Question on processing delayed proxy packets

2009-12-10 Thread Patric
Greetings all, Finally getting my system running nice and smoothly :) I have a scenario I would like some opinions on, something to think about... Lets say I have server A and server B getting requests from multiple sources. They proxy these requests to each other as well. Consider the

Re: Testing radius server

2009-12-10 Thread Alan Buxey
Hi, Now I know it's a config issue in the clients.conf, as radtest is failing. I set user name and password, but radius is sending a reject. This is the first time I'm using radius. So please bear with me. Can some one mail me example of the minimum required configuration that needed for the

Request for directions: WinXP + Samba + LDAP + 802.1x

2009-12-10 Thread Fabiano Caixeta Duarte
Fellows, I have a samba+ldap domain with a bunch of WinXP clients. I intend to get those clients to get access on switch through 802.1x authentication. The problem is: user don't get authorized on samba domain because the switch port is locked waiting for 802.1x auth. What I got so far? I

HOWTO WLAN Access Point authenticate user via kerberos

2009-12-10 Thread John Mok
Hi, I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that access point authenticates WLAN users via Kerberos (or GSSAPI / Kerberos) and grant access to the wired network upon successful authentication. Is FreeRADIUS the right tool to use? If so, I hope someone could point to

Re: HOWTO WLAN Access Point authenticate user via kerberos

2009-12-10 Thread Phil Mayers
John Mok wrote: Hi, I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that access point authenticates WLAN users via Kerberos (or GSSAPI / Kerberos) and grant access to the wired network upon successful authentication. Is FreeRADIUS the right tool to use? If so, I hope

Re: radwho and radtest

2009-12-10 Thread John Dennis
Please do the rest of us a favor and configure your mail client to use the correct data type when attaching files. Your log file came through as: Content-Type: application/octet-stream Which means mail clients think this is binary data and won't display it nor do they even know they can open

RE: Testing radius server

2009-12-10 Thread Alex Bahoor
NOD32 Antivirus, version of virus signature database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4676 (20091210) __ The message was checked by ESET

RE: Testing radius server

2009-12-10 Thread tnt
Radius -X is always on, and I went through the clients.conf file. -X gives a lot information, since you asked here is my understanding. I'm not a programmer so some of them are cryptic to me. I put in comments to what I think they are, but they are only guesses. I would be very thankful if

Re: Testing radius server

2009-12-10 Thread gera
database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4676 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

RE: radwho and radtest

2009-12-10 Thread tnt
attached is the complete debug log Try using Calling-Station-Id instead of NAS-Port for accounting. Alter (raddb/modules/)acct_unique to use Calling-Station-Id. And use sql for session and accounting. It's quicker and queries can be configured to use Calling-Station-Id instead of NAS-Port.

accounting with freeradius

2009-12-10 Thread rosect190
I try to setup accounting with freeradius. Not much lick to find step-by-step instruction on Internet. Can some guru help on this? I have freeradius 2.1.3-1-fc9 installed on my Linux machine. Thanks in advance. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Testing radius server

2009-12-10 Thread Alex Bahoor
was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4676 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus

RE: Testing radius server

2009-12-10 Thread Alex Bahoor
ESET NOD32 Antivirus, version of virus signature database 4677 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Testing radius server

2009-12-10 Thread Tim Sylvester
Alex, Where did you create the user and password cisco? in the /etc/raddb/clients.conf. tim That's the problem. You configure RADIUS clients in the clients.conf file. A RADIUS client is a network device like a NAS or a wireless Access Point. A copy of your users configuration file would be

Re: accounting with freeradius

2009-12-10 Thread Alan Buxey
Hi, I try to setup accounting with freeradius. Not much lick to find step-by-step instruction on Internet. Can some guru help on this? I have freeradius 2.1.3-1-fc9 installed on my Linux machine. Thanks in advance. what exactly is it that you want to do? what part of docs/ isnt telling

Re: Testing radius server

2009-12-10 Thread Alan Buxey
Hi, Radius -X is always on, and I went through the clients.conf file. -X gives a lot information, since you asked here is my understanding. I'm not a programmer so some of them are cryptic to me. I put in comments to what I think they are, but they are only guesses. I would be very

RE: Testing radius server

2009-12-10 Thread Tim Sylvester
Alex, Please try to be less arrogant when you answer me. I have not touched linux or Solaris for 9 years. And I'm not a developer, and an RF engineer. I know many of you are software developers. We should not delve into the Silicon Valley notion of RTFM--instead should adhere to

Re: Testing radius server

2009-12-10 Thread Alan Buxey
Hi, Where did you create the user and password cisco? in the /etc/raddb/clients.conf. A copy of your users configuration file would be great Which config files do you need, radiusd.conf, or clients.conf? There is also, /etc/raddb/users which I have not even touched, cuz I did not see

Re: Testing radius server

2009-12-10 Thread gera
, version of virus signature database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4676 (20091210) __ The message was checked by ESET NOD32 Antivirus

RE: Testing radius server

2009-12-10 Thread Alex Bahoor
info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Information from ESET NOD32 Antivirus, version of virus signature database 4677 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET

Re: accounting with freeradius (Alan Buxey)

2009-12-10 Thread rosect190
I hope to see step-by-step instructions to setup accounting system using sql server with freeradius such that I can see a user's network usage (Tx'd / Rx'd). Also, with freeRADIUS, is there a way to log a user's accounting info in a local file, not in a sql server? Thanks.- List

RE: Testing radius server

2009-12-10 Thread tnt
Where is the user file? Why the wiki did not list this file. How would I know about the file. From the wiki, I don't see any talk about this file you talking about. Read the documentation included with the server. Start with doc/README. Ivan Kalik - List info/subscribe/unsubscribe? See

RE: Testing radius server

2009-12-10 Thread Alex Bahoor
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Information from ESET NOD32 Antivirus, version of virus signature database 4677 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from

Re: accounting with freeradius (Alan Buxey)

2009-12-10 Thread tnt
I hope to see step-by-step instructions to setup accounting system using sql server with freeradius such that I can see a user's network usage (Tx'd / Rx'd). Use schema.sql from raddb/sql/your_database_type directory to create the database tables. Configure raddb/sql.conf. Uncomment include

RE: Testing radius server

2009-12-10 Thread Alex Bahoor
from ESET NOD32 Antivirus, version of virus signature database 4677 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Testing radius server

2009-12-10 Thread tnt
Arrogant. Yes, terribly obscene suggestion - read available documentation. Don't ask us what's written in the documentation you already have with you. Ivan Kalik - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Testing radius server

2009-12-10 Thread gera
} tim You need to put users in the users file. Tim __ Information from ESET NOD32 Antivirus, version of virus signature database 4677 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus

Re: accounting with freeradius (Alan Buxey)

2009-12-10 Thread Marinko Tarlac
Try next steps: 1. google about freeradius sql howto 2. click on the first link in results ( http://wiki.freeradius.org/SQL_HOWTO ) If you have any other questions (which isn't already included in wiki), please ask... Keep in mind that some pages on wiki are outdated for FR 2.x but all

Re: Testing radius server

2009-12-10 Thread Alan Buxey
Hi, Alan, Where is the user file? Why the wiki did not list this file. How would I know about the file. From the wiki, I don't see any talk about this file you talking about. /etc/raddb/users ? /usr/local/raddb/users ? /opt/freeradius/users? whereever you installed the server config

Trying to get tunneling to work

2009-12-10 Thread Mike Bernhardt
I am trying to set up freeradius to proxy requests 802.11 MSCHAPv2 to an IAS server. The IAS requests are authenticated by a Safeword server, which doesn't support 802.11. So the idea is that freeradius takes the request, proxies it to IAS as if it was a non-802.11 client, IAS passes it to the

Re: Testing radius server

2009-12-10 Thread Alan Buxey
Hi, I had enough of this. what? free support pointing out the same suggestions and help every time? just a _little_ bit of reading would have informed you of the basics...but I think there _could_ be issues and am open to suggestions to fix the docs/guides for newcomers (and I've used all

RE: Testing radius server

2009-12-10 Thread tnt
Go ahead and take my out of this list. I had enough of this. So you can't be bothered even to read your mail to the end. Unsubscribe link is in every mail. Ivan Kalik - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Trying to get tunneling to work

2009-12-10 Thread tnt
I am trying to set up freeradius to proxy requests 802.11 MSCHAPv2 to an IAS server. The IAS requests are authenticated by a Safeword server, which doesn't support 802.11. So the idea is that freeradius takes the request, proxies it to IAS as if it was a non-802.11 client, IAS passes it to

RE: Testing radius server

2009-12-10 Thread Alex Bahoor
/users.html __ Information from ESET NOD32 Antivirus, version of virus signature database 4677 (20091210) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4677 (20091210

RE: Testing radius server

2009-12-10 Thread freeradius
At 12:12 AM 12/11/2009, Alex Bahoor wrote: For someone that claims words are important, you're not listening to the people trying to tell you you're using words wrong. random != dynamic for example client != user would be another example. The client is not the user. It's the physical

Re: Testing radius server

2009-12-10 Thread Fajar A. Nugraha
On Fri, Dec 11, 2009 at 12:12 PM, Alex Bahoor alexbah...@sbcglobal.net wrote: I'm spoiled in using purchased software, which uses GUIs all the time. So my expectations are little different. Alex, When you need more help than what's available freely, you can purchase support from networkradius

Re: Testing radius server

2009-12-10 Thread Alan DeKok
Alex Bahoor wrote: I don't know what your capacity in freeradius, but I sure hope this product is comparable to steel belt or Cisco's ACS, which are very costly. It's better. A picture is worth a thousand words. Network topologies, samples of clients.conf and radiusd.conf with various

Re: Trying to get tunneling to work

2009-12-10 Thread Alan DeKok
Mike Bernhardt wrote: I am trying to set up freeradius to proxy requests 802.11 MSCHAPv2 to an IAS server. The IAS requests are authenticated by a Safeword server, which doesn’t support 802.11. So the idea is that freeradius takes the request, proxies it to IAS as if it was a non-802.11