Re: SSH - No authenticate method (Auth-Type)

2011-02-23 Thread Alan DeKok
Jaikanth Krishnaswamy wrote: > Setup a second ssh for the SFTP only > Updated the sshd_config for using PAM. > Request comes to AAA and fails as shown in the logs below. > Also note teh password shows as *"\010\n\r\177INCORRECT"* SSH has replaced the password with that text. There is *nothing*

Re: store and proxy accounting packets

2011-02-23 Thread Alan DeKok
Waqas Toor wrote: > but what to do to get accounting to other client, Also if that fails > is it going to create detail files ? Did you bother *reading* the "robust-proxy-accounting" file? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: non-standard authentication

2011-02-23 Thread Alan DeKok
Travis Dimmig wrote: > I have a problem scenario where I need to be able to handle the > authentication of users myself. I am looking into using either rlm_perl > or (preferably) rlm_jradius to be able to write my own piece to do > authentication. Or just an external program. > I believe this

RE: Freeradius 2 and periodic accounting updates

2011-02-23 Thread Andrew Paternoster
Hi Matt I'm not sure what your question is then? I had some custom stuff I did with Daloradius and store procedures to make it work for our dsl setup. Email me and I will dig it up and send it to you. (Its more Daloradius related then freeradius related. and...@screwloose.com.au Thank you An

RE: non-standard authentication

2011-02-23 Thread Gary Gatten
Again, no expert here, but as I understand it you simply "plugin" your auth process/module (Travis_Auth) to an existing FR Auth method. Travis_Auth does whatever logic you wish and returns Accept, Reject, OK, whatever - I'm not sure what the return option are or NEED to be. In your case I THIN

RE: non-standard authentication

2011-02-23 Thread Travis Dimmig
I mixed up some terms between freeRadius and JRadius (my first attempt to accomplish this used rlm_jradius). The term 'listener' is specific to what I was trying to accomplish with JRadius. I also neglected to mention the important fact that I need to accomplish authentication specifically for

RE: non-standard authentication

2011-02-23 Thread Gary Gatten
I'm CERTAINLY no expert in this, but I can hopefully point you in the right direction. There is some doc within the FR install (and the Wiki I think) about writing your own "modules" - I think this is what you want. Although, I think you can do pretty much anything with rlm_perl and unlang, bu

non-standard authentication

2011-02-23 Thread Travis Dimmig
I have a problem scenario where I need to be able to handle the authentication of users myself. I am looking into using either rlm_perl or (preferably) rlm_jradius to be able to write my own piece to do authentication. I believe this is possible with either module (please correct me if I'm wro

Re: store and proxy accounting packets

2011-02-23 Thread Waqas Toor
Thanks Alan, but what to do to get accounting to other client, Also if that fails is it going to create detail files ? On Wed, Feb 23, 2011 at 6:27 PM, Alan DeKok wrote: > Waqas Toor wrote: >> I want to store accounting packets to local database and proxy same >> accounting packet to some other

Re: Unknown CA errors

2011-02-23 Thread Alan Buxey
Hi, > In my eap.conf I see the following: > # This parameter is used only for EAP-TLS, > # when you issue client certificates. If you do > # not use client certificates, and you do not want > # to permit EAP-TLS authentic

Unknown CA errors

2011-02-23 Thread Harry Hoffman
Hi All, I see a similar thing mentioned in the mailing list but I'm unsure why this is happening. In my eap.conf I see the following: # This parameter is used only for EAP-TLS, # when you issue client certificates. If you do # not use client cer

Re: SSH - No authenticate method (Auth-Type)

2011-02-23 Thread Jaikanth Krishnaswamy
What I am trying to setup is as follows 1. Oracle Backend for Authenticating SFTP Clients( openssh ) What I have done so far Setup a second ssh for the SFTP only Updated the sshd_config for using PAM. Request comes to AAA and fails as shown in the logs below. Also note teh password shows as *"\01

Counting network traffic

2011-02-23 Thread Sven Fein
Hi all,I have a question in terms of counting traffic with a free radius server.First of all I try to describe what I want to realize.I created with vmware a virtual machine running with Linux Suse.On this operating system I installed the freeradius server.But now to my problem I want to set up

Re: Logging the matched SQL-Group

2011-02-23 Thread Phil Mayers
On 23/02/11 13:31, Brian Candler wrote: When rlm_sql is running through each of a user's groups, the value %{SQL-Group} is set for each iteration. However it's cleared at the end. I assume you're talking about the "authorize" method where it searches radgroupcheck/radgroupreply, rather than:

Logging the matched SQL-Group

2011-02-23 Thread Brian Candler
When rlm_sql is running through each of a user's groups, the value %{SQL-Group} is set for each iteration. However it's cleared at the end. I would like to be able to capture the value of SQL-Group which was successfully matched (if any), so that I can log it in rlm_sql_log. Is there a straightfo

Re: store and proxy accounting packets

2011-02-23 Thread Alan DeKok
Waqas Toor wrote: > I want to store accounting packets to local database and proxy same > accounting packet to some other accounting listener server. > I couldn't make sense out of copy-acct-to-home-server that where I can > define the other accounting listening server. > > also if I use robust-pr

store and proxy accounting packets

2011-02-23 Thread Waqas Toor
Hello Community, I want to store accounting packets to local database and proxy same accounting packet to some other accounting listener server. I couldn't make sense out of copy-acct-to-home-server that where I can define the other accounting listening server. also if I use robust-proxy-accounti