Centralized authentication

Hello everybody, I would like to know if anybody had worked on centralizing authentication on FreeRadius and OpenLDAP for the following technologies: - Nokia IPSO - 3com switches - Cisco Pix I'm looking for any guides, howtos... Thanks - List info/subscribe/unsubscribe? See

Re: Centralized authentication

Howto: put username and cleartext password in users file. Done. Works with every device and every authentication protocol (that uses passwords, not certificates etc.). Ivan Kalik Kalik Informatika ISP Dana 13/1/2009, scouf scouf scouf...@yahoo.fr piše: Hello everybody, I would like to know if

Some SQL radgroupcheck/reply troubles.

Good day! I try to understand some of SQL selects in oracle.conf in Freeradius. I think, I have found incorrect sql selects in radgroupcheck/radgrpoupreply. Let me show it: First of all - typical install freeradius2.1.1 with oracle. I can see this selects in sql.conf for dialup.oracle.conf

Re: No EAP-TLS with XP SP3 ?

Hi, I tried to compile the 1.1.7 OpenSUSE 10.1. But I get the following error at the end: Processing files: freeradius-dialupadmin-1.1.7-0.suse1010 Processing files: freeradius-devel-1.1.7-0.suse1010 Checking for unpackaged file(s): /usr/lib/rpm/check-files /var/tmp/freeradius-1.1.7-build

Re : Centralized authentication

Thanks for your response. But since I'm not familiar with these technologies, I would've liked if anybody has a howto to set up the configuration.. And since I'm using an OpenLDAP server a base for users account, I was wondering should be stored users' password in the LDAP server if clients

Re: Re : Centralized authentication

http://letmegooglethatforyou.com/?q=freeradius+ldap http://letmegooglethatforyou.com/?q=freeradius+openldap On Tue, Jan 13, 2009 at 6:18 AM, scouf scouf scouf...@yahoo.fr wrote: Thanks for your response. But since I'm not familiar with these technologies, I would've liked if anybody has a

Re: Re : Centralized authentication

scouf scouf wrote: Thanks for your response. But since I'm not familiar with these technologies, I would've liked if anybody has a howto to set up the configuration.. And since I'm using an OpenLDAP server a base for users account, I was wondering should be stored users' password in the

RE: eap/tls freeradius openssl

I have radiusd in /usr/local/sbin. John, you mentioned that None of our rpm's ever install in /usr/local so I am assuming this is another artifact of an old install. How would you suggest I go about getting rid of ALL freeradius install artifacts and start a new? Do I need to reinstall my

Re: No EAP-TLS with XP SP3 ?

Hi solved it. Must be a bug in 1.1.7. I used 1.1.6 and all works fine (inkl. XP SP3). cu Alex - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Just need a little help w/sqlippool

Ive been fighting with upgrading my working 1.7 freeradius to 2.1.3 . Ive been using the sqlippool module all this time, and while I think I'm close I just cant figure this out. The database is the original database I used with 1.7 but the configs are all new from the ground up for 2.1.3.I

Re: Just need a little help w/sqlippool

my radgroupreply table; ++---+-++-+--+ | id | GroupName | Attribute | op | Value | prio | ++---+-++-+--+

Re: eap/tls freeradius openssl

Brian Ertel wrote: I have radiusd in /usr/local/sbin. John, you mentioned that None of our rpm's ever install in /usr/local so I am assuming this is another artifact of an old install. How would you suggest I go about getting rid of ALL freeradius install artifacts and start a new? Do I

Re: Re : Centralized authentication

But since I'm not familiar with these technologies, I would've liked if anybody has a howto to set up the configuration... Do you have any reason to believe that default configuration will not work? Server comes already configured to work with most protocols. And since I'm using an OpenLDAP

Re: Just need a little help w/sqlippool

It seems adding the Fall-Through=Yes fixed it.. I never had that in there before, maybe I had it in a users text file somewhere in the old version and it read it from there? You are not using sql.conf from 1.1.7? Try adding Fall-Through = yes to radreply group entries. And give different

Re: eap/tls freeradius openssl

John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? Brian On 1/13/09 10:33 AM, John Dennis jden...@redhat.com wrote:

MYSQL check_error: 1064 received

I get this error on some of my queries but not from all users in the database, just some? I cant find much useful google information on it Here is a query that fails with that error: rad_recv: Access-Request packet from host 127.0.0.1 port 42830, id=69, length=57 User-Name = hheeg

Re: eap/tls freeradius openssl

Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? You can recreate the tree, follow the same steps

Re: eap/tls freeradius openssl

On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else

Re: MYSQL check_error: 1064 received

sqlippool_command: database query error in: 'UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time IS NULL WHERE expiry_time = NOW() - INTERVAL 1 SECOND AND nasipaddress = '127.0.0.1'' Run the query by hand and see what does the database have

Re: eap/tls freeradius openssl

I will clean up /sbin first. I understand this is a fr email list and appreciate the help with the basic OS stuff. I will try to keep this type of stuff of the list in the future. Thanks again, Brian On 1/13/09 11:51 AM, Craig White craigwh...@azapple.com wrote: On Tue, 2009-01-13 at 11:46

Re: eap/tls freeradius openssl

hi, linux admin task: you can also do 'make -n install' and this will show you what and where make is going to put the files (its a test/dummy run) - then you can grep through the output for eg /usr/local and see what files to get rid of. as well as the tools themselves - radiusd, radtest etc,

Re: eap/tls freeradius openssl

Thank you Alan. Brian On 1/13/09 1:01 PM, a.l.m.bu...@lboro.ac.uk a.l.m.bu...@lboro.ac.uk wrote: hi, linux admin task: you can also do 'make -n install' and this will show you what and where make is going to put the files (its a test/dummy run) - then you can grep through the output

Optimum MYSQL settings

Hi all. I promise this is my last question before I flip the switch on this new installation. I was using 1.1.7 and I had a number of problems with sqlippool handing out duplicate IPs, stop records not getting recorded, etc. Only under many requests (20-30) at one time. It was ok with small

Re: eap/tls freeradius openssl

Craig White wrote: On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone.

Re: eap/tls freeradius openssl

On Tue, 2009-01-13 at 13:33 -0500, John Dennis wrote: Craig White wrote: On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that

Compile Error

I cant win today. I cant compile the newest FR. GCC 3.4.6 glibc 2.6.1 gmake[6]: Leaving directory `/root/freeradius-server-2.1.3/src/modules/rlm_counter' Making all in rlm_dbm... gmake[6]: Entering directory `/root/freeradius-server-2.1.3/src/modules/rlm_dbm'

Re: Compile Error

Oops glibc 2.3.6 Dave wrote: I cant win today. I cant compile the newest FR. GCC 3.4.6 glibc 2.6.1 gmake[6]: Leaving directory `/root/freeradius-server-2.1.3/src/modules/rlm_counter' Making all in rlm_dbm... gmake[6]: Entering directory

Is possible create coding?

Hello list! I want to know if is possible create or modified coding in freeradius, for example, make a filter say if the user try connect with some program installed in your laptop dont let connect to net, or if user dont have the last xp pack installed dont let connect? thanks!!!

Re: Is possible create coding?

2009/1/14 Bil Dert gugue...@hotmail.com: Hello list! I want to know if is possible create or modified coding in freeradius, for example, make a filter say if the user try connect with some program installed in your laptop dont let connect to net, or if user dont have the last xp pack

Re: Compile Error

Replying to myself, upgrading glibc allowed it to compile.. left me with a whole bunch of other non FR related problems thou (server been around for a while :) Dave wrote: Oops glibc 2.3.6 Dave wrote: I cant win today. I cant compile the newest FR. GCC 3.4.6 glibc 2.6.1

RE: eap/tls freeradius openssl

John, In the FAQ under the title Install the desired rpm's it reads: The rpm's under /usr/src/redhat/RPMS are the packages you'll want to install. % sudo rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm Under the RPM

Re: eap/tls freeradius openssl

Thanks John, no prob. Brian On 1/13/09 4:28 PM, John Dennis jden...@redhat.com wrote: Brian Ertel wrote: John, In the FAQ under the title Install the desired rpm's it reads: The rpm's under /usr/src/redhat/RPMS are the packages you'll want to install. % sudo rpm -Uhv

RE: eap/tls freeradius openssl

Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm Thanks, Brian -Original Message- From:

Re: Is possible create coding?

EAP-TNC exists. It's experimental. Code is in src/modules/rlm_eap/types/rlm_eap_tnc. Ivan Kalik Kalik Informatika ISP Dana 13/1/2009, Bil Dert gugue...@hotmail.com piše: Hello list! I want to know if is possible create or modified coding in freeradius, for example, make a filter say if the

Re: eap/tls freeradius openssl

Brian Ertel wrote: John, In the FAQ under the title Install the desired rpm's it reads: The rpm's under /usr/src/redhat/RPMS are the packages you'll want to install. % sudo rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm

RE: eap/tls freeradius openssl

On Tue, 2009-01-13 at 16:38 -0500, Brian Ertel wrote: Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm suggestion...make life easy on yourself

Re: eap/tls freeradius openssl

Brian Ertel wrote: Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm Yes, use the filenames rpmbuild generated (it will tell you) -- John Dennis

Re: eap/tls freeradius openssl

Cool, thanks. Brian On 1/13/09 4:58 PM, John Dennis jden...@redhat.com wrote: Brian Ertel wrote: Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm

Re: Optimum MYSQL settings

hi, gosh. its such a wide question (well, the answer can be very open...). there are many many ways to optimise the DB - you can chuck more memory at the server settings - increase the buffers etc. you can add more index keys to the tables... you can change the DB engine - eg InnoDB instead or

802.1X wireless, FR, and accounting...

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi folks, I've deployed FR2 to service 802.1X wireless authentication (Cisco LWAPP infrastructure), and it's working splendidly from the users' perspective. Accounting, however, is acting weirdly, and I have yet to determine why. 'radlast' gives

Bandwidth limit

Dear All,  I have installed Mikrotik Router OS server for PPPoE and I have installed Ubuntu Server 8.10 with Freeradius+My Sql server. I want to create user with bandwith limit in mysql database. Anybody please help me. - List info/subscribe/unsubscribe? See

Re: Bandwidth limit

Check Mikrotik Radius attributes. Gunza wrote: Dear All, I have installed Mikrotik Router OS server for PPPoE and I have installed Ubuntu Server 8.10 with Freeradius+My Sql server. I want to create user with bandwith limit in mysql database. Anybody please help me.