Re: Plz advice on a good captive portal for FreeRadius

2010-12-13 Thread Johan Meiring
On 2010/12/11 06:07 AM, Jayakrishnan wrote: Please advice me how to create a Captive portal with in the FreeRadius AAA server. Is it possible to use NoCatSplash and use FreeRadius Authentication and Authorization? Use CoovaChilli (Previously called chillispot) -- Johan Meiring Cape PC

Re: Freeradius COA trigger

2010-12-13 Thread Johan Meiring
On 2010/12/13 05:23 AM, Andrew Paternoster wrote: Hi Johan Do you mind sharing a copy of your COA triggers? In Perl (rlm_perl) - Where I make my decision to disconnect. --- if ($balance = 0) { $RAD_REPLY{'Tmp-String-0'} = 'DISCONNECT'; }; In my virtual server

RE: Break Stream disconnecting when use freeradius authentication.

2010-12-13 Thread Robin
Hi , I find issue user who use MPPE128 method all. (In my RouterOS, login user's encoding is MPPE128 statefull) Can I set freeradius to disable MPPE128 or other encryption method? Thanks. Robin -Original Message- From: freeradius-users-bounces+freeradius=itpm@lists.freeradius.org

FR 2.1.6 add realm to User-Name before Proxy by listening port

2010-12-13 Thread Mika
Hello. How would i go about configuring the following with FreeRadius 2.1.6? I need to change the User-Name attribute by adding a realm to it based on incoming listening port, before the Access-Request is proxied (Proxy-To-Realm) to backend server. Googled and found a way to do this with the

Re: FR 2.1.6 add realm to User-Name before Proxy by listening port

2010-12-13 Thread Phil Mayers
On 13/12/10 13:48, Mika wrote: Hello. How would i go about configuring the following with FreeRadius 2.1.6? I need to change the User-Name attribute by adding a realm to it based on incoming listening port, before the Access-Request is proxied (Proxy-To-Realm) to backend server. Easy, use

Re: ldap - edirectory authentication

2010-12-13 Thread Robert Koskey
Thanks for everyone's help on this. We got it to work, now using eap-peap. We truly believe it was using mschapv2 before, but cannot prove that to ourselves. Everytime something changes we learn much more than we knew before, so I guess that's a good thing. thanks again. robert Robert

Stop after mac auth

2010-12-13 Thread Rob Yamry
99% of my config authenticates against ldap. There are certain situations (mainly authenticating our old phones) where I need to have mac auth as well. Both methods are authenticating fine. The problem is that I would like for freeradius to not search ldap when the if ((Service-Type ==

Re: Stop after mac auth

2010-12-13 Thread Phil Mayers
On 13/12/10 15:03, Rob Yamry wrote: (output below), it runs the condition and regardless of the outcome it performs a search against ldap for the mac, which will always fail and causes unnecessary queries. How can I accomplish this? Use an else: if (...) { } else { ldap } - List

Re: Stop after mac auth

2010-12-13 Thread Rob Yamry
Perfect, thanks. if((Service-Type == 'Call-Check') || (User-Name =~ /^%{Calling-Station-ID}$/i)){ update control { Auth-Type := 'CSID' } } else{ ldap } - List info/subscribe/unsubscribe? See

vs ippoll configuration

2010-12-13 Thread Arne Larsen
Hi all. I*m new to freeradius and I'm trying to get it working with an pool af ip.addr. Can someone tell me how this works exactly. I can se that the pool is defined n the modules under freeradius2, and the declaration seems straight forward. But when I try to test the config with the

Новое сообщение

2010-12-13 Thread Vovan
http://samec.org.ua/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: vs ippoll configuration

2010-12-13 Thread Alan DeKok
Arne Larsen wrote: Hi all. I*m new to freeradius and I'm trying to get it working with an pool af ip.addr. Can someone tell me how this works exactly. Read raddb/modules/ippool I can se that the pool is defined n the modules under freeradius2, and the declaration seems straight

NAS-IP(v6)-Address = Packet-Src-IP(v6)-Address

2010-12-13 Thread Alexander Clouter
Hi, Since lighting up IPv6 on our FreeRADIUS infrastructure, I have noticed behaviour that seems to result in the following logic kicking off: authorize { ... update request { NAS-IPv6-Address= Packet-Src-IPv6-Address NAS-IP-Address = Packet-Src-IP-Address } ... }

Re: NAS-IP(v6)-Address = Packet-Src-IP(v6)-Address

2010-12-13 Thread Alan Buxey
Hi, suggest you read the mailing list archivestheres a post related to this particular attrbute - as I had an issue with the default config which does nasty things when theres no NAS IP address - ie if the packet comes from an IPv6 NAS or proxy - basically, the unique key and the detail logs

Is there some syntax or rules should I follow?

2010-12-13 Thread luis ramiro ochoa torres
Description of my Operating system: Ubuntu 9.10 Version 2.1.10. tar.gz of freeradius in the user file and remove some comments to add users, I've put everything you need, just do not know how to declare the MAC addresses to access let me alone with them, apart from the IP Is there some syntax or

Re: FreeRADIUS exiting with Signal 11 on FreeBSD

2010-12-13 Thread Scott Lambert
On Sun, Dec 12, 2010 at 02:14:25PM -0800, Danial wrote: I've been having the same problem for quite some time. I'm currently running FreeRADIUS 2.1.10 on i386 FreeBSD 8.1-RELEASE. Accounting packets are written file + two extra detail logs which are proxied. For me I think this Exiting

Re: syntax to discharge my mac Address

2010-12-13 Thread luis ramiro ochoa torres
apologize for the inconvenience, but I am doing along with some colleagues the installation of freeradius for a school project, which is why we all have this question, because we are beginners in the server and operating system and want to learn how to do it and could not move because it We

Re: syntax to discharge my mac Address

2010-12-13 Thread Gary Gatten
I don't really undertand your question, sorry. Are you trying to authenticate using your MAC address? If so there was a recent post with the correct syntax. From: freeradius-users-bounces+ggatten=waddell@lists.freeradius.org

[no subject]

2010-12-13 Thread Gilberto Uriostegui García
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Do get in some other file?

2010-12-13 Thread Gilberto Uriostegui García
hello my name is Gilberto Uriostegui, I'm new at this and am doing an internship in my teacher networks I have version 2.1.10. tar.gz freeradius I installed Ubuntu 9.10 freeradius first and unzipped and put into execution and let me open the port 1812, now I got into the user file to declare

Re: FreeRADIUS exiting with Signal 11 on FreeBSD

2010-12-13 Thread Danial
Scott Lambert wrote: What is logged in the 3 or 4 hundred lines before the exits? Any pattern in those messages? What is logged in /var/log/messages at those times? On the last exit, Des 12, NO entry is written in /var/log/messages. On Des 3 there were, in my case, signal 11 entries,

Re: FreeRADIUS exiting with Signal 11 on FreeBSD

2010-12-13 Thread Danial
Scott Lambert wrote: What is logged in the 3 or 4 hundred lines before the exits? Any pattern in those messages? What is logged in /var/log/messages at those times? On the last exit, Des 12, NO entry is written in /var/log/messages. On Des 3 there were, in my case, signal 11 entries,

Re: FreeRADIUS exiting with Signal 11 on FreeBSD

2010-12-13 Thread Hugh Blandford
Hi Scott, On 14/12/2010 11:21, Scott Lambert wrote: On Sun, Dec 12, 2010 at 02:14:25PM -0800, Danial wrote: I've been having the same problem for quite some time. I'm currently running FreeRADIUS 2.1.10 on i386 FreeBSD 8.1-RELEASE. Accounting packets are written file + two extra detail logs

Re: Plz advice on a good captive portal for FreeRadius

2010-12-13 Thread Jayakrishnan
Yes, I ma trying a captive portal on CoovaChilli, However it lacks documentations. I will try that out and get back to you. On Mon, Dec 13, 2010 at 1:30 PM, Johan Meiring jmeir...@pcservices.co.zawrote: On 2010/12/11 06:07 AM, Jayakrishnan wrote: Please advice me how to create a Captive