Re: rlm_sqlcounter: Some strangenesses.

Hi. I wrote wrong period of reseting (never). I played with 'monthly'. It was ok when no-reset counter was used. Looking at source of rlm_sqlcounter I understood a.) this module is designed for time counters; b.) the returned value is result of more complex calculation when counter has period o

Re: Proxy-To-Realm and Users File

Mike O'Connor wrote: > > Using freeradius 2.1.4 the following works if I user the hints file. > > DEFAULT Called-Station-Id == "splns357" >User-Name := "%{user-na...@mb.webshield.net.au" > > The user is proxied to the correct server and the user is correctly set. >

Re: Proxy-To-Realm and Users File

Alexander Clouter wrote: > Mike O'Connor wrote: > >> Using freeradius 2.1.4 the following works if I user the hints file. >> >> DEFAULT Called-Station-Id == "splns357" >>User-Name := "%{user-na...@mb.webshield.net.au" >> >> The user is proxied to the correct server

Re: deny access with huntgroups

Finally. I got it working with the files (users and huntgroups), but i need this to work in SQL instead and seem to run into the same problem. All NAS-IP:s are accepted. Why?? I am so close but not quite there. Please help! Followed a guide from jdennis that i googled up, but something is acceptin

Re: Rewrite domain

Hi, I have a wifi with wpa2, with peap and mschap2, with db users with active directory, and all is working fine if my users log in with: WINDOWSDOMAIN\userlogin as username, but if the users auth as userlogin, the server reply: Auth: Login incorrect (rlm_mschap: No such user (0xc064)): The

Re: deny access with huntgroups

> > Finally. I got it working with the files (users and huntgroups), but i > need > this to work in SQL instead and seem to run into the same problem. All > NAS-IP:s are accepted. Why?? Because if sql group doesn't match it is ignored - user is not rejected. > I am so close but not quite there. P

Re: Rewrite domain

> I have a wifi with wpa2, with peap and mschap2, with db users with > active directory, and all is working fine if my users log in with: > > WINDOWSDOMAIN\userlogin > > as username, but if the users auth as userlogin, the server reply: > Auth: Login incorrect (rlm_mschap: No such user (0xc064)

Re: Rewrite domain

That is my ntlm_auth: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-DOMAIN} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" What i can change to fix that? On Thu, Aug 27, 2009 at 12:16, Ivan Kalik wrote: >> I hav

Re: Rewrite domain

Hi, > That is my ntlm_auth: > ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key > --domain=%{mschap:NT-DOMAIN} --username=%{mschap:User-Name} > --challenge=%{mschap:Challenge:-00} > --nt-response=%{mschap:NT-Response:-00}" > > What i can change to fix that? currently you have --domain=%{mschap:NT

Re: Rewrite domain

Thank you very much. Work fine! Большое спасибо. 2009/8/27 Ivan Kalik : >> That is my ntlm_auth: >> ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key >> --domain=%{mschap:NT-DOMAIN} --username=%{mschap:User-Name} >> --challenge=%{mschap:Challenge:-00} >> --nt-response=%{mschap:NT-Response:-00}" >>

Selective Update of User-Name

Hi Guys This email tries to ask my question in a different way, to last time. I need to Rewrite the User-Name of individual accounts to add a realm, this would need to reliable up to at least 1 users. Does any one have any ideas on how this might be done, in a way that can be updated with ou

Re: Selective Update of User-Name

I don't know specifics, but pretty much any change will require an FR restart; kill -1 With the perl and python modules you can do pretty much anything, but I think you could also do this with "unlang". I recall reading examples of this, did you check the files in the "doc" dir? Wish I c

Re: Rewrite domain

If I change NT-DOMAIN by the name of my real domain, the radius don't work. I have changed the --domain by: --domain=%{%{mschap:NT-DOMAIN}:-WINDOWSDOMAIN} Where WINDOWSDOMAIN is the real name of my domain, as told me Ivan Kalik, and all is working. On Thu, Aug 27, 2009 at 14:36, Alan Buxey wrote

Re: Selective Update of User-Name

On Thu, Aug 27, 2009 at 10:57:47PM +0930, Mike O'Connor wrote: > I need to Rewrite the User-Name of individual accounts to add a realm, > this would need to reliable up to at least 1 users. > > Does any one have any ideas on how this might be done, in a way that can > be updated with out resta

rlm_pool problem

I've had FreeRadius 2.1.6 running ippools fine on one linux server and just installed it on a new one. They run with --prefix=/usr on both servers, which neccessitated me putting /usr/lib in /etc/ld.so.conf to get rlm_ippool to load on the new server. I copied over the old raddb tree, but w

GTC and XP

Hi I have installed free radius, with GTC and NIS on Mac, iphone, linux is working however, I am not able to configure XP SP2 When I go on EAP PEAP properties I can choise only EAP_MSCHAP2 and autre certificate I would like that XP was able to download the certificate automaticaly What I am doing

Copy of accounting packets

Hello. I am trying to setup FreeRadius server so it proxies all requests to Server1 and also sends copy of accounting packets to Server2. Proxying is working fine, but I cant get the copy-acct-to-home-server function to work. At the moment, authentication works fine, but accounting packets ge

Re: GTC and XP

> however, I am not able to configure XP SP2 > When I go on EAP PEAP properties > I can choise only EAP_MSCHAP2 and autre certificate > > I would like that XP was able to download the certificate automaticaly > What I am doing wrong Nothing. It can't. Ivan Kalik Kalik Informatika ISP - List info

Re: Copy of accounting packets

You have defined your 2 home server in a single pool Unfortunately, home_server_pool are only of type fail-over (packet sent to the second server *ONLY* if first fails) or load-balance (differents flavours) but not type allow for acct packet to be sent to both server. You must use detail-file and d

Setting FreeRadius and Ldap.

Hello All My needs are simple. Use an exiting LDAP server to communicate with FreeRadius. After reading a number of sources (including the FAQ) I am a bit confused as to what is required? I will start out simple with WPA using LEAP - since all my client boxes can use it. Questions: Do I need an

Re: Setting FreeRadius and Ldap.

> Questions: > > Do I need any special schema for ldap to use this plan? Y/N > No. > If NO, what other settings need to be set on the client, ldap and > FreeRadius server for testing. Configure ldap module (raddb/modules/ldap, instructions in doc/rlm_ldap) and uncomment ldap in authorize section

Re: rlm_pool problem

Replying to myself...I'm a dope. I deleted all the db.*ippool* files and let it create new ones and it's fine now. On Thu, 27 Aug 2009, u...@3.am wrote: I've had FreeRadius 2.1.6 running ippools fine on one linux server and just installed it on a new one. They run with --prefix=/usr on b

Re: Setting FreeRadius and Ldap.

tnt, Made the changes you suggested but could not locate the doc/rlm_ldap. Do you have any simple tests for the settings I changed? Steven -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. - List info/subscribe/unsubscribe? See ht

Re: Setting FreeRadius and Ldap.

tnt, I loaded FreeRadius in terminal using -X to see what is loading. Here's what comes back - you will notice one complaint below - in the rlm_ldap section: rlm_ldap: Over-riding set_auth_type, as there is no module ldap listed in the "authenticate" section. [r...@ns1 ~]# radiusd -X FreeRADIUS

Re: Selective Update of User-Name

John Morrissey wrote: > On Thu, Aug 27, 2009 at 10:57:47PM +0930, Mike O'Connor wrote: > >> I need to Rewrite the User-Name of individual accounts to add a realm, >> this would need to reliable up to at least 1 users. >> >> Does any one have any ideas on how this might be done, in a way that

freeradius+postgresql

If it is posible: How to combine freeradius with postgresql? How I can conect freeradius to postgres? some one know about this or have experience? any help will be welcome, thank you -- Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el

Re: freeradius+postgresql

On 08/27/2009 01:46 AM, Magui wrote: If it is posible: How to combine freeradius with postgresql? How I can conect freeradius to postgres? some one know about this or have experience? any help will be welcome, thank you Of course it's possible. There is existing documentation, files, and examp

Re: Selective Update of User-Name

Hi All So after a little playing this is how I got it to work. We wrote a python program which set the Proxy-To-Realm as a control item in the return. Then wrote some unlang code for authorize and preacct which uses this to selectively rewrite the username so that it has a realm. I have another

unlang: matching for 'Access-Accept'

Hi Guys How would I match for the packet type ie 'Access-Accept' in unlang Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

monitoring buffered-sql

Hi All, I installed freeradius with detail, buffered-sql active. How to monitor the buffered-sql module. If it stops or sleeps for very long time responding to mysql db.? I saw all of a sudden buffered-sql not pushing packets to mysql db yesterday. After restarting radius process it started proces