Enable Volume Based Accounting

2010-03-18 Thread Teguh Kurniawan
Hi, how to enable traffic volume based accounting on freeradius ? Thank's Teguh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Clients Configuration on MySQL

2010-03-18 Thread Teguh Kurniawan
It working. Thank you. Teguh On Thu, Mar 18, 2010 at 6:33 PM, Alan Buxey wrote: > Hi, > >> Could we move clients.conf to mysql table ? > > yes. > >> How to do that ? > > its well documented but basically, you need to > > > 1) import the nas.sql  so that your MySQL has the right table/structu

Re: Max Query Length Exceeded and Field Truncated

2010-03-18 Thread Robert Gabriel
On 18 March 2010 19:07, Alan DeKok wrote: > Robert Gabriel wrote: >> Hello all, >> >> Our network had some change somewhere and now all MySQL insert queries >> are failing >> with the last field been truncated and the character count is always >> 4097 from the CDRs > >  What does that mean?  What'

Re: Freeradius and COA

2010-03-18 Thread Alan DeKok
Johan Meiring wrote: > 1) For originating a COA packet, is it possible to trigger it from > rlm_perl. > i.e. cause an "update coa". Not really. > 2) For receiving a COA packet. How can I "process" it. I see that when > perl instantiates, it claims it will use two funtions, send_coa and > recv

Re: Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory

2010-03-18 Thread John
I attached the captured packets. Please open it with wireshark. The password from OD is “”.  It is neither cleartext password nor encrypted password. --- 10年3月18日,周四, John 写道: 发件人: John 主题: Re: Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory 收件人: "FreeRadius users mailing list"

Freeradius and COA

2010-03-18 Thread Johan Meiring
Hi, I am trying to figure out to use the Coa functionality in Freeradius. I have two seperate questions. 1) For originating a COA packet, is it possible to trigger it from rlm_perl. i.e. cause an "update coa". 2) For receiving a COA packet. How can I "process" it. I see that when perl ins

Re: TLS/SSL Error?

2010-03-18 Thread Alan DeKok
Mike Diggins wrote: > I just recently enabled a WPA SSID on our wireless network. PEAP with > MSCHAP V2 is the EAP method. As far as I know it's working correctly > (from all my test clients anyway), but I have seen a number of these > messages logged (FreeRadius 2.1.3) and I don't know where they'

Re: Unresponsive child for request

2010-03-18 Thread Alan DeKok
Mark Jones wrote: > I am getting this error in my logs and I understand it is do to likley > an issue with sql but was wondering what the criteria for this error to > be generrated is. > > Error: WARNING: Unresponsive child for request 271737, in module sqlzuul > component accounting > > Basicall

Re: Limit Bandwith

2010-03-18 Thread Alexandre Chapellon
Le jeudi 18 mars 2010 à 17:27 +0800, sugiarto tjahyono a écrit : > Sorry if this topic already posted or on wrong forum > > > How can we set speed if the user already over quota ie first day of > month they get 1Mbps bandwith after spent 1Gig the speed will decrease > to 512Kbps until end of mont

RE: Unresponsive child for request

2010-03-18 Thread Gary Gatten
I wish resolving "unresponsive child" errors was as simple as posting to a msg board or reading a man page -Original Message- From: freeradius-users-bounces+ggatten=waddell@lists.freeradius.org [mailto:freeradius-users-bounces+ggatten=waddell@lists.freeradius.org] On Behalf

Unresponsive child for request

2010-03-18 Thread Mark Jones
I am getting this error in my logs and I understand it is do to likley an issue with sql but was wondering what the criteria for this error to be generrated is. Error: WARNING: Unresponsive child for request 271737, in module sqlzuul component accounting Basically I assume and sql query is s

TLS/SSL Error?

2010-03-18 Thread Mike Diggins
I just recently enabled a WPA SSID on our wireless network. PEAP with MSCHAP V2 is the EAP method. As far as I know it's working correctly (from all my test clients anyway), but I have seen a number of these messages logged (FreeRadius 2.1.3) and I don't know where they're coming from. My Free radi

Re: Limit Bandwith

2010-03-18 Thread Коньков Евгений
Title: Re: Limit Bandwith Здравствуйте, sugiarto. just change speed limiting rule in your firewall Вы писали 18 марта 2010 г., 11:27:20: > Sorry if this topic already posted or on wrong forum How can we set speed if the user already over quota ie first day of month they get 1Mbps bandw

Re: Max Query Length Exceeded and Field Truncated

2010-03-18 Thread Alan DeKok
Robert Gabriel wrote: > Hello all, > > Our network had some change somewhere and now all MySQL insert queries > are failing > with the last field been truncated and the character count is always > 4097 from the CDRs What does that mean? What's a "character count"? > been sent by our NAS (Acme

Max Query Length Exceeded and Field Truncated

2010-03-18 Thread Robert Gabriel
Hello all, Our network had some change somewhere and now all MySQL insert queries are failing with the last field been truncated and the character count is always 4097 from the CDRs been sent by our NAS (Acme Packet SBC). Having looked at the source we see: src/modules/rlm_sql/conf.h src/modules

MAC based Vlan problem

2010-03-18 Thread Dr.Peer-Joachim Koch
Hi, we're using freeradius to switch different computer into various vlans on our switches. We have had a working configuration for freeradius 1.x, but for 2.1.6 (running on SLES) this configuration is working different. We're including a file looking like this: --- # VLAN 14 # # D

Re: debug only for rlm_xxx (rlm_perl)

2010-03-18 Thread bitte
Hi Doug, I will try this. But - without my patch, the compile goes OK. Thanks Thomas. On Wed, 17 Mar 2010 15:15:20 -0700, Doug Hardie wrote: > Only one of those errors references the code you added. There should have > been a line in my earlier email like: > > struct stat sb; > > Th

Re: /usr/local/sbin/radiusd -X problem

2010-03-18 Thread Alan Buxey
Hi, > > The same Problem I am getting My Solaris Servers while starting the radius > > server. How can I fix this . > > > > can U give me detailed explanation. the output is fairly obvious: > >> /usr/local/etc/raddb/certs/bootstrap: make: not found > >> /usr/local/etc/raddb/certs/bootstrap: open

Re: Clients Configuration on MySQL

2010-03-18 Thread Alan Buxey
Hi, > Could we move clients.conf to mysql table ? yes. > How to do that ? its well documented but basically, you need to 1) import the nas.sql so that your MySQL has the right table/structure 2) edit the mysql/dialup.conf make sure that nas_query is not commented finally, edit sql.conf

Re: Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory

2010-03-18 Thread John
I configured the LDAP module talks to Open Directory, based on the debug looks the password fetched from OD, but the authentication always failed. Is there any guide for freeRADIUS+ldap+OD integrating? I setup freeRADIUS talks to OpenLDAP, it works well.  Can OD return cleartext password like Op

Re: Limit Bandwith

2010-03-18 Thread Mihamina Rakotomandimby
> sugiarto tjahyono : > How can we set speed if the user already over quota ie first day of > month they get 1Mbps bandwith after spent 1Gig the speed will decrease > to 512Kbps until end of month without turning off modem and > re-authenticate. > >is that possible? That is possible. But, with t

Re: freeradius and vlan assignment

2010-03-18 Thread omega bk
i could'nt imagine that would be so simple. i'll try that next time [?] thank u 2010/3/18 Bob Brandt > In the users file do this: > > DEFAULT Ldap-Group == "cn=InsideGroup,o=Base" > Reply-Message = "Your a member of the Inside Group", > Tunnel-Medium-Type = IEEE-802, >

Re: framed-ip-address based on nas-ip-address

2010-03-18 Thread power159
I have read doc/rlm_sql many times but I unable to find any solution . adding Fall-Through in radreply for user or radgroupreply for groups doesn't help .. even I tried to use huntgroups but same result .. it works just when the user is membership of a group .. mean if I add user to second group

Re: /usr/local/sbin/radiusd -X problem

2010-03-18 Thread Bob Brandt
I'm not anything even approaching an expert, but it looks like you don't have your certs setup properly or the file paths are pointing to the wrong place. Bob On Thu, Mar 18, 2010 at 6:13 AM, gmani wrote: > > > > gmani wrote: > > > > The same Problem I am getting My Solaris Servers while starti

Re: freeradius and vlan assignment

2010-03-18 Thread Bob Brandt
In the users file do this: DEFAULT Ldap-Group == "cn=InsideGroup,o=Base" Reply-Message = "Your a member of the Inside Group", Tunnel-Medium-Type = IEEE-802, Tunnel-Type = VLAN, Tunnel-Private-Group-ID = 11, Fall-Through = No DEFAULT Auth-Type == "LDAP"

Re: framed-ip-address based on nas-ip-address

2010-03-18 Thread Fajar A. Nugraha
On Thu, Mar 18, 2010 at 2:21 PM, power159 wrote: > the only problem that I have is if user is membership of 2 groups . > freeradius is processing none of them ! even if both are matching ! but if I > remove one of groups its working without any problem ! and assigning ip from > ip pool > +--

Limit Bandwith

2010-03-18 Thread sugiarto tjahyono
Sorry if this topic already posted or on wrong forum How can we set speed if the user already over quota ie first day of month they get 1Mbps bandwith after spent 1Gig the speed will decrease to 512Kbps until end of month without turning off modem and re-authenticate. is that possible?

freeradius and vlan assignment

2010-03-18 Thread omega bk
hi, assume that the switch does not support the "auth-fail" and has 2 vlan ( vlan inside and vlan outside ), is it possible in the users file to put a condition like: if (user belong to Ldap-group=inside) assign to vlan = inside else assign to vlan = outside is that possible ? thanks -

[no subject]

2010-03-18 Thread Richie Lee
http://sagunnthecompany.com/TNJHLhOER9.html _ Stay in touch. http://go.microsoft.com/?linkid=9712959- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Talking to Windows 2003 AD

2010-03-18 Thread Iain Grant
Thanks Alan, The double '==' in the ntlm_auth command was the culprit. Things are working today. p.s. I had already stripped the usernames and verified the password so that was fine. Iain Grant Linux System Administrator Scottish Crop Research Institute Date: Wed,

framed-ip-address based on nas-ip-address

2010-03-18 Thread power159
Hi , As there was a mistake in my previous email title and as I had big improvement in processing my problem I am sending a new email . As I said in previous email I want to configure freeradius to reply different framed-ip-addresses based on nas servers . I found following email in the archive w