Re: Unexpected Exiting normally 2.1.8?

2009-11-22 Thread Alan DeKok
Craig Campbell wrote: Once you have another version (reverted), I can test again... I am really unfamiliar with git, so I may need a hint as to getting the correct version for testing. I've reverted the problem commit. It doesn't fix the PostgreSQL issue, and it causes other problems.

Re: solution---Re: Re: help--- IPsec VPN on radius

2009-11-22 Thread Alan DeKok
Bjørn Mork wrote: BTW, I am wondering if this redefinition should have been moved to dictionary.ascend.illegal?: bj...@canardo:/usr/local/src/git/freeradius$ grep ' Service-Type' share/dictionary.ascend VALUE Service-TypeDialout-Framed-User 5 I've moved

Re: Dictionary for Acme Packet

2009-11-22 Thread Alan DeKok
Hadriel Kaplan wrote: Howdy, Attached is the latest dictionary for Acme Packet, for inclusion in the Freeradius releases. If this is not the right list to send such requests to, please let me know. (I tried to RTFM, and this list seemed to be it) Thanks! Added, thanks. Alan DeKok. -

freeradius + ldap eap-ttls/pap

2009-11-22 Thread Matias
Hi everybody, I ask for your help because I'm going craizy with this. I've an Acces Point configured to ask my radius server for authentication, this servers uses as a backend an openldap server with SSHA passwords on it. I've followed all the manuals and documentation I've found and I can't

Re: freeradius + ldap eap-ttls/pap

2009-11-22 Thread Alan DeKok
Matias wrote: I've an Acces Point configured to ask my radius server for authentication, this servers uses as a backend an openldap server with SSHA passwords on it. I've followed all the manuals and documentation I've found and I can't get this to work. http://deployingradius.com There

Re: freeradius + ldap eap-ttls/pap

2009-11-22 Thread tnt
rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. You don't have openSSL or it's development libraries installed. Fix that and

Re: freeradius + ldap eap-ttls/pap

2009-11-22 Thread Matias
Thanks for your help. I've followed the tutorial at deploying radius.conf, but there I don't see any indication on how to enable TTLS. Should it be working out of the box? The only sections I modified from the default config is the radiusd.conf to set my ldap parameters and the

Re: freeradius + ldap eap-ttls/pap

2009-11-22 Thread Matias
t...@kalik.net escribió: rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. You don't have openSSL or it's development libraries

Re: EAP advanced auth. methods problem

2009-11-22 Thread Tomas Pelka
t...@kalik.net wrote: So the problem is in certificate: [tls] TLS 1.0 Handshake [length 038d], Certificate -- verify error:num=20:unable to get local issuer certificate [tls] TLS 1.0 Alert [length 0002], fatal unknown_ca That means that you haven't imported self-signed ca certificate

Re: EAP advanced auth. methods problem

2009-11-22 Thread tnt
Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you have imported the certificate. Ivan Kalik - List info/subscribe/unsubscribe? See

Re: freeradius + ldap eap-ttls/pap

2009-11-22 Thread Alan Buxey
Hi, Thanks!. Now everything seems much clear for me. I think my problem is this: http://www.linuxinsight.com/building-debian-freeradius-package-with-eap-tls-ttls-peap-support.html yes, thats exactly your initial problem. alan - List info/subscribe/unsubscribe? See

Debian, EAP, and the OpenSSL and GPL incompatibility (was: Re: freeradius + ldap eap-ttls/pap)

2009-11-22 Thread Bjørn Mork
Matias matiassu...@gmail.com writes: Thanks!. Now everything seems much clear for me. I think my problem is this: http://www.linuxinsight.com/building-debian-freeradius-package-with-eap-tls-ttls-peap-support.html BTW, I was looking over the Debian bug report ( http://bugs.debian.org/266229 )

Re: Debian, EAP, and the OpenSSL and GPL incompatibility

2009-11-22 Thread Alan DeKok
Bjørn Mork wrote: Alan DeKok posted this very promising report of the re-licensing work he had been doing in January: http://lists.cistron.nl/pipermail/freeradius-devel/2009-January/012726.html I've contacted a number of people. No one has objected. If I understand Alan's post correctly,

authorize_check_query - authorize_reply_query - synchronous or asynchronous?

2009-11-22 Thread freeradius
Hi Folks! I have a working freeRadius with Postgresql database behind it, and looking at developing some additional functionality for a public access wireless service requested by one of our customers. The deal is that they want to allow limited access (by time/download etc) to first-time

Re: Authentication

2009-11-22 Thread kachin Agarwal
Hi, What is the approx authentication rate u get on a good standard hardware using freeradius-server 2.1.7...? Thanx Regards, Kachin --- On Fri, 20/11/09, kachin Agarwal kach_...@yahoo.co.in wrote: From: kachin Agarwal kach_...@yahoo.co.in Subject: Authentication To:

Re: authorize_check_query - authorize_reply_query - synchronous or asynchronous?

2009-11-22 Thread Alan DeKok
freerad...@duxtel.com wrote: So my basic question is: Does authorize_check_query complete fully before starting the call to authorize_reply_query? To re-phrase your question: Q: What work does the database perform after it's returned an answer from a SELECT? A: Nothing. If they happen at