Re: dot1x with samba workstation accounts

2010-06-16 Thread Alan DeKok
Jens Weibler wrote: > I'm trying to authenticate my windows boxes with dot1x against > freeradius. Everything is working fine if I'm using a normal user. > > But I want to use the samba workstation accounts from ldap. The problem: > mschap blocks accounts which have only the W-sambaAcctFlag set: >

Re: Enabling / disabling active directory users

2010-06-16 Thread Alan DeKok
Iain Grant wrote: > We have on site a Windows 2008 RC2 domain controller ( 64-bit ) which I > have a linux based freeradius server hanging from. > > My question is, other than changing the users file on the freeradius > server, is there another way of disabling a user from authentication > through

Re: Calling-Station-Id and Called-Station-Id values

2010-06-16 Thread Alan DeKok
Omer Faruk Sen wrote: > How can I make Calling-Station-Id and Called-Station-Id to be see in > accounting if one of them is empty in detail log file. What I mean if > one of the field (Calling-Station-Id or Called-Station-Id ) doesn't > supplied by NAS I want it to be seen like : > > Calling-Stat

Re: Check line and radgroupcheck evaluation question

2010-06-16 Thread Matt Hite
As usual, thanks Alan. I appreciate the help. -M On Wed, Jun 16, 2010 at 7:55 AM, Alan DeKok wrote: > Matt Hite wrote: >> Are check lines in the "users" file short-circuit "AND" evaluated from >> left to right? > >  Yes. > >> Extrapolating this presumption out to radgroupcheck >> when using a My

Re[2]: Wanted: Commercial FreeRADIUS Support

2010-06-16 Thread Коньков Евгений
Hi, Jackal. JA> Even if you aren't able to provide support, I'd be interested in any JA> suggestions for where to get support from. JA> Jackal Admin wrote: >> >> We have a a hotspot authentication system built on FreeRADIUS, MySQL, and >> PHP. >> It is not too complicated but we don't have the

Re: Wanted: Commercial FreeRADIUS Support

2010-06-16 Thread James J J Hooper
http://www.google.co.uk/search?q=freeradius+commercial+support&btnI=1 ?? On 16/06/2010 23:03, Jackal Admin wrote: Even if you aren't able to provide support, I'd be interested in any suggestions for where to get support from. Jackal Admin wrote: We have a a hotspot authentication system b

Re: Wanted: Commercial FreeRADIUS Support

2010-06-16 Thread Jackal Admin
Even if you aren't able to provide support, I'd be interested in any suggestions for where to get support from. Jackal Admin wrote: > > We have a a hotspot authentication system built on FreeRADIUS, MySQL, and > PHP. > It is not too complicated but we don't have the time to work on it > ourselv

Re: Enabling / disabling active directory users

2010-06-16 Thread Neil Prockter
On 16/06/10 14:18, Iain Grant wrote: > We have on site a Windows 2008 RC2 domain controller ( 64-bit ) which I > have a linux based freeradius server hanging from. > > My question is, other than changing the users file on the freeradius > server, is there another way of disabling a user from authe

Re: freeradius 2.1.9 crashes working in proxy mode

2010-06-16 Thread JOE
Hi Thanks for your reply! which software versions are affected by this bug?, actually I'm using 2.1.4 release. Regards On Wed, Jun 16, 2010 at 5:03 PM, Alan Buxey wrote: > Hi, > >> Load Balance works fine but when I force shutdown of one of local >> radius servers the proxy crashes with a segme

dot1x with samba workstation accounts

2010-06-16 Thread Jens Weibler
Hello, I'm trying to authenticate my windows boxes with dot1x against freeradius. Everything is working fine if I'm using a normal user. But I want to use the samba workstation accounts from ldap. The problem: mschap blocks accounts which have only the W-sambaAcctFlag set: > info: [mschap] SMB-A

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Josip Rodin
On Wed, Jun 16, 2010 at 09:56:13AM -0400, David Peterson wrote: > I am having one issue now, when FR receives and EAP packet, the daemon > crashes and I get a segmentation fault. Any thoughts other than starting > from scratch? What does the debug mode say, the output of freeradius -X just before

Calling-Station-Id and Called-Station-Id values

2010-06-16 Thread Omer Faruk Sen
Hi, How can I make Calling-Station-Id and Called-Station-Id to be see in accounting if one of them is empty in detail log file. What I mean if one of the field (Calling-Station-Id or Called-Station-Id ) doesn't supplied by NAS I want it to be seen like : Calling-Station-Id = "" Called-Statio

Re: freeradius 2.1.9 crashes working in proxy mode

2010-06-16 Thread Alan Buxey
Hi, > Load Balance works fine but when I force shutdown of one of local > radius servers the proxy crashes with a segmentation. there is a known bug in the proxy code of 2.1.9 - this is fixed in the GIT release - which will eventually become the 2.1.10 release. alan - List info/subscribe/unsubsc

Re: Segment Fault

2010-06-16 Thread Alan DeKok
David Peterson wrote: > [61490.335957] freeradius[6212]: segfault at 6c ip 00a51951 sp bfd33070 > error 4 in libfreeradius-radius-2.1.8.so[a3d000+1e000] > > [61510.556054] freeradius[6214]: segfault at 6c ip 00a97951 sp bfab1530 > error 4 in libfreeradius-radius-2.1.8.so[a83000+1e000] > > Anyone k

Re: Use rlm_ldap reply for the next authorization module

2010-06-16 Thread Alan DeKok
JUND wrote: > I have no trouble to check the User-Name/Password using ldap and chap > modules. But I can’t figure out how to use the ldap reply to request the > local mysql where is store the match between crm Id and status. > > I don’t know how to use a reply of a authorization module (ldap) in

Re: Check line and radgroupcheck evaluation question

2010-06-16 Thread Alan DeKok
Matt Hite wrote: > Are check lines in the "users" file short-circuit "AND" evaluated from > left to right? Yes. > Extrapolating this presumption out to radgroupcheck > when using a MySQL database, are the check items evaluated simply in > order of column id value (ie. the order they are returne

Re: freeradius 2.1.9 crashes working in proxy mode

2010-06-16 Thread Alan DeKok
JOE wrote: > Load Balance works fine but when I force shutdown of one of local > radius servers the proxy crashes with a segmentation. > > you have any idea what is happening? See git.freeradius.org. Try the v2.1.x branch. It should contain a fix. We should probably release 2.1.10 to addr

Segment Fault

2010-06-16 Thread David Peterson
[61490.335957] freeradius[6212]: segfault at 6c ip 00a51951 sp bfd33070 error 4 in libfreeradius-radius-2.1.8.so[a3d000+1e000] [61510.556054] freeradius[6214]: segfault at 6c ip 00a97951 sp bfab1530 error 4 in libfreeradius-radius-2.1.8.so[a83000+1e000] [62031.935361] hrtimer: interrupt took 3634

Re: Getting PAP to work with ntlm_auth

2010-06-16 Thread Neil Prockter
On 15/06/10 07:51, Alan DeKok wrote: > Neil Prockter wrote:w >> I want to authenticate users against Active Directory for EAP-MSCHAPv2 >> and PAP. PAP is for a wireless web authentication redirection service >> that authenticates using PAP and its PAP I'm trying to debug not MSCHAP >> at present.

RE: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread David Peterson
I have installed the binary and it has everything I needed thanks! I am having one issue now, when FR receives and EAP packet, the daemon crashes and I get a segmentation fault. Any thoughts other than starting from scratch? -Original Message- From: freeradius-users-bounces+david.peterso

freeradius 2.1.9 crashes working in proxy mode

2010-06-16 Thread JOE
Hi all Actually I have two servers (in cluster mode with heartbeat) working each one with two radius services, one proxy and one radius as follow: Server1: .- freeradius server 2.1.9 : listening on port 1645 , working in proxy mode with load balance configuration and point to local radius and

Enabling / disabling active directory users

2010-06-16 Thread Iain Grant
We have on site a Windows 2008 RC2 domain controller ( 64-bit ) which I have a linux based freeradius server hanging from. My question is, other than changing the users file on the freeradius server, is there another way of disabling a user from authentication through the radius server but still a

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread John Dennis
On 06/16/2010 07:10 AM, Karuna G. Kumar wrote: I also got the same problem when I am compiling FreeRADIUS 2.1.8. I solved this problem by executing the following commands. Change the version number in the file appropriately and execute these commands. ln -s /usr/local/lib/libfreeradius-radius-

Use rlm_ldap reply for the next authorization module

2010-06-16 Thread JUND , Aurélien
Hello, In order to allow a user to access the service (send a Access-Accept) I need to validate several things: First the password must be OK: * The User-name and password are stored in cleartext in a ldap (I use Chap), I must get another ldap attribute wich specify the crm Id matching the

[no subject]

2010-06-16 Thread Jasenko Sehanovic
Jasenko Sehanovic |t: + 387 33 768 000|f: + 387 33 768 001|m: + 387 61 103 444 Teleinformatica doo, Tvornička 3, 71000 Sarajevo, Bosnia and Herzegovina -- cid:part1.05030807.04020006@teleinformatica.ba <>- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Josip Rodin
On Wed, Jun 16, 2010 at 02:31:54PM +0300, Bassem Nagi wrote: > Hey Josip actually i need to compile in order to use rlm_sqlcounter > module as i understand it is not available with the binary package. Well, I see it at: http://packages.ubuntu.com/lucid/i386/freeradius/filelist /etc/freeradius/mo

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Bassem Nagi
Hey Josip actually i need to compile in order to use rlm_sqlcounter module as i understand it is not available with the binary package. Regards, Bassem On Wed, 2010-06-16 at 13:24 +0200, Josip Rodin wrote: > On Wed, Jun 16, 2010 at 01:01:40PM +0300, Bassem Nagi wrote: > > Iam having trouble compi

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Josip Rodin
On Wed, Jun 16, 2010 at 01:01:40PM +0300, Bassem Nagi wrote: > Iam having trouble compiling freeradius version 2.1.9 on ubuntu 10.04 > when i try to start the server i get an error stating > > radiusd: error while loading shared libraries: > libfreeradius-radius-2.1.9.so: cannot open shared objec

RE: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Karuna G. Kumar
I also got the same problem when I am compiling FreeRADIUS 2.1.8. I solved this problem by executing the following commands. Change the version number in the file appropriately and execute these commands. ln -s /usr/local/lib/libfreeradius-radius-2.1.8.so /usr/lib/libfreeradius-radius-2.1.8.so

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Bassem Nagi
Hey Nicolas i tried ldconfig but for some reason now i am getting a different error Segmentation fault Regards, Bassem On Wed, 2010-06-16 at 12:25 +0200, Nicolas Goutte wrote: > Am 16.06.2010 um 12:01 schrieb Bassem Nagi: > > > Hi, > > Iam having trouble compiling freeradius version 2.1.9 on

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Bassem Nagi
I downloaded it from ubuntu Repository Thanx, Bassem On Wed, 2010-06-16 at 12:32 +0200, Andras Dosztal wrote: > Did you compile libfreeradius first? > > Regards, > Andras > > > On Wed, 16 Jun 2010 12:01:40 +0200, Bassem Nagi wrote: > > > > > Hi, > > > > Iam having trouble compiling freeradi

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Andras Dosztal
Did you compile libfreeradius first? Regards, Andras On Wed, 16 Jun 2010 12:01:40 +0200, Bassem Nagi wrote: Hi, Iam having trouble compiling freeradius version 2.1.9 on ubuntu 10.04 when i try to start the server i get an error stating radiusd: error while loading shared libraries: l

Re: Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Nicolas Goutte
Am 16.06.2010 um 12:01 schrieb Bassem Nagi: Hi, Iam having trouble compiling freeradius version 2.1.9 on ubuntu 10.04 when i try to start the server i get an error stating radiusd: error while loading shared libraries: libfreeradius-radius-2.1.9.so: cannot open shared object file: No such fi

Having trouble compiling freeradius 2.1.9 on ubuntu 10.04

2010-06-16 Thread Bassem Nagi
Hi, Iam having trouble compiling freeradius version 2.1.9 on ubuntu 10.04 when i try to start the server i get an error stating radiusd: error while loading shared libraries: libfreeradius-radius-2.1.9.so: cannot open shared object file: No such file or directory Any help would be appreciated.

Check line and radgroupcheck evaluation question

2010-06-16 Thread Matt Hite
Hello, Are check lines in the "users" file short-circuit "AND" evaluated from left to right? Extrapolating this presumption out to radgroupcheck when using a MySQL database, are the check items evaluated simply in order of column id value (ie. the order they are returned from the SELECT)? authori