problem with checking dhcp-packet type

2009-07-06 Thread Alexander Kubatkin
Hello. Freeradius 2.1.6 Below of the message translated and not translated code of dhcp-packet from client soho-router TrendNet 631BRP. As i can see, the main problem is a wrong order (for freeradius rules) of dhcp options and that's why such packet did not recognized and did not accepted. When

David Suarez De Lis/UN24956/OPERACION Y MANTENIMIENTO /TSM está ausente de la oficina.

2009-07-06 Thread david . suarezdelis
Estaré ausente de la oficina desde el 06/07/2009 y no volveré hasta el 22/07/2009. Responderé a su mensaje cuando regrese. Si tiene alguna emergencia, puede contactar con Jose Manuel Gomez Perez (jmgo...@telefonica.es) o Juan Orea Hernandez (juan.oreahernan...@telefonica.es). __

Re: Syslog and FreeRADIUS

2009-07-06 Thread Alan DeKok
Jonathan Gazeley wrote: > For a start I want to syslog the stuff that usually goes into radius.log > - so the messages when the server starts (which are already being > syslogged successfully) and the summary line (Auth: Login OK) printed > after an authentication (which are currently not being sen

Re: Cisco ignores Framed-IP-Address from freeradius

2009-07-06 Thread Ivan Kalik
> I would like my CISCO router to assign static IP address to remote VPN > users thanks to the Freeradius server. > My freeradius server is configured to give static ip address to users. Fine, how about Cisco? > > and the CISCO router gets it ... > > .. but never assign it to remote users, the ci

Re: freeradius active directory integration fails with "no such realm"

2009-07-06 Thread Ivan Kalik
> One thing stands out though in the output of freeradius -X (only after > changing the order of suffix and ntdomain in sites-available/default and > radiusd.conf: > ++[mschap] returns noop > rlm_realm: Looking up realm "IPSO0" for User-Name = "IPSO0\andrei.staicu" > rlm_realm: No such realm "IPSO0

Re: set absolute lifetimes

2009-07-06 Thread Damjan
> > Use Expiration attribute. > > And where? radcheck? What should I check? If Expiration is... > what is CurrentTime as Value in SQL? it's a check item, FreeRadius will use it to allow or deny access and to set Session-Timeout if needed. -- damjan | дамјан This is my jabber ID --> dam

Re: freeradius active directory integration fails with "no such realm"

2009-07-06 Thread A . L . M . Buxey
Hi, > > One thing stands out though in the output of freeradius -X (only after > changing the order of suffix and ntdomain in sites-available/default and > radiusd.conf: > ++[mschap] returns noop ensure that preprocess module is called first and then ensure that with_ntdomain_hack is set to o

freeradius active directory integration fails with "no such realm"

2009-07-06 Thread Andrei-Florian Staicu
Hello all, I tried to configure freeradius 2.0.4 on debian 5.0.2 (after recompiling with openssl support, as instructed in the debian readme) for authenticating wireless connections with wpa2-enterprise, using active directory user/password (windows xp as clients, d-link dwl 2200ap as ap's). I

Re: Syslog and FreeRADIUS

2009-07-06 Thread A . L . M . Buxey
Hi, > The reason for wanting to send everything to a log host on the network > is that the new generation of radius servers we are preparing are all > virtualised and only have a few GB of disk - so no room for logs. there are so many ways of having proper disk access via a virtualised host t

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
Hi Ted, We are using VMWare ESXi on our hypervisors. There's no need to run a host OS and it's easy to set up. We haven't encountered any problems to speak of. The guest OS that the radius servers run is CentOS. Cheers, Jonathan On 07/06/2009 05:16 PM, Ted Behling wrote: Jonathan, I'm actu

RE: Syslog and FreeRADIUS

2009-07-06 Thread Ted Behling
Jonathan, I'm actually planning to roll out RADIUS on a virtualization platform too, probably Xen. Could you share what VM platform you're using? Thanks! Ted From: freeradius-users-bounces+ted.behling=htc.hargray@lists.freeradius.or g [mailto:freeradius-u

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
On 07/06/2009 05:02 PM, a.l.m.bu...@lboro.ac.uk wrote: Ultimately what I'm after is the ability to send detail logs to syslog rather than have them written to a file. Perhaps I've been asking the wrong questions so far, or in the wrong way :) whoa. thats completely different to what th

Re: Syslog and FreeRADIUS

2009-07-06 Thread A . L . M . Buxey
Hi, >>The "log" section is global. See raddb/sites-available/README for a >> definitive list of which sections can appear inside of a "server" section. >> > OK, thanks. If the "log" section is global, should I simply be able to > insert the word "log" into my virtual servers? Doing so c

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
On 07/06/2009 04:35 PM, Alan DeKok wrote: Jonathan Gazeley wrote: However, all of my radius magic happens inside virtual servers, which live in sites-available. I haven't been able to get any syslog packets sent from within these virtual servers. The "log" section is global. See

Re: Cisco ignores Framed-IP-Address from freeradius

2009-07-06 Thread up
On Mon, 6 Jul 2009, Gilloteau Frederic wrote: Hello, I use freeradius 2.1.1-7 and a CISCO router (IOS 12.4(6)T9) to provide VPN connections. and the CISCO router gets it ... .. but never assign it to remote users, the cisco router assigns an IP address from its local pool. The interesting l

Re: Syslog and FreeRADIUS

2009-07-06 Thread Alan DeKok
Jonathan Gazeley wrote: > However, all of my radius magic happens inside virtual servers, which > live in sites-available. I haven't been able to get any syslog packets > sent from within these virtual servers. The "log" section is global. See raddb/sites-available/README for a definitive list

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
Further to my previous query I've got global server messages being syslogged to my log hosts. However, all of my radius magic happens inside virtual servers, which live in sites-available. I haven't been able to get any syslog packets sent from within these virtual servers. I've tried creati

Cisco ignores Framed-IP-Address from freeradius

2009-07-06 Thread Gilloteau Frederic
Hello, I use freeradius 2.1.1-7 and a CISCO router (IOS 12.4(6)T9) to provide VPN connections. I would like my CISCO router to assign static IP address to remote VPN users thanks to the Freeradius server. My freeradius server is configured to give static ip address to users. I can check it with

Re: unable to run radtest

2009-07-06 Thread ramesh p
On Sat, Jul 4, 2009 at 10:41 PM, Alan DeKok wrote: > ramesh p wrote: > > I tried to run the following: > > > > r...@parsa-laptop:/etc/freeradius# radtest sqltest testpwd localhost > > 1812 testing123 > > radclient: socket: cannot initialize udpfromto: Function not implemented. > > You've configu

Re: Acct Input and Output gigaword

2009-07-06 Thread Johan Meiring
Eric wrote: any suggestion? Maybe this? http://bugs.gentoo.org/attachment.cgi?id=102981 Can anyone comment on the quality of this patch? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/user