Wimax AAA Session ID

2009-09-04 Thread Victor Tangendjaja
Hi, Is there a way to generate WiMAX-AAA-Session-Id inside freeRADIUS? Thanks, Victor - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SQL Huntgroup only work with user check, not group check

2009-09-04 Thread George Koulyabin
On Thu, Sep 03, 2009 at 07:36:31AM -0300, Carlos Eduardo Tavares Terra wrote: > On Thu, Sep 3, 2009 at 6:30 AM, George Koulyabin wrote: > > > I wrote the rules for huntgroup here because the rules in groupcheck > didn't work. If I take this out, just keeping the groupcheck, 'jack' > will connect fr

Re: Pre-release of 2.1.7

2009-09-04 Thread Alan DeKok
Arran Cudbard-Bell wrote: > Here's the full output for those lines: OK... so it's using the *system* libltdl. Ugh. How about this: - edit the top-level "Make.inc" - make it look like this: LIBLTDL = -lltdl INCLTDL = LTDL_SUBDIRS= Do a "make clean", and "rm -rf ./li

Re: Wimax AAA Session ID

2009-09-04 Thread Ivan Kalik
> Is there a way to generate WiMAX-AAA-Session-Id inside freeRADIUS? Generate - yes. But that's a bit of a pointless exercise. How would you track the session if id is not provided by NAS? Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/user

Re: Pre-release of 2.1.7

2009-09-04 Thread Szymon Roczniak
On Thu, Sep 03, 2009 at 12:02:08PM -0400, Matt Garretson wrote: > Builds okay on Fedora 7 and Fedora 10: Also builds ok on CentOS 5.3 with the new RHEL/Fedora spec file for FreeRADIUS2 (modified to bump the version and add cui module) -- szymon roczniak si...@dischaos.com - List info/subscribe/u

Re: Freeradius possible memory leak

2009-09-04 Thread Szymon Roczniak
On Thu, Sep 03, 2009 at 03:02:23PM +0200, Alan DeKok wrote: > You should add "-m" to the radiusd command line, so that it will try > to clean up as much memory as possible before exiting. Output with "-m" and some more debugging information: 34,944 bytes in 112 blocks are definitely lost in lo

Deployment

2009-09-04 Thread tech . subscriptions
Sir, I am trying to move to the production server after due tests. I installed version 2.1.6 on CentOS 5.2. Funnily I am getting Segmentation fault error when my hints file is to be loaded. The debug message is: server { modules { Module: Checking authenticate {...} for more modules to

Re: ippool or sqlippool support for EAP/TLS or TTLS on Wimax

2009-09-04 Thread Jay Xiong
WiMAX can also works in DHCP proxy mode: acquire IP address from ip pool in RADIUS and convert to DHCP message format for the R6 interface. IP address assignment has nothing to do with the EAP method (EAP-TLS) you are using. I make the ip pool assignment working using sqlippool. What is your parti

Re: Freeradius possible memory leak

2009-09-04 Thread Alan DeKok
Szymon Roczniak wrote: > Output with "-m" and some more debugging information: OK, that helps... > 34,944 bytes in 112 blocks are definitely lost in loss record 38 of 44 > at 0x4C20809: malloc (vg_replace_malloc.c:149) > by 0x4E38DCE: pairalloc (in > /usr/lib64/freeradius/libfreeradiu

1 question

2009-09-04 Thread Tony P.
hi list,... i have set 2 numbers Called-Station-Id in my work and one of them is pay for my users as normal when their calling throught Telephony Enterprise, and the other one is pay revert and that users not pay the phone else my Work it is as feature... but in both case i set Max-Monthly-Session

RE: How to proxy accounting requests to multiple destinations

2009-09-04 Thread Dánial Olsen
> > Yes, this has also been my assumption and I've tried this but I've > > failed in making both instances proxy the packet. > > So what does the debug log say? > > > There must be something I'm not getting because I don't see how I can > > have two realms with one pool and home_server each

Re: 1 question

2009-09-04 Thread Ivan Kalik
> i have set 2 numbers Called-Station-Id in my work and one of them is pay > for my > users as normal when their calling throught Telephony Enterprise, and the > other > one is pay revert and that users not pay the phone else my Work it is as > feature... but in both case i set Max-Monthly-Session

Re: Deployment

2009-09-04 Thread Alan DeKok
tech.subscripti...@shepherdhill.biz wrote: > I am trying to move to the production server after due tests. I > installed version 2.1.6 on CentOS 5.2. Funnily I am getting Segmentation > fault error when my hints file is to be loaded. The debug message is: ... > Segmentation fault Please see "doc

FreeRADIUS proxy - Is Proxy-State (AVP 33) mandatory in the Acct Response?

2009-09-04 Thread Cristina Miyata
Dear FreeRADIUS Users, I have one FreeRADIUS server proxying accounting RADIUS to two different hosts. One of the remote hosts is receiving the requests and answering the responses, but processing the details file very slowly (keeps being marked as dead all the time). I realized that th

Re: FreeRADIUS proxy - Is Proxy-State (AVP 33) mandatory in the Acct Response?

2009-09-04 Thread Alan DeKok
Cristina Miyata wrote: > I realized that this host doesn't responds the accounting request with the > Proxy-State (AVP 33). I checked the RFC2865 and it seems that it is mandatory > the remote server responds the accounting response with the Proxy-State (AVP > 33). While the attribute is mand

sql.authorize

2009-09-04 Thread leopold
Is it possible to call sql.authorize on a group of SQL modules? This is needed to reduce number of calls to SQL in EAP-TLS transaction There was a recommendation to cal sql.authorize in post-auth section instead of authorize section, this is fine, but we need the same behavior for SQL groups that

Re: sql.authorize

2009-09-04 Thread Alan Buxey
Hi, authorise functions should be called in authorize section...only final things should be called in the post-authorize section..what is the sql stuff doing? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: sql.authorize

2009-09-04 Thread leopold
How else can I save on number of SQL calls when doing EAPTLS? In my case there are 4 (authorize_check_query,group_membership_query,authorize_group_check_query,authorize_group_reply_query)*11)number of challenge/responses)=44 calls to SQL for every EAPTLS authentication I need to call sql.authoriz

[RE]FreeRADIUS proxy - Is Proxy-State (AVP 33) mandatory in the Acct Response?

2009-09-04 Thread Cristina Miyata
Thanks Alan for your answers! I still have more questions: 1) If FreeRADIUS doesn't use Proxy-State for nothing, how it matches the requests with responses? Using only the Packet Identifier (AVP 92)? 2) Since it is Packet Identifier has only 1 byte (0-254), it can only handle 255 req

Re: Pre-release of 2.1.7

2009-09-04 Thread Joe Maimon
Alan DeKok wrote: Arran Cudbard-Bell wrote: ... gcc .libs/radiusdS.o -o .libs/radiusd .libs/acct.o .libs/auth.o .libs/client.o .libs/conffile.o .libs/crypt.o .libs/exec.o .libs/ .libs/modules.o: In function `setup_modules': /usr/local/src/freeradius-server-2.1.7/src/main/modules.c:1259: undef

Re: [RE]FreeRADIUS proxy - Is Proxy-State (AVP 33) mandatory in the Acct Response?

2009-09-04 Thread Alan DeKok
Cristina Miyata wrote: > 1) If FreeRADIUS doesn't use Proxy-State for nothing, how it matches the > requests with responses? Using only the Packet Identifier (AVP 92)? Very well, thank you. :) But really... packet src/dst ip/port, plus RADIUS code && Id. Proxy-State isn't needed. > 2) Since

Freeradius + MySQL At System Boot = Freeradius Failure

2009-09-04 Thread James Duffy
Hi, Am having problems using freeradius and mysql. Basically they are both set to start at system boot but as MySQL takes longer to get going freeradius bombs out with Mysql error 'Can't connect to local MySQL server through socket '/var/run/mysql/mysql.sock' (2)' type errors. I can 'fix' this