It started up in debug mode. I am trying to put together a system that will do eap/tls. Wireless client -> WAP -> Radius... I also just installed the newest version of openssl. Freeradi

Re: Problem whith upgrade

2009-01-09 Thread Marcelo Henique Cabral Ariza
ar = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', expiry_time = current_timestamp - INTERVAL '1' second(1) WHERE nasipaddress = '%{Nas-IP-Address}'" off-commit = "COMMIT" off-rollback =

Re: Problem whith upgrade

2009-01-09 Thread tnt
>Yesterday i upgrade my freeradius from version 2.0.4 to 2.1.3 and >still using the same configuration files but when i start the server >with the new version it dont reply the attributes there are in radreply. >In debug mode i saw that freeradius search in sql for these attributes >but don`t p

Re: server selection

2009-01-09 Thread Alan DeKok
Norbert Wegener wrote: >> update control { >> Proxy-To-Realm := "%{sql:SELECT ... from.. where >> %{NAS-IP-Addres}" >> } >> > OK, but I did not yet hear about that before and it seems no topic for > the mass media: googling for Proxy-To-Realm gives 94 results. It's not

Re: Authentication Problem with PEAP and openldap

2009-01-09 Thread Thibault Le Meur
Michael Poser a écrit : Hello, native wired xp 802.1X client with PEAP (mschapv2) tries to authenticate via freeradius against openldap with an md4 encoded utf-16e password hash. This is just not possible. PEAP (mschapv2) requires you can read the user password either as a cleartext password

Authentication Problem with PEAP and openldap

2009-01-09 Thread Michael Poser
Hello, native wired xp 802.1X client with PEAP (mschapv2) tries to authenticate via freeradius against openldap with an md4 encoded utf-16e password hash. The authentication fails. If we use the hash instead of the clear-text password with the xp client, the authentication works fine. There must b

Problem whith upgrade

2009-01-09 Thread Marcelo Henique Cabral Ariza
Hi! Yesterday i upgrade my freeradius from version 2.0.4 to 2.1.3 and still using the same configuration files but when i start the server with the new version it dont reply the attributes there are in radreply. In debug mode i saw that freeradius search in sql for these attributes but don`t p

Re: Creation of User Accounts and Certificates

2009-01-09 Thread Alan DeKok
mihir patankar wrote: > We want to know how to create EAP-TTLS User Accounts and Accounts specific > Certificates in Free-Radius. As of now we have only created PAP Accounts. TTLS doesn't use account-specific certificates. For user accounts, TTLS will use the same methods as for PAP accounts.

Re: Creation of User Accounts and Certificates

2009-01-09 Thread tnt
raddb/certs/README Ivan Kalik Kalik Informatika ISP Dana 9/1/2009, "mihir patankar" piše: >Hi, > >We want to know how to create EAP-TTLS User Accounts and Accounts specific >Certificates in Free-Radius. As of now we have only created PAP Accounts. > >Mihir V Patankar > >- >List info/subscribe/u

Re: Tunnel attributes

2009-01-09 Thread tnt
>How to support these attributes ...Disc-Cause-Ext, PPP-Disconnect-Cause. Are >they supported in freeradius version 1.1.6? > >Do i need to import any dictionary files if this version doesn't supports? > They look like vendor specific. Look in the vendor dictionary. Are those Cisco avpairs? Ivan K

Creation of User Accounts and Certificates

2009-01-09 Thread mihir patankar
Hi, We want to know how to create EAP-TTLS User Accounts and Accounts specific Certificates in Free-Radius. As of now we have only created PAP Accounts. Mihir V Patankar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius not start after upgrade from 1.1.7 to 2.1.0

2009-01-09 Thread A . L . M . Buxey
Hi, > Hi all, i'm new on this ML. > I've problem after upgrading from v1 to v2 the log section for freeradius v2 has changed a lot since version 1- so if you're using the same config file then it wont work. and using the same config file is VERY BAD what you need to do is backup your V1 config,

freeradius not start after upgrade from 1.1.7 to 2.1.0

2009-01-09 Thread Fabio
Hi all, i'm new on this ML. I've problem after upgrading from v1 to v2 -- # /etc/init.d/freeradius start * Starting FreeRADIUS daemon freeradius radiusd: Error: No log destination specified. -- In radiusd.conf the parameter of log are right with all permess: -- prefix =