Re: Radclient & PHP

2009-04-01 Thread Patric
AHMED KHIDR wrote: Hii All , Please Any one have an idea how to make a PHP code to run Radclient in order to disconnect users , Thanks $Command = 'echo -e "User-Name=\"'.$UserName.'\", Framed-IP-Address = \"'.$FramedIP.'\", NAS-IP-Address = \"'.$NASIP.'\"" | radclient -n 1 -r 3 -x '.$Ra

RE: Seg Fault in 2.0.3

2009-04-01 Thread Garber, Neal
> Upgrade. > That's what I was hoping you would say. Thanks Alan. > > Should I run FR under gdb to get more information > > about the seg fault? > > You could, but unless you're going to debug the source code yourself, > I wouldn't suggest it. I would, but there's no need if upgrading to

Re: Radclient & PHP

2009-04-01 Thread AHMED KHIDR
Thanks , I tried it but didn't work , I found another method , Here is the code , &1', 'r'); $read = fread($handle, 2096); echo $read; pclose($handle); ?> Don't forget to chmod the /usr/local/etc/raddb/dictionary to be 644 Regards On Thu, Apr 2, 2009 at 3:14 AM, Paul Bartell wrote: > try >

Re: Radclient & PHP

2009-04-01 Thread Paul Bartell
try exec() or shell_exec() 2009/4/1 AHMED KHIDR : > Hii All , > > Please Any one have an idea how to make a PHP code to  run Radclient in > order to disconnect users , > > Thanks > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > -- Random quote of the wee

Radclient & PHP

2009-04-01 Thread AHMED KHIDR
Hii All , Please Any one have an idea how to make a PHP code to run Radclient in order to disconnect users , Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: if we add a smartcard!

2009-04-01 Thread new conf
or private_key_file=... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

if we add a smartcard!

2009-04-01 Thread new conf
Hi everybody and experts in freeradius; :) I'm a new user of the server.. I succeeded to connect a client (supplicant) over wifi to the radius server using eap method.. now, i have to secure the server private key in a smart card.. have you an idea what can I add in eap.conf and in this attribute:

Re: Seg Fault in 2.0.3

2009-04-01 Thread Alan DeKok
Garber, Neal wrote: > I have a FR 2.0.3 server running under FreeBSD 6.3 which intermittently > exits with a segmentation fault. Upgrade. > I tried searching the list for known > seg fault issues with 2.0.3 and only found one which sounded like it > only happens when running under gdb. Do you

Re: SQL xlat not working

2009-04-01 Thread Alan DeKok
Eric Geier wrote: > But even without using a raw attribute, the SQL xlat rule doesn't work, such > as: > > client 192.168.0.1/32 { > secret = "%{sql:SELECT secret FROM APs WHERE NAS-Identifier='blah'" That doesn't work. Not only that, nothing in the documentation leads you to believe th

Re: problem matching realms - for local auth not proxy

2009-04-01 Thread Alan DeKok
Seamus Bridgeman wrote: > Using freeradius2.1.3 for seperate Auth and Acct servers in DSL/PPPoE > n/w. Using CHAP auth only and lookup via dbm file with users.txt fallback. > Can successfully authenticate/authorise against specific user profiles > in users dbm/txt but problems when trying to match

RE: SQL xlat not working

2009-04-01 Thread Eric Geier
> >I've googled for it. Plus someone here had mentioned "rlm_raw and use > it > >with a SQL xlat rule". I think I'm doing that, but it's not working. > Please > >let me know what might be holding it up. > > > > Lack of rlm_raw? That doesn't come with the server. But even without using a raw attri

SOLVED: Re: Freeradius-Users Digest, Vol 48, Issue 4

2009-04-01 Thread sankalpk
Hi Ivan, This solved my purpose. Thanks a lot for your quick response. Regards, Sankalp -- Message: 1 Date: Wed, 01 Apr 2009 12:46:05 +0100 From: Subject: Re: Authenticating Restricted Users through LDAP To: "FreeRadius user

Re: freeradius help

2009-04-01 Thread tnt
> rlm_eap: Request found, released from the list > rlm_eap: EAP NAK > rlm_eap: EAP-NAK asked for EAP-Type/peap > rlm_eap: No such EAP type peap > rlm_eap: Failed in EAP select You have done something to eap.conf and disabled peap. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubsc

RE: SQL xlat not working

2009-04-01 Thread tnt
>I've googled for it. Plus someone here had mentioned "rlm_raw and use it >with a SQL xlat rule". I think I'm doing that, but it's not working. Please >let me know what might be holding it up. > Lack of rlm_raw? That doesn't come with the server. >> You can load clients from nas table. See read_c

freeradius help

2009-04-01 Thread Basant Agarwal
Hello , I am using Freeradius-1.1.7 with ldap , i am being able to authenticate users when i run radtest , those who are in my ldap directory, but i am unable to authenticate the same authenticate users when i try from the laptop(wifi ) . What should i do .. here the debug mode when i try from

Re: Is WLAN IEEE802.1x EAP-TLS authentication with ESSID selectionpossible?

2009-04-01 Thread Ulf Leichsenring
t...@kalik.net schrieb: > And what VSA would it be? If you can find that attribute in the > dictionaries - it is possible. If you can't - you can add it yourself > to raddb/dictionary. It would be better to get the dictionary from > Siemens and post it to this list so it can be included in freerad

Re: Is WLAN IEEE802.1x EAP-TLS authentication with ESSID selection possible?

2009-04-01 Thread Ulf Leichsenring
Michael Schwartzkopff schrieb: > 1) Upgrade to an actual version of FR. 2.1.4 should do. > > 2) Edit your dictionary so that your FR understands the Siemens vendor spec > attributes. > > 3) create a unlang (only FR version 2!) config to also check for the new > essid > attribute and according

RE: SQL xlat not working

2009-04-01 Thread Eric Geier
> >I can't get SQL xlat to work in the Clients file. I'm trying to do a > DB > >query for the Shared Secret. > > > > And where did you find that it should work? I've googled for it. Plus someone here had mentioned "rlm_raw and use it with a SQL xlat rule". I think I'm doing that, but it's not wor

problem matching realms - for local auth not proxy

2009-04-01 Thread Seamus Bridgeman
Hi Using freeradius2.1.3 for seperate Auth and Acct servers in DSL/PPPoE n/w. Using CHAP auth only and lookup via dbm file with users.txt fallback. Can successfully authenticate/authorise against specific user profiles in users dbm/txt but problems when trying to match realms. Have users dbm/txt f

Re: rlm_python example?

2009-04-01 Thread Mike O'Connor
Hi Hristo Could you supply a quick example ? Its always good to get working example after a problem is resolved (even if the person is resolved by the questioner) Mike Hristo Trendev wrote: > The examples in src/modules/rlm_python gave me some hints and I > figured it out. Thanks anyway. > > O

Re: Is WLAN IEEE802.1x EAP-TLS authentication with ESSID selectionpossible?

2009-04-01 Thread tnt
>I know, the Siemens controller is able to send the ESSID the device is >trying to connect inside the RADIUS request as vendor specific attribute. > And what VSA would it be? If you can find that attribute in the dictionaries - it is possible. If you can't - you can add it yourself to raddb/dicti

Re: Is WLAN IEEE802.1x EAP-TLS authentication with ESSID selection possible?

2009-04-01 Thread Michael Schwartzkopff
Am Mittwoch, 1. April 2009 13:43:30 schrieb Ulf Leichsenring: > Hi FreeRADIUS user community > > I'm in search for some ideas for the following situation: > > Given are several WLANS controlled by a Siemens Hipath C2400 WLAN > Controller with Siemens APs. The controller provides different WLANs > i

Re: Authenticating Restricted Users through LDAP

2009-04-01 Thread tnt
>I have a setup of Freeradius 1.1.4 running with openldap 2.2.13. The >radius server authenticates clients based on Username and Password that >clients provide through a web page. This is working fine. Now I want >that restricted users in LDAP can be authenticated, but I cannot make a >separated OU

Is WLAN IEEE802.1x EAP-TLS authentication with ESSID selection possible?

2009-04-01 Thread Ulf Leichsenring
Hi FreeRADIUS user community I'm in search for some ideas for the following situation: Given are several WLANS controlled by a Siemens Hipath C2400 WLAN Controller with Siemens APs. The controller provides different WLANs identified by different ESSIDs. All WLAN Clients use IEEE802.1x authenticat

Authenticating Restricted Users through LDAP

2009-04-01 Thread sankalpk
Hi All, I have a setup of Freeradius 1.1.4 running with openldap 2.2.13. The radius server authenticates clients based on Username and Password that clients provide through a web page. This is working fine. Now I want that restricted users in LDAP can be authenticated, but I cannot make a sep

Re: vlan priority query

2009-04-01 Thread tnt
>following is my configuration > >Tunnel-Type = "VLAN", >Tunnel-Medium-Type = "IEEE-802", >Tunnel-Private-Group-Id = "32", >Reply-Message = "Hello, %u" > >here for vlan id tag is Tunnel-Private-Group-Id. > >but i dont know the standard attribute for vlan priority. >

Re: vlan priority query

2009-04-01 Thread Michael Schwartzkopff
Am Mittwoch, 1. April 2009 12:25:13 schrieb Mitul Modi: > hi , > > > following is my configuration > > Tunnel-Type = "VLAN", > Tunnel-Medium-Type = "IEEE-802", > Tunnel-Private-Group-Id = "32", > Reply-Message = "Hello, %u" > > here for vlan id tag is Tunnel-Private-

Re: vlan priority query

2009-04-01 Thread Mitul Modi
hi , following is my configuration Tunnel-Type = "VLAN", Tunnel-Medium-Type = "IEEE-802", Tunnel-Private-Group-Id = "32", Reply-Message = "Hello, %u" here for vlan id tag is Tunnel-Private-Group-Id. but i dont know the standard attribute for vlan priority. than

Re: vlan priority query

2009-04-01 Thread tnt
>Sorry for the confusion. my question was how to configure it in freeradius >server? > Just like any other attribute. You have plenty of examples how to send attributes in the reply in users file, sql howto etc. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.f

Re: vlan priority query

2009-04-01 Thread Mitul Modi
hi Ivan , Sorry for the confusion. my question was how to configure it in freeradius server? Thanks, Mitul Modi On Wed, Apr 1, 2009 at 2:32 PM, wrote: > >How we can configure radius server to send vlan priority in access accept > >message? > > > > http://tools.ietf.org/html/rfc4675 > > Ivan K

Re: vlan priority query

2009-04-01 Thread tnt
>How we can configure radius server to send vlan priority in access accept >message? > http://tools.ietf.org/html/rfc4675 Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Duplicate Acct-Status packets

2009-04-01 Thread tnt
>Ivan, its interesting. Our NAS is linux pppoe-server with pppd last >version. Pppd retransmits Acct-Status in 10 seconds. Is it possible to >increase freeradius keep of tracking time, you talking about, from 5 to >15 seconds? Where is this place in configs/sources? > See cleanup_delay in radiusd.

Re: SQL xlat not working

2009-04-01 Thread tnt
>I can't get SQL xlat to work in the Clients file. I'm trying to do a DB >query for the Shared Secret. > And where did you find that it should work? >I'm getting invalid Message-Authenticator (Shared secret is incorrect) >errors. You should fix client secret to match the server not other way rou

vlan priority query

2009-04-01 Thread Mitul Modi
hi, How we can configure radius server to send vlan priority in access accept message? Thanks, Mitul Modi - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: MAC auth won't work with SQL

2009-04-01 Thread tnt
>Great, works now. Thanks! > >Is there a way to load the Database Value field with multiple MAC addresses, >and freeradius check against themso I can specify multiple devices the >user can use? > http://wiki.freeradius.org/SQL_Huntgroup_HOWTO Ivan Kalik Kalik Informatika ISP - List info/subs