Re: MLPPP Acct-Session-Id

2011-04-01 Thread Alan DeKok
Jay Kuhne (jkuhne) wrote: > Forgot to mention, also attempted with Acct-Multi-Session-Id, which was in > the accounting record but same result. I would say to ask the NAS manufacturer for a list of what they need in the CoA packet, but that doesn't seem to apply here. I'm not sure why CoA is

RE: Dial up error and freeraius is down

2011-04-01 Thread Robin
Hi, Thanks your suggestion. I will clean records from radacct and check my reporting system if it effect freeradius operations. Robin -Original Message- From: freeradius-users-bounces+freeradius=itpm@lists.freeradius.org [mailto:freeradius-users-bounces+freeradius=itpm@lists.fr

Re: Dial up error and freeraius is down

2011-04-01 Thread Fajar A. Nugraha
On Sat, Apr 2, 2011 at 9:20 AM, Robin wrote: > Hi, > > If I can understand it, my freeradius for some reason has slowed due to > response behind time? I don't understand what you mean by "my freeradius for some reason has slowed due to response behind time", but like Alan said, the cause of that

RE: Dial up error and freeraius is down

2011-04-01 Thread Robin
Hi, If I can understand it, my freeradius for some reason has slowed due to response behind time? Thanks. Robin -Original Message- From: freeradius-users-bounces+freeradius=itpm@lists.freeradius.org [mailto:freeradius-users-bounces+freeradius=itpm@lists.freeradius.org] On Behalf

Oracle reconnection for free radius

2011-04-01 Thread Jaikanth Krishnaswamy
Hi, I have setup free radius freeradius-server-2.1.10 with an oracle back end as suggested on in the documentation. Is there a setting for Oracle connectivity retries from the free- radius S/W ie. If Oracle Server is down does freeradius retry connection after a configurable amount of time?If so wh

Re: Dial up error and freeraius is down

2011-04-01 Thread Alan Buxey
Hi, > - Fri Apr 1 19:22:09 2011 : Error: Discarding duplicate request > from client mpth12 port 40039 - ID: 129 due to unfinished request 10524 > > - Fri Apr 1 19:22:10 2011 : Error: Discarding conflicting packet > from client mpth12 port 40039 - ID: 129 due to recent request

RE: Dial up error and freeraius is down

2011-04-01 Thread Robin
Actually, I think I have enough bandwidth to handle 500 users request. But I can't understand what reason due to the problem and report these info in log. Thanks. Robin -Original Message- From: freeradius-users-bounces+freeradius=itpm@lists.freeradius.org [mailto:freeradius-users-bo

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Phil Mayers
On 01/04/11 13:43, Thomas Wunder wrote: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] Found NT-Password [mschap] ERROR: User-Name (winmac\tom1) is not the same as MS-CHAP Name (tom1) from EAP-MSCHAPv2 What client are you using? It's sending: EAP-Identity use

RE: MLPPP Acct-Session-Id

2011-04-01 Thread Jay Kuhne (jkuhne)
Forgot to mention, also attempted with Acct-Multi-Session-Id, which was in the accounting record but same result. -Original Message- From: freeradius-users-bounces+jkuhne=cisco@lists.freeradius.org [mailto:freeradius-users-bounces+jkuhne=cisco@lists.freeradius.org] On Behalf Of

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Thomas Wunder
Hi, call it crude or whatever you want ;-) but that was my last resort: After fiddling with the code of rlm_mschap I found that all I need to do is to comment out line 1201 of rlm_mschap.c (where it says 'return RLM_MODULE_REJECT;') Maybe it has something to do with the conditions (which look a b

RE: Dial up error and freeraius is down

2011-04-01 Thread Mark Holmes
Hi, - Brand width is insufficient from pppoe server to radius server; - Server running radius of capability is insufficient. You don't say what bandwith etc you are on or what spec the server is, but unless it's pretty low end I'd be surprised if that was the issue if you only

Dial up error and freeraius is down

2011-04-01 Thread Robin
Hi Friends, I met a problem with FreeRADIUS2.1.9 (Mysql+centos, about 500 pppoe users)as below: In general, I found some users couldn't dial to radius and log information as below - Fri Apr 1 19:22:09 2011 : Error: Discarding duplicate request from client mpth12 port 40039 - ID:

Re: multiple authentication methods

2011-04-01 Thread Alan DeKok
Nick Kalen wrote: > looking at the docs, it looks like it's not possible to try to > authenticate against a local LDAP server and in case it failes send it > to another radius server? That won't work. Maybe in 3.0. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.or

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Phil Mayers
On 01/04/11 11:08, Thomas Wunder wrote: On Wednesday 30 March 2011 15:52:31 Phil Mayers wrote: First, there's no need to email me directly; I read the list. I totally agree with you I just missed to exchange the recipient address (and after noticing that i also sent it to the list)... sorry!

Re: sqlcounter & returning Gigawords?

2011-04-01 Thread YvesDM
On Fri, Apr 1, 2011 at 10:40 AM, Alan DeKok wrote: >  The latest version has rlm_expr, which is 64-bit clean.  You can use > it to split the counters into 32-bit pieces. > >  Alan DeKok. Tnx Alan, will check it out. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.htm

Re: same username different password on different NAS

2011-04-01 Thread Brian Candler
On Wed, Mar 16, 2011 at 01:16:22PM -0700, Richard Thornton wrote: >Without using virtual servers, is there a way to link the username >"manager" to the NAS name or IP of the location? Yep. I suggest you first map the NAS-IP-Address to a Huntgroup-Name (see the 'preprocess' module and 'hunt

Re: Installing to pfsense

2011-04-01 Thread Brian Candler
On Wed, Mar 30, 2011 at 06:37:59PM -0400, Franz wrote: >/usr/local/etc/raddb/sql.conf[22]: Instantiation failed for module >"sql" >/usr/local/etc/raddb/sites-enabled/inner-tunnel[131]: Failed to load >module "sql". >/usr/local/etc/raddb/sites-enabled/inner-tunnel[47]: Errors par

Re: freeradius 2.1.10 WARNING: Internal sanity check failed

2011-04-01 Thread Alan DeKok
joanroldan wrote: > I have followed your advise and I went back to the default config. I have > read the: > > http://deployingradius.com/documents/configuration/certificates.html > > And I have followed it step by step. Testing first the PAP auth with an > entry in users.conf and it worked fine.

Re: Question about authentication

2011-04-01 Thread Alan DeKok
matteo wrote: > Hello list, > suppose I want to authenticate a device capable of using PEAP with > EAP-MS-CHAP v2 or EAP-GTC and TTLS with EAP-MS-CHAP v2 or MS-CHAPv2 and > I have user password stored in LDAP (linux) with the crypt scheme and > freeradius server 2.1.9. > Is there any mechanism to s

Re: access challenge on empty password

2011-04-01 Thread izotov
http://freeradius.1045715.n5.nabble.com/file/n4275090/radius.log radius.log Fajar A. Nugraha-2 wrote: > > if you have a problem, post the output of > debug mode (radiusd -X) > I am sorry. I try to get the rhythm. Log is attached. -- View this message in context: http://freeradius.1045715.n5.n

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Thomas Wunder
On Wednesday 30 March 2011 15:52:31 Phil Mayers wrote: > First, there's no need to email me directly; I read the list. I totally agree with you I just missed to exchange the recipient address (and after noticing that i also sent it to the list)... sorry! > You *only* set: > with_ntdomain_hack =

Question about authentication

2011-04-01 Thread matteo
Hello list, suppose I want to authenticate a device capable of using PEAP with EAP-MS-CHAP v2 or EAP-GTC and TTLS with EAP-MS-CHAP v2 or MS-CHAPv2 and I have user password stored in LDAP (linux) with the crypt scheme and freeradius server 2.1.9. Is there any mechanism to successfully authentica

Re: version error rlm_exec module

2011-04-01 Thread Marinko Tarlac
I didn't have any problems with those files... If you installed FR from distro repo try to remove it with yum, apt-get, For ./configure, make, make install you can simple remove raddb dir... This work for me because I tried every combination for upgrade and downgrade On 4/1/2011 8:22

Re: freeradius 2.1.10 WARNING: Internal sanity check failed

2011-04-01 Thread joanroldan
Hi, I have followed your advise and I went back to the default config. I have read the: http://deployingradius.com/documents/configuration/certificates.html And I have followed it step by step. Testing first the PAP auth with an entry in users.conf and it worked fine. Next I add the Wireless LAN

Re: access challenge on empty password

2011-04-01 Thread Fajar A. Nugraha
On Fri, Apr 1, 2011 at 3:43 PM, izotov wrote: > > Alan DeKok-2 wrote: >> >>   Have you tried running the server in debugging mode as suggested in >> the FAQ, README, INSTALL, "man" page, and daily on this list? >> > > Yes, I always do so. But this time it did not help me to find the answer. I thi

Re: access challenge on empty password

2011-04-01 Thread izotov
Alan DeKok-2 wrote: > > Have you tried running the server in debugging mode as suggested in > the FAQ, README, INSTALL, "man" page, and daily on this list? > Yes, I always do so. But this time it did not help me to find the answer. -- View this message in context: http://freeradius.1045715

Re: sqlcounter & returning Gigawords?

2011-04-01 Thread Alan DeKok
YvesDM wrote: > We 're about to upgrade our radius which is still running 1.1.7 > We use monthly datalimits so we patched the sqlcounter in order to > make it reply max 4GB of left quota (to avoid wrapping), even if the > user still has 10GB quota left. > Of course this results in a logged out user

Re: Freeradius mysql acct copy

2011-04-01 Thread Alexander Kosykh
Is it right that my freeradius go down after home server was down? Regards, Alexander. 2011/3/31 Fajar A. Nugraha > On Thu, Mar 31, 2011 at 2:45 PM, Alexander Kosykh > wrote: > > > > Hi. > > > > I need to copy acct packets to my billing server and save acct in > standart freeradius radacct tab

Re: access challenge on empty password

2011-04-01 Thread Alan DeKok
izotov wrote: > I did not configure so (it must be a default). Where is that configuration > entry? Have you tried running the server in debugging mode as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.f

Re: access challenge on empty password

2011-04-01 Thread izotov
I did not configure so (it must be a default). Where is that configuration entry? -- View this message in context: http://freeradius.1045715.n5.nabble.com/access-challenge-on-empty-password-tp4273381p4274862.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subs