how to change the radiusd.conf file to fit mysql database?

2009-12-17 Thread Zhang Shukun
hi, friends i install freereadius 2.1.7. i follow the instruction as follow: radiusd.conf Find the “authorize” section (near the bottom) and add “sql” (no quotes) between “suffix” and “files”. Comment out “files” by putting a # in front of it. Do the same to “suffix”. Find the

Re: how to change the radiusd.conf file to fit mysql database?

2009-12-17 Thread Saeed Akhtar
hi. In new version you will find it in sites-available/default file. Regards, Saeed Akhtar On Thu, Dec 17, 2009 at 2:35 PM, Zhang Shukun bit...@gmail.com wrote: hi, friends i install freereadius 2.1.7. i follow the instruction as follow: radiusd.conf Find the “authorize”

Re: Accounting question

2009-12-17 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/12/2009 19:21, David Peterson wrote: OK I added the reply update and see the acknowledgement go out: Sending Access-Accept of id 8 to 172.16.4.2 port 1812 Service-Type = Framed-User User-Name = testtest

proxy same realm but different authentication protocol to different server

2009-12-17 Thread piston
Hi, Am I possible to do these? 1. proxy realm xyz.com (PAP/CHAP) to server#1 2. proxy realm xyz.com (PEAP) to server#2 I'm using freeradius 2.1.7 Thank you KH - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

XP cert attributes

2009-12-17 Thread Fernando Calvelo Vazquez
Hi folks: How could I check that the special Microsoft OIDs have been included on the certificates? Thanks a lot in advance! Fernando. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius User Password Expiration

2009-12-17 Thread thatguy11
Guys, I've done abit of searching and still been unable to find a really good man page or other description on the users file. Not even the MAN on the users file is very descriptive. I just want to expire passwords. Thats it, I've seen the expiry attribute but nowhere can I find a detailed

Re: XP cert attributes

2009-12-17 Thread Alan Buxey
Hi, Hi folks: How could I check that the special Microsoft OIDs have been included on the certificates? Thanks a lot in advance! the client or the server? what you want to do is eg openssl x509 -text -in server.certificate-file.der you should see something like X509v3

Re: proxy same realm but different authentication protocol to different server

2009-12-17 Thread Alan Buxey
Hi, Am I possible to do these? 1. proxy realm xyz.com (PAP/CHAP) to server#1 2. proxy realm xyz.com (PEAP) to server#2 yes, in many varied ways you could doa check of Auth-Type at the end of the authorise section..and then if realm = xyz.com update the control to proxy to server1 it

Re: Freeradius User Password Expiration

2009-12-17 Thread Alan Buxey
Hi, I've done abit of searching and still been unable to find a really good man page or other description on the users file. Not even the MAN on the users file is very descriptive. I just want to expire passwords. Thats it, I've seen the expiry attribute but nowhere can I find a detailed

RE: Trying to get tunneling to work

2009-12-17 Thread Mike Bernhardt
Is that related to my problem, or did you just notice am unrelated bug? -Original Message- From: Alan DeKok [mailto:al...@deployingradius.com] Sent: Wednesday, December 16, 2009 1:45 PM To: FreeRadius users mailing list Subject: Re: Trying to get tunneling to work Mike Bernhardt wrote:

Re: Trying to get tunneling to work

2009-12-17 Thread Alan DeKok
Mike Bernhardt wrote: Is that related to my problem, or did you just notice am unrelated bug? Umm... did I respond to your email, or did I mention that an unrelated bug was fixed? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Can't start radiusd -X ?

2009-12-17 Thread Zhang Shukun
hi, when i want to start radius in debug mode. error happened. Failed binding to authentication address * port 1812: Address already in use /usr/local/etc/raddb/radiusd.conf[240]: Error binding to port for 0.0.0.0 port 1812 Could you tell me what's wrong? Thanks! -- Regards, Sucan - List

Re: Dynamic VLAN assignment works on EAP-MD5, but not EAP-PEAP!!!

2009-12-17 Thread tnt
I have figured out how to configure attributes. Here is my user file: test Cleartext-Password := test Tunnel-Type = 16777229, Tunnel-Medium-Type = 16777222, Tunnel-Private-Group-ID = 3 When I use MD5-Challenge, I got put in the right vlan I wanted. However

Re: Can't start radiusd -X ?

2009-12-17 Thread tnt
hi, when i want to start radius in debug mode. error happened. Failed binding to authentication address * port 1812: Address already in use /usr/local/etc/raddb/radiusd.conf[240]: Error binding to port for 0.0.0.0 port 1812 Could you tell me what's wrong? Freeradius is already running.

Re: Can't start radiusd -X ?

2009-12-17 Thread Zhang Shukun
Thank you for your reply! i try to find the process of running radius use top command, and kill then. but failed. i don't know which is the right process of radius. Could you tell me? [r...@localhost raddb]# top top - 18:34:35 up 8:01, 4 users, load average: 0.15, 0.11, 0.03 Tasks: 89

Re: Can't start radiusd -X ?

2009-12-17 Thread John Dennis
On 12/17/2009 08:41 PM, Zhang Shukun wrote: hi, when i want to start radius in debug mode. error happened. Failed binding to authentication address * port 1812: Address already in use /usr/local/etc/raddb/radiusd.conf[240]: Error binding to port for 0.0.0.0 port 1812 Could you tell me what's

Re: Can't start radiusd -X ?

2009-12-17 Thread John Dennis
On 12/17/2009 09:09 PM, Zhang Shukun wrote: Thank you for your reply! i try to find the process of running radius use top command, and kill then. but failed. i don't know which is the right process of radius. Could you tell me? top is the wrong command, us ps instead Consider taking a

Re: Can't start radiusd -X ?

2009-12-17 Thread Zhang Shukun
Thanks a lot! the command killall radiusd works! 2009/12/18 John Dennis jden...@redhat.com On 12/17/2009 08:41 PM, Zhang Shukun wrote: hi, when i want to start radius in debug mode. error happened. Failed binding to authentication address * port 1812: Address already in use

Re: Can't start radiusd -X ?

2009-12-17 Thread Zhang Shukun
Ok, i am new to linux. and i will consider your suggestion. ;) 2009/12/18 John Dennis jden...@redhat.com On 12/17/2009 09:09 PM, Zhang Shukun wrote: Thank you for your reply! i try to find the process of running radius use top command, and kill then. but failed. i don't know which is the

Re: proxy same realm but different authentication protocol to different server

2009-12-17 Thread piston
Hi Alan Do you mean something like these? if (Auth-Type == PEAP) { update control { { Proxy-To-Realm := xyz.com } realm xyz.com { type= radius authhost= 123.123.123.1:1812 accthost=