howto stop one connection and start another

2010-06-23 Thread Spacelee
i use pptp and freeradius2+mysql the situation is : there is a user it set to be Simultaneous-Use := 1 when he login in his ipad, he watch some movie, then he want to login in his iphone, how can i stop his original connection and start another connection in freeradius? -- Spacelee - List info/su

freeradius 2.1.8, eap-tls with 3Com AccessPoint

2010-06-23 Thread Phanuphong Thipsuk
Hi, I've installed freeradius 2.1.8, eap-tls with 3Com Access point (3CRWE454G72). It's work fine. Unfortunately, window xp client have been disconnected/reconnected many time per day. and sometime, during it's trying to connect, I will see windows popup request the certificate as well. anyway, i

Re: Help connecting to remote ldap server

2010-06-23 Thread Riccardo Veraldi
Raymond Norton wrote: I successfully configured freeradius (version 1.x Ubuntu) to use ldap on a localhost via WPA. I am trying to setup version 2.1 (Ubuntu) to use a remote ldap server now. The module loads fine and I made what I believed were the correct changes to connect to the remote serve

Help connecting to remote ldap server

2010-06-23 Thread Raymond Norton
I successfully configured freeradius (version 1.x Ubuntu) to use ldap on a localhost via WPA. I am trying to setup version 2.1 (Ubuntu) to use a remote ldap server now. The module loads fine and I made what I believed were the correct changes to connect to the remote server, but I have missed s

Re: pam_auth_radius - fallback with localifdown?

2010-06-23 Thread Martin Richard
On Wed, Jun 23, 2010 at 4:13 AM, Alan DeKok wrote: > Double-check that it's returning PAM_IGNORE. Maybe source code mods > to syslog "RETURNING PAM_IGNORE". > > If it is returning PAM_IGNORE, then it's a PAM problem. Ask the > question again on the PAM list. > > Found my problem. The pam_

Re: pam_auth_radius - fallback with localifdown?

2010-06-23 Thread Martin Richard
On Wed, Jun 23, 2010 at 4:13 AM, Alan DeKok wrote: > > > I do not think pam_radius_auth is behaving wrongly - looking at the > > code is simple enough, I do get "All RADIUS servers failed to respond" > > in the SYSLOG, so it should clearly be returning PAM_IGNORE as > documented. > > Double-ch

Re: freeradius Kerberos config in users file ?

2010-06-23 Thread Riccardo Veraldi
thank you, now it is much more clear to me Rick Alan DeKok wrote: Riccardo Veraldi wrote: if I configure freeradius2 with krb5 authentication and I use the following users file, the authentication works using radtest DEFAULTAuth-Type := Kerberos See "man users" about the

Re: freeradius Kerberos config in users file ?

2010-06-23 Thread Alan DeKok
Riccardo Veraldi wrote: > if I configure freeradius2 with krb5 authentication and I use the > following users file, > the authentication works using radtest > > DEFAULTAuth-Type := Kerberos See "man users" about the ":=" operator. This *forces* Kerberos authentication. See also my w

Re: pam_auth_radius - fallback with localifdown?

2010-06-23 Thread Alan DeKok
Martin Richard wrote: > First off - if you think this doesnt belong here, just don't reply > instead of being caustic. There is no need to start a message off with that. > Thing is, it doesn't work... If I mess up /etc/raddb/server to change > the key, the host entry or whatever to make sur

freeradius Kerberos config in users file ?

2010-06-23 Thread Riccardo Veraldi
Hello, I have just a question. if I configure freeradius2 with krb5 authentication and I use the following users file, the authentication works using radtest DEFAULTAuth-Type := Kerberos but it fails using EAP (EAP-TTLS) telling USer-PAssword attribute is missing... rlm_ldap: lda

freeradius Kerberos config in users file ?

2010-06-23 Thread Riccardo Veraldi
Hello, I ahve jsut a question. if I configure freeradius2 with krb5 authentication and I use the following users file, the authentication works using radtest DEFAULTAuth-Type := Kerberos but it fails using EAP (EAP-TTLS) telling USer-PAssword attribute is missing... rlm_ldap: lda

Re: speed of detail reader server

2010-06-23 Thread Alan DeKok
Michael Fowler wrote: > The detail reader is serial in nature, meaning it will read a packet, > transmit it, and wait for a response. Upon receipt of an ack it will > repeat for the next packet. If you have any sort of latency on your > link you can easily get heavily backlogged. The serial na