Re: Setting up a virtual server to handle incoming proxied requests

2009-09-27 Thread Alan DeKok
Patric wrote: I see I see, so I would only add a listen section if I were listening on a different interface or port? Yes. I think I get the proxying now :) proxy_requests = yes just makes the server process the detail-combined log right? No. The listen section that references it tells

Re: Accounting copying to specific systems

2009-09-27 Thread Alan DeKok
Joe Maimon wrote: And that is what I have done. git://github.com/jmaimon/freeradius-server.git OK. After a quick look, there are a number of patches which can be pulled in. I'll try to do that this week. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: freeradius problem

2009-09-27 Thread Alan DeKok
matthew wyath wrote: I am trying to configure my freeradius to work with FortiMail antispam/antivir solution (so that people can automatically log into their webmail quarantine). Fortimail part is done and it was easy. Then I moved to freeradius and I came across problems. Just to clarify

Re: freeradius problem

2009-09-27 Thread matthew wyath
hi Alan, Yes of course I have this user: test with password testtest in /etc/shadow (I am able to download/send an email by using these credentials + log into linux shell). The problem is that I am still not able to log in through my NAS (fortimail). What I can see in wireshark is that username

Re: freeradius problem

2009-09-27 Thread Alan DeKok
matthew wyath wrote: . What I can see in wireshark is that username test is sent in clear text + password is sent encrypted. Yes, that is how RADIUS works. My assumption is that freeradius can't read /etc/shadow for some reason. Freeradius version I am using is 1.1 Then this is a Unix

Re: EAP with a non EAP Radius server

2009-09-27 Thread Jacques FOUCHER
Hi, is it possible that because of the configuration of the proxy.conf (proxying to an external radius), I don't use configuration on eap.conf (wich would be use only for local authentication) ? It would be the explanation i send EAP messages. 2009/9/26 Jacques FOUCHER jacques.fouc...@gmail.com

Re: EAP with a non EAP Radius server

2009-09-27 Thread Daniil Kharun
I copied proxy-inner-tunnel from sites-available to sites-enabled I declared proxy-inner-tunnel in eap.conf but unfortunaly, EAP is still proxified *eap.conf* ttls { default_eap_type = mschapv2 copy_request_to_tunnel = yes (or no)

Re: freeradius problem

2009-09-27 Thread Ivan Kalik
Yes of course I have this user: test with password testtest in /etc/shadow (I am able to download/send an email by using these credentials + log into linux shell). /etc/shadow on which device? Radius server (where freeradius is looking for it) or on mail server (which is probably a different

Re:

2009-09-27 Thread wessam seleem
Dear Thor and Ivan, Thanks for your support. I would like to notice that I have the same configuration in a server that has freeradius-1.1.7-1 installed and it is working fine. I want to upgrade. That is why I am testing freeradius-2.1.6-2. I want to ask is there is any difference between

Re:

2009-09-27 Thread Thor Spruyt
- Oorspronkelijk bericht - Van : wessam seleem [mailto:wessam.sel...@gmail.com] Verzonden : zondag , september 27, 2009 02:34 PM Aan : 'FreeRadius users mailing list' Onderwerp : Re: Dear Thor and Ivan, Thanks for your support. I would like to notice that I have the same

Re:

2009-09-27 Thread Alan Buxey
Hi, freeradius-2.1.6-2. I want to ask is there is any difference between 1.1.7-1 and 2.1.6-2 configuration files that I should put it in my consideration? some very big differences. best thing to do is download 1.1.8 and 2.1.7 sources and compare the plain supplied config files that are in

Re: EAP with a non EAP Radius server

2009-09-27 Thread Jacques FOUCHER
Hi everybody, thanks to Daniil and Yvan who helped me, but unfortunalety, my problem still alive. First , I want to explain again what I want to do, because may be there is a missunderstanding. I have a wireless system wich need EAP and my users are allready known in a Radius system (Radius n°2)

Re: EAP with a non EAP Radius server

2009-09-27 Thread Ivan Kalik
The idea is to use in between a freeradius (Radius n°1) wich will convert EAP-Response/Identity from Access Point and will forward Radius Access-Request without EAP message inside to my existing Radius server (Radius n°2). This weekend, i updated frreradius to the last version 2.1.7. I

Re: EAP with a non EAP Radius server

2009-09-27 Thread Jacques FOUCHER
thanks Yvan, looking at debug, I saw : Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. So: I installed that : apt-get install openssl apt-get install

Re: freeradius problem

2009-09-27 Thread John Dennis
On 09/27/2009 04:13 AM, Ivan Kalik wrote: Yes of course I have this user: test with password testtest in /etc/shadow (I am able to download/send an email by using these credentials + log into linux shell). /etc/shadow on which device? Radius server (where freeradius is looking for it) or on

DHCP routing bug (FreeRadius DHCP reply to Default Gateway)

2009-09-27 Thread Pavel Malev
Hello! I have Freeradius 2.1.6 on freebsd6.2. Freebsd have Default Gateway: DestinationGatewayFlagsRefs Use Netif Expire default192.168.2.150 UGS 0 7922rl1 Default Gateway have mac-address: ? (192.168.2.150) at 00:30:48:35:31:32 on

rlm

2009-09-27 Thread José Johnny RANDRIAMAMPIONONA
Dear all, I posted this problem a week ago after searching in posted and solved emails like here ( http://www.mail-archive.com/search?q=rlm_ldapl=freeradius-us...@lists.cistron.nlstart=40 ). I have already asked but the answers were not effective... Anyway, I d like to express my gratitude to

Re: rlm

2009-09-27 Thread Leigh Martell
Hey, LIBLDAP is part of openldap, install the openldap libraries and headers then you will be able to compile rlm_ldap. If you already have it you'll have to post some more information so people help, but I am confident that is what you are missing. -Leigh Martell On Mon, Sep 28, 2009 at

Re: rlm

2009-09-27 Thread Alan DeKok
José Johnny RANDRIAMAMPIONONA wrote: I have already asked but the answers were not effective... Anyway, I d like to express my gratitude to those who have tried to read and respond to my problems ! So I m asking myself if : Using LDAP with freeradius is it something new or something? You