Re: Authentication Problem

2011-05-23 Thread john decot
Seems there. >select * from radcheck where username='bob'; +-+--+++-+ | id | username | attribute | op | value | +-+--+++-+ | 386 | bob| Expiration | := | 25 Jun 2011 | | 38

How to change "++[files] returns noop " into "++[files] returns reject"

2011-05-23 Thread thomas.dohl
Hi all, in the section "authorize" I include the module "file". (/etc/raddb/users) At the moment I get an noop if a user is not found in the file. How can I change it to return a reject, if a user is not found? Now: ++[files] returns noop Destination: ++[files] returns reject Thanks in advance

RE: Authentication Problem

2011-05-23 Thread Tim Sylvester
From: freeradius-users-bounces+tim.sylvester=networkradius@lists.freeradius.or g [mailto:freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freer adius.org] On Behalf Of john decot Sent: Monday, May 23, 2011 9:36 PM To: FreeRadius users mailing list Subject: Re: Authentication

Re: Authentication Problem

2011-05-23 Thread john decot
I have backup from working server but still not working Please find the log: success Log: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 52710, id=55, length=59 User-Name = "rajnish" User-Password = "rajnish123" NAS-IP-Address = x.x.x.x NAS-Port = 0 # Execut

Re: Authentication Problem

2011-05-23 Thread john decot
From: Fajar A. Nugraha To: FreeRadius users mailing list Sent: Tue, May 24, 2011 8:15:42 AM Subject: Re: Authentication Problem On Tue, May 24, 2011 at 9:20 AM, john decot wrote: > Hi , >I have been using freeradius-server-2.1.10 . Dialupadmin is using

Re: Authentication Problem

2011-05-23 Thread Fajar A. Nugraha
On Tue, May 24, 2011 at 9:20 AM, john decot wrote: > Hi , >    I have been using freeradius-server-2.1.10 . Dialupadmin is using for web > based administration. It was working fine till yesterday. I have changed > added attribute to check Max-All-Session.  Then I have face problem of >  No authent

Authentication Problem

2011-05-23 Thread john decot
Hi , I have been using freeradius-server-2.1.10 . Dialupadmin is using for web based administration. It was working fine till yesterday. I have changed added attribute to check Max-All-Session. Then I have face problem of No authenticate method (Auth-Type) found for the request: Rejecting

DHCP+radius

2011-05-23 Thread Umut Arus
Hi, I would like to MAC filtering on a DHCP system with LDAP. I think, radius may work as a DHCP server. There are some methods as radius proxy or some experimental ways. What is the best way to do MAC filtering? What is your suggestion? thanks, - List info/subscribe/unsubscribe? See http://www.

Re: Can't add a $ sign to the ldap search

2011-05-23 Thread Phil Mayers
On 05/23/2011 08:46 PM, Alexandros Gougousoudis wrote: Hi Phil, filter = "(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(uid=%{%{Stripped-User-Name}:-%{User-Name}}\$))" Don't do that. Instead try: filter = "(uid=%{mschap:User-Name})" Hm, this is not working. I also don't get the point, why

Re: Can't add a $ sign to the ldap search

2011-05-23 Thread Alexandros Gougousoudis
Hi Phil, filter = >> "(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(uid=%{%{Stripped-User-Name}:-%{User-Name}}\$))" >> > > Don't do that. Instead try: > > filter = "(uid=%{mschap:User-Name})" Hm, this is not working. I also don't get the point, why the username in mschap is mangled to have a $ or

Re: Authentication issues with Win7 and WPA/WPA2 Enterprise

2011-05-23 Thread Phil Mayers
On 05/23/2011 06:53 PM, Simon L. wrote: Please have a look at my new, attached debug log. The server you are proxying to sends a reject. Fix that server. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authentication issues with Win7 and WPA/WPA2 Enterprise

2011-05-23 Thread Simon L.
Hi again, now i got a real Problem. >>> >>> ... >>> >>> The debug you sent contains no reject. Please send a debug for this case. >>> >> >> > I will generate a separate log for the WPA2 scenario soon. > > I have no problems with WPA/2 and local authentication anymore. But now I

Re: Can't add a $ sign to the ldap search

2011-05-23 Thread Phil Mayers
On 05/23/2011 01:07 PM, Alexandros Gougousoudis wrote: Hi, I tried to change the ldap-searchfilter in the ldap module, to search for a username "user" and "user$" in LDAP, if "user" is given. This is neccecary to authenticate my workstations and users via LDAP. This is my filter definition in t

Re: freeradius redundancy

2011-05-23 Thread Alexander Clouter
Student University wrote: > > i need to deploy two redundant Freeradius servers , > > anyone have like experience to share ,,, > If your network topology can support it (speak to your network sysadmin) then you can get "the ether" to do the failover/high-availability without having to buy an

Re: Login access-request results to syslog

2011-05-23 Thread Alan DeKok
Angel L. Mateo wrote: ... > reference = "%{%{Packet-Type}:-format}" Which is *always* the request packet. Use %{reply:Packet-Type} for the reply. You'll have to find a way to switch the reference based on request or reply. Maybe configure two versions of the "linelog" module. Ala

Can't add a $ sign to the ldap search

2011-05-23 Thread Alexandros Gougousoudis
Hi, I tried to change the ldap-searchfilter in the ldap module, to search for a username "user" and "user$" in LDAP, if "user" is given. This is neccecary to authenticate my workstations and users via LDAP. This is my filter definition in the ldap module: filter = "(|(uid=%{%{Stripped-User-Name

Can't add a $ sign to the ldap search

2011-05-23 Thread Alexandros Gougousoudis
Hi, I tried to change the ldap-searchfilter in the ldap module, to search for a username "user" and "user$" in LDAP, if "user" is given. This is neccecary to authenticate my workstations and users via LDAP. This is my filter definition in the ldap module: filter = "(|(uid=%{%{Stripped-User-Name

Re: freeradius redundancy

2011-05-23 Thread Fajar A. Nugraha
On Mon, May 23, 2011 at 5:16 PM, Student University wrote: > Hi , > > i need to deploy two redundant Freeradius servers , > > anyone have like experience to share ,,, Er... just do it (r)? Seriously, just try it yourself with the help of existing documentation (default config file, man page, wik

Login access-request results to syslog

2011-05-23 Thread Angel L. Mateo
XXXx" User-Name = "" User-Password = "X" Service-Type = Login-User server sistemas { +- entering group authorize {...} [sistemas_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/sistemas_log-%Y%m%d -> /var/log

freeradius redundancy

2011-05-23 Thread Student University
Hi , i need to deploy two redundant Freeradius servers , anyone have like experience to share ,,, Thanks in Advance ,,, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html