Re: Simultaneous-Use for roaming wireless user

2009-02-13 Thread Alexandre Chapellon
Well if you know a way to check if the session is really up or no on your NAS i might not be hard to write a checkrad script to enable stale session deletion. Le 12.02.2009 18:33, ST Wong (ITSC) a écrit : Hi all, We enabled Simultaneous-Use checking with checking against accouting data

Re: Grouping different kinds of clients and returning different attributes

2009-02-13 Thread Alan DeKok
David Bailey wrote: The problem is that although I have some 250 client definitions in clients.conf, I'd rather avoid using 250 definitions in users. I'm trying to find a way to categorize the RADIUS clients into Cisco, HP, etc. You could use groups. See man rlm_passwd for examples. You

Re: Proxy with two interfaces configuration

2009-02-13 Thread Alan DeKok
D'AVELLA STEFANO wrote: All following ipv6 addresses are to be read with global scope (but as I said, if they were ipv4 it would be the same I think) Server address : 2001::400 Proxy (interface to the server) 2001::300 Proxy (interface to the client) 2000::300 Client 2000:200 Now when I

Re: Regular expressions doesn't work in /etc/raddb/hints

2009-02-13 Thread Victor Shkamerda
On 2/12/2009 at 9:29 PM, in message 499478ac.6040...@deployingradius.com, Alan DeKok al...@deployingradius.com wrote: Victor Shkamerda wrote: Hi, We are migrating from other RADIUS software to FreeRADIUS. In order to avoid changing existing users database objects, I'm trying to fix the

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Paul Dealy
On Fri, Feb 13, 2009 at 6:37 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 07:17:17 schrieb Paul Dealy: I have a working radius server (ver 1.1.3). which I am using for 802.1x authentication of wired switch ports. I would like to dynamically assign users

Free Radius server installation

2009-02-13 Thread seyfullah
we are kocaeli university in Turkey. we want to install and configure radius server on solaris 10. where can we find full and detailed installatin and configration manuals( include dependencies). Thank you Seyfullah BAŞKÖYLÜ It Chairman of Kocaeli University Kocaeli University campus

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Michael Schwartzkopff
Am Freitag, 13. Februar 2009 11:00:10 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 6:37 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 07:17:17 schrieb Paul Dealy: I have a working radius server (ver 1.1.3). which I am using for 802.1x authentication of

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Paul Dealy
On Fri, Feb 13, 2009 at 9:12 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:00:10 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 6:37 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 07:17:17 schrieb Paul Dealy: I have a

Using accounting data for quotas

2009-02-13 Thread Jonathan Gazeley
I'm trying to find a way to extract useful data from accounting logs to use towards a quota. I'm a bit stuck and I'm wondering if anyone has tried anything similar with success. Let me explain... My accounting logs are sent to SQL with the inner ID. Periodically, the NAS updates the

FreeRadius client

2009-02-13 Thread Apostolos Pantsiopoulos
Hi, Does the FreeRadius Client 1.1.6 compile under windows? Regards, -- --- Apostolos Pantsiopoulos Kinetix Tele.com R D email: r...@kinetix.gr --- - List info/subscribe/unsubscribe? See

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Michael Schwartzkopff
Am Freitag, 13. Februar 2009 11:54:29 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 9:12 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:00:10 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 6:37 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Paul Dealy
On Fri, Feb 13, 2009 at 10:16 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:54:29 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 9:12 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:00:10 schrieb Paul Dealy: On Fri, Feb

Re: Regular expressions doesn't work in /etc/raddb/hints

2009-02-13 Thread Alan DeKok
Victor Shkamerda wrote: I have just tried revision 17581f3d which supposedly should fixed this bug, but it doesn't work either. When I use exact match operator == it works, but when I use regexp match =~ and add slashes accordingly i.e. /string/ it doesn't match anymore. Don't use

Re: FreeRadius client

2009-02-13 Thread Alan DeKok
Apostolos Pantsiopoulos wrote: Hi, Does the FreeRadius Client 1.1.6 compile under windows? No. As always, patches are welcome. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Free Radius server installation

2009-02-13 Thread Alan DeKok
seyfullah wrote: we are kocaeli university in Turkey. we want to install and configure radius server on solaris 10. where can we find full and detailed installatin and configration manuals( include dependencies). The server comes with documentation. The Wiki also contains instructions

Re: FreeRadius client

2009-02-13 Thread Apostolos Pantsiopoulos
On more question regarding the client library : Can I use the same rc_handle among multiple threads? I want to spawn multiple threads that each one sends acct packets to radius servers and I don't want each thread initializing an rc_handle (reading dictionary files etc.) each time a packet is

Re: FreeRadius client

2009-02-13 Thread Alan DeKok
Apostolos Pantsiopoulos wrote: On more question regarding the client library : Can I use the same rc_handle among multiple threads? I don't think so. Look at the source code to be sure. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Michael Schwartzkopff
Am Freitag, 13. Februar 2009 12:36:09 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 10:16 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:54:29 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 9:12 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Michael Schwartzkopff
Am Freitag, 13. Februar 2009 12:36:09 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 10:16 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:54:29 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 9:12 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Paul Dealy
On Fri, Feb 13, 2009 at 11:22 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 12:36:09 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 10:16 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:54:29 schrieb Paul Dealy: On Fri, Feb

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Michael Schwartzkopff
Am Freitag, 13. Februar 2009 13:39:49 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 11:22 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 12:36:09 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 10:16 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am

Re: Dynamic Vlan Allocation based on LDAP Attribute Value

2009-02-13 Thread Michael Schwartzkopff
Am Freitag, 13. Februar 2009 12:36:09 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 10:16 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am Freitag, 13. Februar 2009 11:54:29 schrieb Paul Dealy: On Fri, Feb 13, 2009 at 9:12 PM, Michael Schwartzkopff mi...@multinet.de wrote: Am

Re: Regular expressions doesn't work in /etc/raddb/hints

2009-02-13 Thread Victor Shkamerda
On 2/13/2009 at 1:46 PM, in message 49955d98.1060...@deployingradius.com, Alan DeKok al...@deployingradius.com wrote: Don't use slashes in the users file, or in the hints file. Thanks, that works. But how do I specify case insensitive match then? With best regards, Victor Shkamerda - List

Re: Regular expressions doesn't work in /etc/raddb/hints

2009-02-13 Thread Alan DeKok
Victor Shkamerda wrote: Thanks, that works. But how do I specify case insensitive match then? You don't. You use unlang for it. The users file has about 1/10 the functionality of unlang. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius with PAM authentication

2009-02-13 Thread Nick Owen
On Wed, Feb 11, 2009 at 10:52 PM, robin abdullah.hoss...@aamra.com.bd wrote: Can anyone help me to configure PAM authentication with freeradius ? can anyone have step by step guide for pam authentication or suggest me the tutorials to follow Any tips and guide on this issue will

Cisco NAS and server side ip pool management

2009-02-13 Thread Sebastian Krieger
Hi, for many hours now I am trying to configure a Cisco router as a NAS to authenticate dialup users against freeradius and provide the ip address dynamically from a server based ip pool. The authentication part works fine and the ip address also gets selected from the pool and sent as

Re: Cisco NAS and server side ip pool management

2009-02-13 Thread Thoralf Freitag
aaa new-model aaa authentication login default local aaa authentication ppp default group radius local aaa accounting network default start-stop group radius aaa authorization network default group radius radius-server host ip of radius auth-port authorization-port acct-port accounting-port

Using Exec-Program-Wait for MOTP (mobile OTP) with MSCHAPv2

2009-02-13 Thread Fabiano
Hello, Does anyone know where I can find some information on how to use the following in freeradius ? I have an external shell script which awaits arguments (username, clear password, and other arguments) and returns an answer for validation. The problem is that I cannot find any lead on how

FreeRADIUS EAP-TLS and SSL certificate chains

2009-02-13 Thread Meyers, Dan
I'm sure I must just be being thick with our FreeRADIUS config, but i've completed failed to find anything online or in the docs explaining *what* i'm doing wrong, so i'm posting here. We've had a FreeRADIUS server set up for some time now, with an SSL certificate directly signed by one of

Migration from TACACS+ to RADIUS

2009-02-13 Thread Nicholas R. Cappelletti
In the recent weeks, I have come across some downfalls to using TACACS+ such as no 802.1x authentication, no WPA integration, and the impossible integration into both Kerberos and LDAP. I hate to sound naive, but like many who need help, I'm new to RADIUS, its configuration, and its

Re: Using Exec-Program-Wait for MOTP (mobile OTP) with MSCHAPv2

2009-02-13 Thread Markus Gaugusch
On Feb 13, Fabiano fabi...@powerpc.ch wrote: Hello, Does anyone know where I can find some information on how to use the following in freeradius ? I have an external shell script which awaits arguments (username, clear password, and other arguments) and returns an answer for validation. The

Re: Migration from TACACS+ to RADIUS

2009-02-13 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nicholas R. Cappelletti wrote: In the recent weeks, I have come across some downfalls to using TACACS+ such as no 802.1x authentication, no WPA integration, and the impossible integration into both Kerberos and LDAP. I can answer some of these

Re: Migration from TACACS+ to RADIUS

2009-02-13 Thread Alan DeKok
Nicholas R. Cappelletti wrote: In the recent weeks, I have come across some downfalls to using TACACS+ such as no 802.1x authentication, no WPA integration, and the impossible integration into both Kerberos and LDAP. I hate to sound naive, but like many who need help, I'm new to RADIUS,

New raddebug command

2009-02-13 Thread Alan DeKok
See git.freeradius.org (stable or master branch) for a new raddebug command. It requires: - raddb/sites-available/control-socket to be enabled, and r/w permission added - radmin to be in the $PATH - the user running raddebug to have permissions to connect to the socket, and to run commands

Re: Using Exec-Program-Wait for MOTP (mobile OTP) with MSCHAPv2

2009-02-13 Thread Alan DeKok
Fabiano wrote: Hello, Does anyone know where I can find some information on how to use the following in freeradius ? I have an external shell script which awaits arguments (username, clear password, and other arguments) and returns an answer for validation. The problem is that I cannot

Re: Freeradius2.1.3 + Fedora9 + PEAP + AD = problem

2009-02-13 Thread Mike Loosbrock
On Feb 12, 2009, at 8:06 PM, Casartello, Thomas wrote: I have exactly the same problem with Fedora 9 and 10 only. It works perfectly fine in Fedora 8 with the exact same configuration. I have spent hours trying to fix this, and could not figure it out. Check the versions of your samba

Re: Freeradius2.1.3 + Fedora9 + PEAP + AD = problem

2009-02-13 Thread Alan DeKok
Mike Loosbrock wrote: Check the versions of your samba packages. I'm running Debian and the exact same FreeRADIUS configuration works with 3.0.24 (stable) but fails with 3.2.5 (testing). The failure is such that the mschap module returns success, but the very last EAP-MSCHAPv2 challenge

FW: wimax.c

2009-02-13 Thread dave anderson
-Original Message- From: dave anderson Sent: February 13, 2009 5:14 PM To: freeradius-users Subject: FW: wimax.c I have the Wimax FreeRadius (2.1.3) working but I am a bit unclear on a few key reply parameters: In the default server I have added update reply{ WiMAX-MSK =

freeradius core dumped with segmentation fault

2009-02-13 Thread bis...@baayu.com.np
Hello all, I have freeradius 1.3 running on freebsd 6.0. Yesterday I did perl upgrade from 5.8.7 to 5.8.9 and I also upgraded the freeradius to 1.7.1 now whenever I try to run freeradius it core dumps with segmentatation fault. Below is the gdb output file. radius# gdb /usr/local/sbin/radiusd

Re: freeradius core dumped with segmentation fault

2009-02-13 Thread Alan DeKok
bis...@baayu.com.np wrote: Hello all, I have freeradius 1.3 running on freebsd 6.0. Yesterday I did perl upgrade from 5.8.7 to 5.8.9 and I also upgraded the freeradius to 1.7.1 now whenever I try to run freeradius it core dumps with segmentatation fault. Below is the gdb output file.