Re: The question about #define WIMAX2ATTR(x) ((24757 16) | (x)) in rlm_wimax.c

2010-06-14 Thread Nicolas Goutte
Am 13.06.2010 um 03:47 schrieb 李立明: Hi,all I find #define WIMAX2ATTR(x) ((24757 16) | (x)) in rlm_wimax.c, but I don`t understand its meaning. Put 24757 (decimal) in the high 16 bits and put x in the low 16 bits (assuming x is only 16 bits). As for what 24757 means, I do not know.

FR 2.1.9 - segfault using status server

2010-06-14 Thread John Horne
Hello, We are running FR 2.1.9 on CentOS 5, and are proxying requests to MS IAS 2003 servers. However, it seems the IAS servers do not support 'status-server' requests until a slightly later version. As such, I have configured FR to send a dummy userid/pwd instead. FR seems to receive a reply,

Getting PAP to work with ntlm_auth

2010-06-14 Thread Neil Prockter
Hello I want to authenticate users against Active Directory for EAP-MSCHAPv2 and PAP. PAP is for a wireless web authentication redirection service that authenticates using PAP and its PAP I'm trying to debug not MSCHAP at present. I've been following

Re: FR 2.1.9 - segfault using status server

2010-06-14 Thread Alan DeKok
John Horne wrote: We are running FR 2.1.9 on CentOS 5, and are proxying requests to MS IAS 2003 servers. However, it seems the IAS servers do not support 'status-server' requests until a slightly later version. As such, I have configured FR to send a dummy userid/pwd instead. FR seems to

RE: Some questions about freeradius for WiMAX

2010-06-14 Thread Ben Wiechman
Since I see this from time to time I've attached a fairly functional virtual server and policy for use with a WiMAX ASN-GW. Some notes: - You may want to merge some of the configuration files (dictionary/policy.conf/etc) to avoid overwriting any site local updates that already exist. - We use

RE: Send Accounting from any point in configuration

2010-06-14 Thread Stefan A.
Thank you Alan, The intended Flow: Packet comes in ... - for Access type, check if user might be authenticated - if OK, try to decide to send an Accounting packet to a Server on some attributes (in my case, VSA from downstream RADIUS Proxy Server) Do you mean *create* an

Re: FR 2.1.9 - segfault using status server

2010-06-14 Thread John Horne
On Mon, 2010-06-14 at 16:23 +0200, Alan DeKok wrote: John Horne wrote: We are running FR 2.1.9 on CentOS 5, and are proxying requests to MS IAS 2003 servers. However, it seems the IAS servers do not support 'status-server' requests until a slightly later version. As such, I have

Proxy to two RADIUS Servers

2010-06-14 Thread Stefan A.
I checked, whether I am able to manually proxy from sites-available/default, using unlang. It works fine, using the following commands. if (request:Acct-Status-Type == Start || request:Acct-Status-Type == Stop) { if (request:Called-Station-Id == apn.isp.de) {

accounting without auth

2010-06-14 Thread Omer Faruk Sen
Hi , Is it possible to configure freeradius for accounting only without authorization/authentication? Maybe by granting access to every auth request can be done but I want to hear your opinion before proceeding any further. Regards. - List info/subscribe/unsubscribe? See

RE: accounting without auth

2010-06-14 Thread Stefan A.
Is it possible to configure freeradius for accounting only without authorization/authentication? As FR handles Auth and Accounting independently, just do it. Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html