Re:Default entry to allow all

2010-02-03 Thread Godfrey Peart
Thank you, so is there a method to grant access if a user fails the access-challenge request when using mschap + peap - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Another command authorization question

2010-02-03 Thread Rija perso
Hi all, I'm trying to do per-command authorization with extreme networks switch (x450) and FR. According to extreme it's possible to do this with FR ... http://www.extremenetworks.com/libraries/services/ExtremeXOSConceptsGuideSoftwareVersion12_3_rev2.zip page 816. Command authorization is

sql + ippool + redundancy

2010-02-03 Thread Konstantin Chekushin
Hi! I have a question about failover configuration. I have freeradius + sqlippool module for ip-assigning. I have 2 databases for redundancy (described in sql1 and sql2). my file from enabled-server: server allauth { #160;#160;#160;#160;#160;#160;#160; listen {

differentiate ldap

2010-02-03 Thread cd
hi I have 2 ldap servers containing computers accounts with the same DN I don't know how differentiate access-accept or ldap_1/2 returns ok I want to put ldap_1's computers in vlan 1 and ldap_2 's computers in vlan 2 . What is the best practice to do this ? maybe with unlang ??? i've read the

RE: Failover Configuration

2010-02-03 Thread Troy Rindy
That was the conclusion I was coming to as well. Just wanted confirmation from the list. Thanks Alan! -Original Message- From: freeradius-users-bounces+troy.rindy=validants@lists.freeradius.org [mailto:freeradius-users-bounces+troy.rindy=validants@lists.freeradius.o rg] On

freeradius+freebsd

2010-02-03 Thread James Devine
I'm trying to setup a freeradius server on freebsd7 to authenticate against the local passwd file and seem to be running into some problems. in sites-available/default I setup authorize/authenticate such as: authorize { preprocess chap mschap suffix unix files expiration logintime pap }

Re: Default entry to allow all

2010-02-03 Thread Fajar A. Nugraha
On Wed, Feb 3, 2010 at 4:07 PM, Godfrey Peart grpe...@googlemail.com wrote: Thank you,  so is there a method to grant access if a user fails the access-challenge request when using mschap + peap I overlooked the mschap part, sorry :P It might be possible to do so if you use other EAP methods

Re: freeradius+freebsd

2010-02-03 Thread Konstantin Chekushin
Try to define pap { #160;#160;#160;#160;#160;#160;#160; auto_header = yes } Quoting James Devine : I'm trying to setup a freeradius server on freebsd7 to authenticate against the local passwd file and seem to be running into some problems. in sites-available/default I setup