FreeRadius + AD + Realms

2010-06-30 Thread Matthew P
Hello everyone! I'm new to FreeRadius, so please bear with me. :) Goal: Make FreeRadius look-up a user in ActiveDirectory if he has mydomain.com domain. Used method: EAP/TTLS (PAP in the tunnel) This is how I've done it, but it doesn't give the wanted results, so please explain a bit. :) (it

Re: Expanding Suffix or Realm attributes

2010-06-30 Thread Alan DeKok
Rob Turner wrote: The regex realm would work if I could use the Suffix or Realm attribute from something like the check or control list rather than ~.\2a\5c.\2a\5c.\2a$ This was fixed in 2.1.9. See the changelog on www.freeradius.org. Alan DeKok. - List info/subscribe/unsubscribe? See

Netmask HowTo

2010-06-30 Thread loki
Greets, I have the following setup: freeradius 2.0.5 with sqlippool. Now my question: How can I setup radius to get it's netmask from sqlippool based on the pool name. For instance. I have two pools named pool1 and pool2 in mysql. Now on pool1 I want to have the netmask 255.255.255.128 and

Re: FreeRadius + AD + Realms

2010-06-30 Thread Alan DeKok
Matthew P wrote: I'm new to FreeRadius, so please bear with me. :) Good questions are a very good start. Goal: Make FreeRadius look-up a user in ActiveDirectory if he has mydomain.com domain. Used method: EAP/TTLS (PAP in the tunnel) This is how I've done it, but it doesn't give the

Re: originate-coa virtual server

2010-06-30 Thread Alan DeKok
Ben Wiechman wrote: The originate-coa virtual server includes a switch condition using the Response-Packet-Type attribute in the post-proxy section. However this attribute is not populated for responses to coa or disconnect requests. The Packet-Type attribute is populated in the proxy-reply

RE: originate-coa virtual server

2010-06-30 Thread Ben Wiechman
Is the lack of information in the Response-Packet-Type attribute expected in a response to a coa or disconnect request and the switch should be updated to use %{proxy-reply:Packet-Type} (this does work) or should the Response-Packet-Type attribute be populated for a response to a coa or

Detail accounting by REalm

2010-06-30 Thread BELLIERE Eric
Dears, I have a Proxy radius which send authentication and accounting to other radius. I would like to have a copy of these accounting data locally. This is already working in the detail file. Now I am trying to make a file by realm proxyied. I have try this and works but I need to

Failed disabling Core Dumps on RHEL - SELinux Updates

2010-06-30 Thread Ben Wiechman
A note for those that may run into this as well. When updating FR to 2.1.9 on RHEL/CentOS with SELinux enabled FreeRADIUS would log the following when it was started: Wed Jun 2 16:19:57 2010 : Error: Failed disabling core dumps: Permission denied To resolve I had to install the following

Re: Newbee question

2010-06-30 Thread Alan DeKok
Maria Sanchez wrote: For example an Admin role that indicates to an application what are the actions the user can perform. OK. Is this role for use by a real client, i.e. *not* radclient? Yes. I have an application that authenticates the user with Radius and then gets the set of

Re: Detail accounting by REalm

2010-06-30 Thread Alan DeKok
BELLIERE Eric wrote: Now I am trying to make a file by realm proxyied. You can use the Realm name in the detail filename. That's why the filename is configurable in the detail module. I have try this and works but I need to specify the exact realm. Is it a way to configure a expression

Re: Failed disabling Core Dumps on RHEL - SELinux Updates

2010-06-30 Thread Alan DeKok
Ben Wiechman wrote: A note for those that may run into this as well. When updating FR to 2.1.9 on RHEL/CentOS with SELinux enabled FreeRADIUS would log the following when it was started: Wed Jun 2 16:19:57 2010 : Error: Failed disabling core dumps: Permission denied To resolve I had to

Re: Failed disabling Core Dumps on RHEL - SELinux Updates

2010-06-30 Thread John Dennis
On 06/30/2010 10:29 AM, Ben Wiechman wrote: A note for those that may run into this as well. When updating FR to 2.1.9 on RHEL/CentOS with SELinux enabled FreeRADIUS would log the following when it was started: Wed Jun 2 16:19:57 2010 : Error: Failed disabling core dumps: Permission denied

RE: Failed disabling Core Dumps on RHEL - SELinux Updates

2010-06-30 Thread Ben Wiechman
Despite the fact that this was against 2.1.9, not the freeradius2 rpm that is available with RHEL? Ben -Original Message- From: freeradius-users- bounces+wiechman.lists=gmail@lists.freeradius.org [mailto:freeradius-users- bounces+wiechman.lists=gmail@lists.freeradius.org] On

Re: Detail accounting by REalm

2010-06-30 Thread Alan Buxey
Hi, I would like to make an expression to replace abc.be and abcnet.be so only one line is nacessary (like realm == ~abc$) ? regex stuff? (realm =~ /~abc[a-zA-Z_]+?\.be/i) ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Failed disabling Core Dumps on RHEL - SELinux Updates

2010-06-30 Thread John Dennis
On 06/30/2010 03:06 PM, Ben Wiechman wrote: Despite the fact that this was against 2.1.9, not the freeradius2 rpm that is available with RHEL? Yes. It's a policy problem and it needs to get fixed. We'll eventually ship 2.1.9 or the core dump fix back ported to an earlier version, it would be

Re: Failed disabling Core Dumps on RHEL - SELinux Updates

2010-06-30 Thread Alan Buxey
Hi, Yes. It's a policy problem and it needs to get fixed. We'll eventually ship 2.1.9 or the core dump fix back ported to an earlier version, it would be nice to know the SELinux policy would just support it when we do ship it. For those like yourself who built 2.1.9 wouldn't it be nice

ntlm_auth fails for none domain

2010-06-30 Thread John
Hi,    We are using freeRADIUS talk to multiple ADs integration.  I updated my freeRADIUS from 1.1.6 to 2.1.9 recently.   xjtu is our default domain, for users under this domain will only use username to authenticate to RADIUS. With 1.1.6, it will get xjtu as domain; But with 2.1.9, it will