Re: Accounting Start From Client

2010-03-16 Thread Fajar A. Nugraha
On Wed, Mar 17, 2010 at 1:26 PM, Teguh Kurniawan wrote: > Hello, > I was succed sending "Accounting Start" from NTRadping to FR 2.1.3. > My question is Mikrotik RouterOS and UBNT Nanostation could send > "Accounting Start" automatically to FR ? You should ask Mikrotik. Some NAS (like dd-wrt, and

Accounting Start From Client

2010-03-16 Thread Teguh Kurniawan
Hello, I was succed sending "Accounting Start" from NTRadping to FR 2.1.3. My question is Mikrotik RouterOS and UBNT Nanostation could send "Accounting Start" automatically to FR ? Thank's Teguh Kurniawan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: accounting Framed-IP-Address

2010-03-16 Thread Alan DeKok
omega bk wrote: > is it possible to retrieve from dhcp server the ip adress? It's time to stop asking non-RADIUS questions on this list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuring freeradius for a new authentication module

2010-03-16 Thread Alan DeKok
Abu Marcose wrote: > OK.. took the configuration file default as is.. and simply added a new > entry to the authentication section at the beginning of the section > I am still getting the 'No authenticate method (Auth-Type) configuration > found for the request: Rejecting the user' error. If you

Re: Configuring freeradius for a new authentication module

2010-03-16 Thread Abu Marcose
OK.. took the configuration file default as is.. and simply added a new entry to the authentication section at the beginning of the section I am still getting the 'No authenticate method (Auth-Type) configuration found for the request: Rejecting the user' error. Attached find the output .. please

Re: accounting Framed-IP-Address

2010-03-16 Thread omega bk
i tried to put *radius-server attribute 8 include-in-access-req but still the same; is it possible to retrieve from dhcp server the ip adress? * 2010/3/16 omega bk > hi, > > i got cisco 3750 switch > > and for accounting i put > > aaa new-model > aaa authentication dot1x default group radius >

Re: accounting Framed-IP-Address

2010-03-16 Thread omega bk
hi, i got cisco 3750 switch and for accounting i put aaa new-model aaa authentication dot1x default group radius aaa authorization network default group radius aaa accounting dot1x default start-stop group radius but this ip i don't know where it took it lol FramedIPAddress = 3.118.236.192 th

Re: accounting Framed-IP-Address

2010-03-16 Thread Alan Buxey
Hi, > but i noticed that i don't have the real ip address of a workstation > connected. > i got this > > +-+-+-+---+-+ > | FramedIPAddress | AcctStartTime | AcctStopTime | > CallingStationI

Re: Configuring freeradius for a new authentication module

2010-03-16 Thread Alan DeKok
Abu Marcose wrote: > In fact since all i am interested in is > authentication, i have removed entries from all the other sections. This is the problem. See "man radiusd". If you remove 99% of the configuration file content from a program, then it WILL NOT WORK. Don't do that. Alan DeKok

Configuring freeradius for a new authentication module

2010-03-16 Thread Abu Marcose
OK.. so first time I am working with free radius (or any kind of radius server) .. so please bear with me. I have a ubuntu based system on which I have installed freeradius 2.1.8 I have created my own new module called grid which is intended to only provide an authentication function I have the co

Re: Password in Radius Debug

2010-03-16 Thread Alan DeKok
Ari El wrote: > I was wondering if there is a configuration option to control the level of > debugging. $ man radiusd > Basically I was also looking for a way to prevent passwords from > showing up when "freeradius -X" is used. No. Read the message you quoted. > I understand older versions

Re: Password in Radius Debug

2010-03-16 Thread Ari El
Alan DeKok-2 wrote: > > Cody Jarrett wrote: >> I notice the password during supplicant connects to the radius server >> are displayed in plain text. Is there a way to disable this? > > No. Anyone who can run the server in debugging mode can access the > passwords via another method. > >

Re: FreeRADIUS 2.1.7 and 2.1.8 fail to build

2010-03-16 Thread Alan DeKok
Joey Officer wrote: > Trying to build FreeRADIUS from Gentoo's package system, or manually > building it from the downloaded sources and I receive the following > errors: ... > .libs/modules.o: In function `setup_modules': > /root/build/freeradius-server-2.1.8/src/main/modules.c:1358: undefined > r

FreeRADIUS 2.1.7 and 2.1.8 fail to build

2010-03-16 Thread Joey Officer
Trying to build FreeRADIUS from Gentoo's package system, or manually building it from the downloaded sources and I receive the following errors: building manually: gcc .libs/radiusdS.o -o .libs/radiusd .libs/acct.o .libs/auth.o .libs/client.o .libs/conffile.o .libs/crypt.o .libs/exec.o .libs/files

About FreeRADIUS-Stats-Client-IP-Address

2010-03-16 Thread Sergio Belkin
Hi, When I issue the following command on the shell: echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 35, FreeRADIUS-Stats-Client-IP-Address = 10.128.255.80" | radclient localhost:18120 status MySecret It gets global statistic and *not only* those of Client. Is there a way to get

Re: duplicate errors in an active directory setup

2010-03-16 Thread Alan Buxey
Hi, > Mon Mar 15 18:57:09 2010 : Error: Discarding duplicate request from client > ccc port 32768 - ID: 85 due to unfinished request 28810 > Mon Mar 15 18:57:14 2010 : Error: Discarding duplicate request from client > ccc port 32768 - ID: 85 due to unfinished request 28810 > Mon Mar 15 18:57:19

Re: Accounting and Segmentation Fault

2010-03-16 Thread Alan DeKok
matthew.strin...@bt.com wrote: > Hi all, I am a bit of a FreeRadius newbie and am having some issues with the > accounting, getting segmentation fault reported back. > > I have FreeRadius 2.1.8 running on CentOS 5.4, set up in a pretty basic > configuration. It is authenticating to a MySQL datab

Accounting and Segmentation Fault

2010-03-16 Thread matthew.stringer
Hi all, I am a bit of a FreeRadius newbie and am having some issues with the accounting, getting segmentation fault reported back. I have FreeRadius 2.1.8 running on CentOS 5.4, set up in a pretty basic configuration. It is authenticating to a MySQL database that contains records for 300,000 us

Re: accounting Framed-IP-Address

2010-03-16 Thread Alan Buxey
Hi, > destination acct_radius { pipe("/var/log/mysql.pipe" \ > template("UPDATE radacct SET FramedIPAddress = > SUBSTRING_INDEX(SUBSTRING_INDEX('$MSG','on ',-1),' to',1) \ > WHERE TIMESTAMPDIFF(SECOND,AcctStartTime,CONCAT('$YEAR-$MONTH-$DAY',' > ','$HOUR:$MIN:$SEC')) <= 180 AND \ > REPLACE(REPLA

Re: accounting Framed-IP-Address

2010-03-16 Thread omega bk
Hi, i'm trying syslog-ng to get ip address from dhcp log so i need to have the frameipaddress field to be empty in order to replace it from dhcp log so in syslog-ng.conf, i put : source dhcp { tcp(ip(0.0.0.0) port(514)); }; # log { source(dhcp); destination(acct_radius); };

Re: vrf-aware vpdn / l2tp termination / cisco-avpair

2010-03-16 Thread Alexander
--- On Mon, 3/15/10, Alexander wrote: > From: Alexander > Subject: vrf-aware vpdn / l2tp termination / cisco-avpair > To: freeradius-users@lists.freeradius.org > Date: Monday, March 15, 2010, 2:35 PM Problem solved, turned out that I was using wrong operators in FR and one import line missing

Re: convert mysql from ICRadius to Free

2010-03-16 Thread Alan DeKok
Len Conrad wrote: > We can't find any info how to do this, but we can't be the first, either. > > Anybody got howtos or recipes for converting MySQL db? The DB should be mostly compatible. Where it isn't... write Perl scripts. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.fr

Re: duplicate errors in an active directory setup

2010-03-16 Thread Alan DeKok
Christian Pinedo Zamalloa wrote: > I'm using FreeRadius 2.1.8 to authenticate wifi users againts an Active > Directory. The setup consists on samba, kerberos and freeradius. All > seem to be working well but FreeRadius logs are full of the following > errors: > > Mon Mar 15 18:57:09 2010 : Error:

duplicate errors in an active directory setup

2010-03-16 Thread Christian Pinedo Zamalloa
Hi all, I'm using FreeRadius 2.1.8 to authenticate wifi users againts an Active Directory. The setup consists on samba, kerberos and freeradius. All seem to be working well but FreeRadius logs are full of the following errors: Mon Mar 15 18:57:09 2010 : Error: Discarding duplicate request from cl

Re: How to handle challenge response using PAM auth in FreeRadius

2010-03-16 Thread John Dennis
On 03/15/2010 02:32 PM, Rajendra Hegde wrote: pam_conv is good for holding interactive conversation locally for applications such as login, su etc. When used with radius server pam_conv failed to do prompt at remote_client. Please note that we are not interested in local convesation where PAM is

accounting Framed-IP-Address

2010-03-16 Thread omega bk
HI, i can do accounting with mysql, it's working so fine. but i noticed that i don't have the real ip address of a workstation connected. i got this +-+-+-+---+-+ | FramedIPAddress | AcctStartTime |