FreeRADIUS + Alvarion 4Motion

2009-01-16 Thread Kristoffer Milligan
Hello again List My battle to make FreeRADIUS work with the Alvarion 4Motion system continues. I have been in contact with one of their engineers, and the only thing he saw that seemed invalid was a couple of missing attributes in the Access Accept response. Please look at the following url:

Re: Inner identity in accounting logs

2009-01-16 Thread Alexander Clouter
Hi, * Jonathan Gazeley jonathan.gaze...@bristol.ac.uk [Thu, 15 Jan 2009 15:31:19 +]: I have an existing FreeRadius setup for an 802.1x wireless network. Currently the accounting is done to a MySQL database. Presently, the username appearing in these records is the outer identity. I

Static Proxy Accounting

2009-01-16 Thread Francesco Toro XB
Hi All, I'm evaluating FreeRadius Server for my Company. I'm very interested in a specific functionality, as explained in the mail subject. I guess if it's possible to set FreeRadius to statically forward accounting request ( only Start, Stop and Interim ) still acting as Master Server, i.e.

Re: FreeRADIUS + Alvarion 4Motion

2009-01-16 Thread tnt
Change use_tunneled_reply to yes in ttls section of eap.conf. Ivan Kalik Kalik Informatika ISP Dana 16/1/2009, Kristoffer Milligan kristof...@nextnet.no piše: Hello again List My battle to make FreeRADIUS work with the Alvarion 4Motion system continues. I have been in contact with one of

Re: Static Proxy Accounting

2009-01-16 Thread tnt
Several options are explained in raddb/sites-available. Ivan Kalik Kalik Informatika ISP Dana 16/1/2009, Francesco Toro XB francesco.xb.t...@ericsson.com piše: Hi All, I'm evaluating FreeRadius Server for my Company. I'm very interested in a specific functionality, as explained in the mail

Freeradius 2.0.5 Split Accountancy Logs

2009-01-16 Thread Clare Scally
Hi, I'm looking for help with the following. The brief is to setup freeradius 2.0.5 on freebsd 6.2. The requirements are for accounting and authentication for 1 monitoring user via a .dbm file, as all other users are authenticated on a different server. We are required to log accounting

Re: FreeRADIUS + Alvarion 4Motion

2009-01-16 Thread Kristoffer Milligan
It's set to yes I'm afraid: ttls { default_eap_type = md5 copy_request_to_tunnel = yes use_tunneled_reply = yes virtual_server = inner-tunnel } On Fri, 2009-01-16 at 12:02 +0100, t...@kalik.net wrote: Change use_tunneled_reply to yes in ttls section of eap.conf. Ivan Kalik Kalik

Re: FreeRADIUS + Alvarion 4Motion

2009-01-16 Thread tnt
I see. And WiMAX attributes have been copied. I don't know much about WiMAX bre you sure that these are not contained in MPPE outer reply keys? They are different to ones in inner-tunnel. What problem is caused by the lack of these attributes in the reply? Ivan Kalik Kalik Informatika ISP Dana

Re: Freeradius 2.0.5 Split Accountancy Logs

2009-01-16 Thread tnt
We are required to log accounting data in a flat file, rather than a database, and this data needs to be logged according to Realm. I have setup, as per the Acct_Type documentation, but the logging is failing You haven't included the detail file configuration. with the 'No response' from

CHAP password using perl

2009-01-16 Thread Saeed Akhtar
Hi all, I wrote a code in perl to calculate remaining time using my own database. for authentication I used User-Password attribute. but then I tested it with real NAS server and I realized that I haven't catered CHAP password. Now I want to ask that if there any module which convert CHAP

Re: FreeRADIUS + Alvarion 4Motion

2009-01-16 Thread Kristoffer Milligan
That's a bit of my problem as well .. I'm not sure what goes where :) Regarding the problem, that's the second part that's confusing. The AAA says everything is OK. The ASN seemingly has what it needs, but the CPE doesn't connect to the network. I had an Alvarion engineer look at the FreeRADIUS

authentication without certification

2009-01-16 Thread Hegedus Gabor
Hi, I have a problem, (config: server: FreeRadius 2.1.3, ubuntu 8.10 nas: cisco AP client: win xp) The authentication with TLS works fine if i install the certificate on the client.(just for test) I cannot install the client certificate on all client system(some reason -no admin access-) =

Freeradius + MySQL problem

2009-01-16 Thread obaid ghaznawi
hi, first of all, i thank all people who are giving thier time to help. before i subscribe here and post my email, i am searching around in internet since a week and trying my best to solve it, i have learned many things,but there is one problem i cannot get it solved. i am trying to make

Re: Freeradius + MySQL problem

2009-01-16 Thread Leigh Martell
Post the entire debug from start to finish and as well as some tests. The first whack of debug tells you how freeradius is parsing your config. Once you have that done we should be able to figure where the issue lie. Take Care, Leigh On Fri, Jan 16, 2009 at 8:49 AM, obaid ghaznawi

Re: Freeradius + MySQL problem

2009-01-16 Thread Luciano Afranllie
Just a stupid question. Is your freeradius compiled with mysql support? Do you have rlm_sql_mysql in your module dir? Regards Luciano On Fri, Jan 16, 2009 at 11:49 AM, obaid ghaznawi ona...@gmail.com wrote: hi, first of all, i thank all people who are giving thier time to help. before i

Re: CHAP password using perl

2009-01-16 Thread tnt
I wrote a code in perl to calculate remaining time using my own database. for authentication I used User-Password attribute. but then I tested it with real NAS server and I realized that I haven't catered CHAP password. Now I want to ask that if there any module which convert CHAP password to

Re: FreeRADIUS + Alvarion 4Motion

2009-01-16 Thread tnt
Regarding the problem, that's the second part that's confusing. The AAA says everything is OK. The ASN seemingly has what it needs, but the CPE doesn't connect to the network. I had an Alvarion engineer look at the FreeRADIUS log, and the only thing the could point out as mysterious, was the

Re: Freeradius + MySQL problem

2009-01-16 Thread Leigh Martell
I would assume that it is, otherwise it would not start with the INCLUDE uncommented and sql set in authorize. On Fri, Jan 16, 2009 at 9:18 AM, Luciano Afranllie listas.luaf...@gmail.com wrote: Just a stupid question. Is your freeradius compiled with mysql support? Do you have

Re: No EAP-TLS with XP SP3 ?

2009-01-16 Thread Alexandros Gougousoudis
Hi Alan, a.l.m.bu...@lboro.ac.uk schrieb: if you had a working 1.1.0 system then you could upgrade quickly to 1.1.7 - same config etc etc - and then spend 'offline-time' getting I thought it's working, but it isn't. I upgraded to 1.1.6 from 1.1.0, same setup, but XP SP3 doesn't authenticate

Re: Freeradius + MySQL problem

2009-01-16 Thread tnt
Yes. Post the whole debug including startup. Something is not right here. authorize is not in radiusd.conf in 2.x. Ivan Kalik Kalik Informatika ISP Dana 16/1/2009, Leigh Martell leigh.mart...@gmail.com piše: Post the entire debug from start to finish and as well as some tests. The first whack

Re: authentication without certification

2009-01-16 Thread tnt
The authentication with TLS works fine if i install the certificate on the client.(just for test) I cannot install the client certificate on all client system(some reason -no admin access-) = i want use eap-ttls or peap for authentication cos it doesn't use certificate, no need install. how

Bug in checkrad.pl

2009-01-16 Thread Rick Macdougall
Hi, I believe the redback_telnet in checkrad.pl has a small bug. Original code starting at line 1338 #Ask the question @lines = $t-cmd(String = show subscribers active $us...@$context); if ($lines[0] =~ /subscriber $us...@$context/ ) { Should be #Ask the question @lines =

Re: Static Proxy Accounting

2009-01-16 Thread Alan DeKok
Francesco Toro XB wrote: I guess if it's possible to set FreeRadius to statically forward accounting request ( only Start, Stop and Interim ) still acting as Master Server, Please don't use terms like statically forward. i.e. without waiting for the Home Server respose before sending the

Re: FreeRADIUS + Alvarion 4Motion

2009-01-16 Thread Alan DeKok
Kristoffer Milligan wrote: My battle to make FreeRADIUS work with the Alvarion 4Motion system continues. I have been in contact with one of their engineers, and the only thing he saw that seemed invalid was a couple of missing attributes in the Access Accept response. Please look at the

Re: problem with ip_pools -- revisited

2009-01-16 Thread Marco C. Coelho
I've moved redundant to be inside of post-auth and restarted radiusd. Any ideas on how to test that it's working without waiting for a max usage night? It now looks like: post-auth { # Get an address from the IP Pool. main_pool main_pool2 # sql redundant { # added by mcc per

service deactivation with radclient

2009-01-16 Thread janardhan madabattula
Hi, I tried to deactivate or disable the active service/attribute on a active subscriber, but I failed to do it. I used differnt options to remove the active service like setting the null string etc. Can anyone tell me how to deactive a service on a active sub. Here is the example, I am doing

Re: service deactivation with radclient

2009-01-16 Thread Bjørn Mork
janardhan madabattula janardhan...@gmail.com writes: I tried to deactivate or disable the active service/attribute on a active subscriber, but I failed to do it. I used differnt options to remove the active service like setting the null string etc. Can anyone tell me how to deactive a

Re: problem with ip_pools -- revisited

2009-01-16 Thread tnt
radclient. Ivan Kalik Kalik Informatika ISP Dana 16/1/2009, Marco C. Coelho mailli...@argontech.net piše: I've moved redundant to be inside of post-auth and restarted radiusd. Any ideas on how to test that it's working without waiting for a max usage night? It now looks like: post-auth