return a special value in reply when simultaneous use

Hello, I'm working with Freeradius 2.1.8 I'm using session (sql) to control simultaneous use. I would like to return a special value if an user try to access with credentials in use. Group session {...} always resturns ok, so I don't know what can I do in post-auth to distinguish between all re

Re: freeradius and ADSL-Agent-Circuit-Id

Johan Meiring wrote: > I'm 100% sure my syntax is wrong today (I'm not an unlang master yet), but > the idea should work. > > Opinions? Close. - You need to "update" a specific list. - you need double quotes around string values - the parser is *very* specific. Follow the examples in "man un

Re: freeradius and ADSL-Agent-Circuit-Id

On 2010/07/21 11:00 AM, Alan DeKok wrote: authorize { ... if (ADSL-Agent-Circuit-Id&& \ ("%{sql: select ...}")) { update control { Auth-Type := Accept } } else { reject

Re: PEAP/MSCHAPv2, Post-Auth-Type REJECT {} of inner-tunnel is neverentered for access reject

EAP-Message = 0x0206000a0174696d6532 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "time2" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info =

Re: freeradius and ADSL-Agent-Circuit-Id

Johan Meiring wrote: > I disagree with the logic slightly. > In my opinion it will also be rejected if ADSL-Agent-Circuit-Id does not > exist. Yes. It all depends on what you want. > As fas as I understand, the desireable result is: > If the ADSL-Agent-Circuit-Id does *not* exist, normal authe

AW: AW: AW: Freeradius XP Client without certificate

> I will look for a commercial certificate. We bought a certificate. I write the new cert name in the eap.conf and comment ca.pem out. But windows don’t get it. Radiusd -X do handshake, and all successful. The Server send access challenge but Windows don’t connect. - List info/subscribe/unsu

How to display Auth-type in th log

HI Is it possible to display type of authentication ( Auth-type ) that the clients used during the authentication ? Thank pet - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to allow group login on some devices?

Hiya... I've got a freeradius setup which is consulting LDAP quite happily, providing password logins for all our users to our wireless network. Which is lovely. :D Now, I'd like to set up our switches to use radius to allow our technicians to login. And they are all members of an LDAP group. Let

Re: AW: AW: AW: Freeradius XP Client without certificate

Lionne Stangier wrote: >> I will look for a commercial certificate. > > We bought a certificate. I write the new cert name in the eap.conf and > comment ca.pem out. But windows don’t get it. > > Radiusd -X do handshake, and all successful. The Server send access challenge > but Windows don’t co

Re: How to display Auth-type in th log

Jevos, Peter wrote: > Is it possible to display type of authentication ( Auth-type ) that the > clients used during the authentication ? In 2.1.9, see "msg_goodpass" in radiusd.conf. You can out anything you want in there. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freerad

Same user-name/password question

I am with the following question: I have two requests as follows: First: User-Name = "john" User-Password = "john" NAS-IP-Address = 200.xxx.xxx.10 NAS-Port = 0 Second: User-Name = "john" User-Password = "john" NAS-IP-Address = 202.xxx.xxx.200 NAS-

Documentation question

HELLO ALL! I am new to FreeRADIUS and I am looking for a good place to get some documentation. I know about the wiki and the .org site, but what I am looking for is somewhere I can get all of that info in a printable format, I am also interested if anyone knows of some good reference books. Than

Re: Documentation question

Sallee, Stephen (Jake) wrote: > I am new to FreeRADIUS and I am looking for a good place to get some > documentation. I know about the wiki and the .org site, but what I am > looking for is somewhere I can get all of that info in a printable > format, I am also interested if anyone knows of some g

SV: Same user-name/password question

Use the something uniq from each client together with the User-Name to match each specific client. Like: User-Name = "John", SOMEHTING = "ClientA" That SOMETHING could be Client-IP-Address or NAS-IP-Address if that is configurable on the Client side :) Best regards Jan Madsen Fra: freeradius-

Re: How to allow group login on some devices?

Martin Whinnery wrote: > Now, I'd like to set up our switches to use radius to allow our > technicians to login. And they are all members of an LDAP group. Let's > call it "cn=techies,ou=groups,dc=example,dc=org". I only want this to be > the case for some client devices, namely our switches. > >