Re: Freeradius-Users Digest, Vol 63, Issue 97

2010-07-28 Thread ping
I constently get this error: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user why? On 07/28/2010 08:07 AM, freeradius-users-requ...@lists.freeradius.org wrote: Send Freeradius-Users mailing list submissions to freeradius-users@lists.freerad

/etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812

2010-07-28 Thread Edi Sujono
Dear sir, I had installed freeradius on ubuntu 9.04, but got an error when applying the command : freeradius -X the result of freeradius -X command as per attachement file. Your attention and help would be highly appreciated. Thanks & best regards, Edi Sujono FreeRADIUS Version 2.1.0, for ho

Re: /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812

2010-07-28 Thread Alan Buxey
Hi, > Failed binding to socket: Address already in use > /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812 fairly obvious - somethings already running on that port. suggest that the system is already starting the daemon... use the system scripts to stop the process (

Re: /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812

2010-07-28 Thread Edi Sujono
--- Pada Rab, 28/7/10, Alan Buxey menulis: > Dari: Alan Buxey > Judul: Re: /etc/freeradius/radiusd.conf[236]: Error binding to port for > 0.0.0.0 port 1812 > Kepada: "FreeRadius users mailing list" > > Cc: "Edi Sujono" > Tanggal: Rabu, 28 Juli, 2010, 6:01 PM > Hi, > > > Failed binding to s

Re: Freeradius-Users Digest, Vol 63, Issue 97

2010-07-28 Thread John Dennis
Please use proper etiquette on this list. Do not reply to digests (it plays havoc with threading). Do properly quote relevant material and trim the irrelevant material. Thank you. -- John Dennis Looking to carve out IT costs? www.redhat.com/carveoutcosts/ - List info/subscribe/unsubscribe? S

Re: incorrect auth-type

2010-07-28 Thread Alan DeKok
Sallee, Stephen (Jake) wrote: > You will see that the user is found and authenticated by the > "ntlm_auth_Cru" module, however the user is still rejected bec the > server says no auth-type was configured for the request. Any help is > appreciated. Yes, because you didn't put the configuration i

Re: Passing variables from inner tunnel

2010-07-28 Thread Alexander Clouter
Hi, newtownz wrote: > > I'm trying to pass the value of LDAP-UserDn from the inner-tunnel > to the default server. I have read unlang and also tried many combinations > including update outer.control from the inner tunnel and nothing worked... > I'm pretty sure I saw this too and (was some time

Re: Error: ASSERT FAILED threads.c[406]

2010-07-28 Thread Boian Jordanov
On Jul 26, 2010, at 8:00 PM, Meyers, Dan wrote: > and what's happening in > the perl is still something I need to investigate (and is probably > thread related), or should the fix also stop me getting unresponsive > children in the perl accounting method? Using threaded perl with DB is a little

Re: Passing variables from inner tunnel

2010-07-28 Thread newtownz
Hi, Thank your for your answer. >Just return User-Name in the reply and do a repeat LDAP query on your >outer layer; doing a 'cn' lookup should be instantaneous... I'm a little puzzled on how to accomplish this! Regards Jean -- View this message in context: http://old.nabble.com/Passing-va

Proxying creates 200 Attributes resulting in DoS warning

2010-07-28 Thread Marius Pesé
After spending some more time on our FreeRadius2 project it managed once again to leave me clueless. The error message: WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in request (received 201, max 200 are allowed). Googleing showed that it most likely is the result o

Re: Proxying creates 200 Attributes resulting in DoS warning

2010-07-28 Thread Alan DeKok
Marius Pesé wrote: > After spending some more time on our FreeRadius2 project it managed once > again to leave me clueless. The error message: > > WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in > request (received 201, max 200 are allowed). See the "security" sec

Re: Passing variables from inner tunnel

2010-07-28 Thread Alan DeKok
newtownz wrote: > Hi, > > Thank your for your answer. > >> Just return User-Name in the reply and do a repeat LDAP query on your >> outer layer; doing a 'cn' lookup should be instantaneous... > > I'm a little puzzled on how to accomplish this! In the "inner-tunnel" virtual server: authorize

Re: Passing variables from inner tunnel

2010-07-28 Thread newtownz
Hi, I think I understand the problem here, there are multiple request done to freeradius in the process of authenticating the user and since I'm trying to access the variable that was set in the previous request it is simply empty... Jean -- View this message in context: http://old.nabble.com

Re: Passing variables from inner tunnel

2010-07-28 Thread newtownz
HI, Since I need to have the LDAP-UserDn in the post-auth section of the default-server is there a way to execute a LDAP query in this part? Jean -- View this message in context: http://old.nabble.com/Passing-variables-from-inner-tunnel-tp29279811p29287788.html Sent from the FreeRadius - User

Solaris 10 1.13 FreeRadius

2010-07-28 Thread Kory Wheatley
Will LDAP failover work on Solaris 10 with FreeRadius 1.1.3 ? This is the default that comes with Solaris or do we need to upgrade FreeRadius. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius-Users Digest, Vol 63, Issue 95

2010-07-28 Thread Tom Leach
Alan, changing from User-Password to Password-With-Header brought back the 'No "known good" password' error. I'm going through the rlm_pap.c code to try to see what's going on here. I haven't found any docs yet on what the various mapping possibilities are and what they do. Do you have a p

Re: Another LDAP/RADIUS integration problem.

2010-07-28 Thread Tom Leach
Grr, off on a goose chase. Problem isn't in rlm_pap.c, but rlm_ldap.c. rlm_ldap only likes the Cleartext-Password and User-Password attributes. Would it be a bad thing to patch rlm_ldap.c to also work with Password-With-Header? If not, then I guess I'll have to use User-Password in the ldap

Re: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Mike
Johan Meiring wrote: On 2010/07/21 11:00 AM, Alan DeKok wrote: authorize { ... if (ADSL-Agent-Circuit-Id&& \ ("%{sql: select ...}")) { update control { Auth-Type := Accept } } else { reject } } I disagree with the logic sli

RE: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Tim Sylvester
Try the following: Add this to the top of the Authorize section: authorize { if ADSL-Agent-Circuit-Id { update request { User-Name := "%{ADSL-Agent-Circuit-Id}" User-Password := "%{ADSL-Agent-Circuit-Id}"

send radius response without request

2010-07-28 Thread Sallee, Stephen (Jake)
Is it possible to have FreeRADIUS send a radius response without first receiving a request, provided I can feed it the same information the request would have? OR Is it possible for FreeRADIUS to see the request come from one host and have the response go to another? Jake Sallee Godfather Of Ban

Re: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Mike
Tim Sylvester wrote: Try the following: Add this to the top of the Authorize section: if ADSL-Agent-Circuit-Id { update request { User-Name := "%{ADSL-Agent-Circuit-Id}" User-Password := "%{ADSL-Agent-Circuit-Id}"

RE: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Tim Sylvester
> Tim Sylvester wrote: > > Try the following: > > > > Add this to the top of the Authorize section: > > > > > > if ADSL-Agent-Circuit-Id { > > update request { > > User-Name := "%{ADSL-Agent-Circuit-Id}" > > User-Password :