Re: debug log and syslog

Hello, I re-open that old (05.09.2008) thread ... I still really need to log radiusd in order to debug a timeout problem in our eduroam infrastructure. the problem is that radiusd is in production and runing it with -X is too verbious I want to log though syslog or direct log files some of the

Re: debug log and syslog

hi, why not use the raddebug functionality so you can debug the live server when you want alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1.1.7 with CHAP and Mysql

Good day,I inherited a system running two Freeradius 1.1.7 servers with CHAP and Mysql. They run seemingly fine, but I am trying to add a third (and a fourth eventually, planning to use the fourth as a testbed for a newer Freeradius version). So I installed Mysql and Freeradius 1.1.7. The

Re: debug log and syslog

a.l.m.bu...@lboro.ac.uk a écrit : hi, why not use the raddebug functionality so you can debug the live server when you want alan good advice, don't know that tools but it seems interesting however I'am not sure it is available in my version ? freeradius-2.0.3-3.el5 how can I check, where

Re: debug log and syslog

Hi, good advice, don't know that tools but it seems interesting however I'am not sure it is available in my version ? freeradius-2.0.3-3.el5 how can I check, where to find a doc ? no. not available - you need to run 2.1.4 for these new features alan - List info/subscribe/unsubscribe? See

Re: [Wimax TTLS with Alcatel - Lucent ASN GW]

Thanks for the hint, it works well now. I've got another question for my setup to work. I've notice using Wireshark that Freeradius will break the TLV Attribut into two attributes parts. For sample when I configure this in users file #ATTRIBUTE WiMAX-Packet-Flow-Descriptor

Re: debug log and syslog

Hello, I would use radmin (available from 2.1.3) www1# radmin radmin 2.1.5 - FreeRADIUS Server administration tool. Copyright (C) 2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute

Re: [Wimax TTLS with Alcatel - Lucent ASN GW]

Thomas Fagart wrote: I've notice using Wireshark that Freeradius will break the TLV Attribut into two attributes parts. This is likely because you are listing the attributes out of order. See dictionary.wimax, and ensure that the attributes are listed in numerical order. I've read the

Chap auhtentication against LDAP

Hi, Does Freeradius 2.1.5 support chap authentication against ldap? If i try it here is messages what i get: Found Auth-Type = CHAP +- entering group CHAP {...} rlm_ldap: Attribute User-Password is required for authentication. Cannot use CHAP-Password. ++[ldap] returns invalid Failed to

Re: user-Password required for ldap radius

Basant Agarwal wrote: Hello, I am trying to authenticate wifi users for wireless network ... for this i am using freeradius with ldap... When we run radtest on localhost, it is able to get authorised and authenticated .. it works fine but when i try from laptop(windows ) then it rejects

Re: Chap auhtentication against LDAP

Ville Leinonen wrote: Does Freeradius 2.1.5 support chap authentication against ldap? No RADIUS server supports this. It's impossible. Instead, have FreeRADIUS pull the clear-text password from LDAP. FreeRADIUS can then do CHAP. If you don't have a clear-text password in LDAP, it's

Limit user by Time and Bandwidth

Please, I just install it with Freeradius and SQL. How can I limit user by time of the day? And how do I limit user to maximum bandwidth? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: problem matching realms - for local auth not proxy

Fair enough Alan. Reprimand warranted and accepted. We removed proxy settings but naturally need this to match realms in proxy.conf which solved our problem Take your point on controlled iterative changes to default settings in radiusd.conf and not butchering! Just getting familiar with changes

Re: problem matching realms - for local auth not proxy

Seamus Bridgeman wrote: We have a need to use dbm file given our volumes and migration from current dbm based Radius. In 2.x, the users file is put into an internal hash. So it's just as fast (if not faster) than DBM files. I've tested it reading 10's of 1000's of entries in the users

problem with rlm_dbm_parser and DEFAULT Realms

Using freeradius2.1.3 and rlm_dbm module Having a problem with rlm_dbm_parser to create dbm file. Testing with 3 DEFAULT Realm records and two username/password. Seems to be overwriting DEFAULT Realm as only last one exists. rlm_dbm_parser reports all records read and no errors but rlm_dbm_cat

Re: problem with rlm_dbm_parser and DEFAULT Realms

Seamus Bridgeman wrote: Using freeradius2.1.3 and rlm_dbm module Why? There's no need to use the DBM module. See recent messages on this list. Having a problem with rlm_dbm_parser to create dbm file. Testing with 3 DEFAULT Realm records and two username/password. Seems to be overwriting

Re: Windows XP hangs forever during PEAP auth on freeradius withwinbind/AD backend

Let's not. Updated howto is on: http://deployingradius.com/documents/configuration/active_directory.html Thanks for the updated howto. I followed and it and can successfully complete every step except the last, (e.g. the one where I must use a windows client to send an MS-CHAP

HTTP digest authentication (patch on bugs.freeradius.org)

I posted a message yesterday asking about the patch for HTTP digest authentication (RFC 5090). I subsequently found a link to a patch for 4590 (an older version of 5090) listed on the RFC compliance page on the wiki. However, the link points to a bug entry on bugs.freeradius.org, which is

Help with LDAP groupOfNames?

Hi, I've googled this to no avail (have been working on it for about 4 hours now). I'm running FreeRADIUS 1.1.0 (SuSE package) and OpenLDAP 2.3.19. I have an access point that will do captive portal, but only via RADIUS, not via LDAP natively. I already have an LDAP server running, so I just