Re: Symbol Perl_hv_undef_flags problem using rlm_perl

2011-09-01 Thread Boian Jordanov
On Aug 30, 2011, at 12:06 PM, david.suarezde...@telefonica.es wrote: in libperl.a. I include the complete output of radiusd -X below with both Did you compile perl with support for libperl.so ? Best Regards, Boian Jordanov Head of Voice Department tel. +359 2 4004 723 tel. +359 2 4004 002

Re: EAP-TLS/PEAP authentication problem(can not reply correctattribute)

2011-09-01 Thread gary
Hi Arran I do not define my private attribute while I follow the WISPr such as Bandwidth-Max-Up and Bandwidth-Max-Down. It is no problem that I use UAM method(user login with login page by user name/password) and freeradius can reply correct attribute. But when I use PEAP authentication,after

Re: Pre release of 2.1.12

2011-09-01 Thread Stefan Winter
Hi, it's now running on our most busy server. Both -X and background-multithreaded do their usual job. I do not see any problems so far. That said, I was at that point with 2.1.11 as well, and it caught fire after 48+ hours only. So, there might still be surprises. I'll keep it running under

Re: Freeradius-Users Digest, Vol 77, Issue 1

2011-09-01 Thread david . suarezdelis
Hi, Date: Thu, 1 Sep 2011 10:59:32 +0300 From: Boian Jordanov bjorda...@orbitel.bg On Aug 30, 2011, at 12:06 PM, david.suarezde...@telefonica.es wrote: in libperl.a. I include the complete output of radiusd -X below with both Did you compile perl with support for libperl.so ? Yes,

AW: Using rlm_passwd as a substitute for hunt groups

2011-09-01 Thread Jan . Weiss
Hi, I made further tests, and (imho) it seems that rlm_passwd can´t handle IP-Addresses. In my setup the module is able to assign My-Device-Group when searching for: -User-Name -User-Password -NAS-Port But not when searching for NAS-IP-Address :-( I´m using freeradius2-2.1.7-7.el5 Jan - List

Re: Pre release of 2.1.12

2011-09-01 Thread Alexander Clouter
Alan DeKok al...@deployingradius.com wrote: I've put some pre releases of 2.1.12 on the web site: http://git.freeradius.org/pre/ Priming up my end for a burn in... Cheers -- Alexander Clouter .sigmonster says: And on the seventh day, He exited from append mode. - List

Re: AW: Using rlm_passwd as a substitute for hunt groups

2011-09-01 Thread Alan DeKok
jan.we...@t-systems.com wrote: I made further tests, and (imho) it seems that rlm_passwd can´t handle IP-Addresses. In the changelog for 2.1.10: * Allow passwd module to map IP addresses, too. I´m using freeradius2-2.1.7-7.el5 Upgrade. Alan DeKok. - List

Re: EAP-TLS/PEAP authentication problem(can not reply correctattribute)

2011-09-01 Thread Alan DeKok
gary wrote: I do not define my private attribute while I follow the WISPr such as Bandwidth-Max-Up and Bandwidth-Max-Down. It is no problem that I use UAM method(user login with login page by user name/password) and freeradius can reply correct attribute. But when I use PEAP

Re: Special WIFI Router MAC check for the user's first connection. (Tom)

2011-09-01 Thread 2394263740
Phil, Thanks a lot for your great help. I understand the scripts you wrote. But I don't know where I should put it in. Can you please kindly advise which file I should edit? /usr/local/etc/raddb/sites-available/default? Where I should put the scripts you wrote previously? The

Re: Special WIFI Router MAC check for the user's first connection. (Tom)

2011-09-01 Thread Arran Cudbard-Bell
On 1 Sep 2011, at 15:40, 2394263740 wrote: Phil, Thanks a lot for your great help. I understand the scripts you wrote. But I don't know where I should put it in. Can you please kindly advise which file I should edit? /usr/local/etc/raddb/sites-available/default? Yes in the

[no subject]

2011-09-01 Thread det.explo...@yahoo.com
Hi, Is it possible to proxy based on a group the user belongs to? Or attribute? Or based on NAS from where the request was received? Aside from REALM, is there any other criteria that can be used to decide whether or not to proxy a request? Thanks, Det - List info/subscribe/unsubscribe? See

Proxying Based on Criteria Other Than REALM

2011-09-01 Thread det.explo...@yahoo.com
From: det.explo...@yahoo.com det.explo...@yahoo.com Date: September 1, 2011 9:51:33 PM GMT+08:00 To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Hi, Is it possible to proxy based on a group the user belongs to? Or attribute? Or based on NAS from where the

Re:

2011-09-01 Thread Arran Cudbard-Bell
On 1 Sep 2011, at 15:51, det.explo...@yahoo.com wrote: Hi, Is it possible to proxy based on a group the user belongs to? Or attribute? Or based on NAS from where the request was received? Aside from REALM, is there any other criteria that can be used to decide whether or not to proxy

Re: Proxying Based on Criteria Other Than REALM

2011-09-01 Thread Phil Mayers
On 01/09/11 14:53, det.explo...@yahoo.com wrote: Hi, Is it possible to proxy based on a group the user belongs to? Or attribute? Or based on NAS from where the request was received? Aside from REALM, is there any other criteria that can be used to decide whether or not to proxy a request?

Re: Special WIFI Router MAC check for the user's first connection (Tom)

2011-09-01 Thread 2394263740
://lists.freeradius.org/pipermail/freeradius-users/attachments/20110901/83b490af/attachment.html -- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 77, Issue 3

How to update a MySql table after successfully WIFI authentication?

2011-09-01 Thread 2394263740
Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql I got a WIFI network, using one radius server. The whole thing works fine. I got a requirement, which is, after each successful

Re: How to update a MySql table after successfully WIFI authentication?

2011-09-01 Thread Arran Cudbard-Bell
Look in raddb/sql/mysql/dialup.conf The postauth query is the one you need to edit. Then uncomment the 'sql' module in raddb/sites-available/default post-auth { } -Arran Arran Cudbard-Bell a.cudba...@freeradius.org RADIUS - Half the complexity of Diameter - List

Re: Example configuration that proxy PEAP MSCHAPv2 to an IAS server

2011-09-01 Thread Jacob Dawson
It's largely successful, but as I mentioned in my note to this group from the 29th, I've run into problems with Windows clients having a disagreement with FreeRADIUS about the final stages of the PEAP-MSCHAPv2 conversation, after IAS has authenticated them successfully. - Jacob On 31 Aug

Using encrypted passwords in users file

2011-09-01 Thread sundoo
Hello, I'm new to FreeRadius and to linux. Maybe this question will sound stupid, but I really need you help. I have a server running freeradius. These are some outputs of the configuration: *etc/freeradius/radiusd.conf* # passwd = /etc/passwd shadow = /etc/shadow # group = /etc/group

cisco 3825 authentication error

2011-09-01 Thread Dom
I am trying to terminate vpdn sessions through our cisco 3825 using freeradius. I am new to this whole process and I was hoping to get some assistance with the missing configuration. Below is the error message I am receiving when trying to authenticate via the router. rad_recv:

Re: Using encrypted passwords in users file

2011-09-01 Thread Paul Bartell
that is the hashed password. You can change it by generating a hash of your new password... you would probably use crypt(3) to do that... The original password was never stored in cleartext form. You could store a cleartext password if you really wanted to, but that is less than secure. On Thu,

Re: Pre release of 2.1.12

2011-09-01 Thread Alan Buxey
Hi, it's now running on our most busy server. Both -X and background-multithreaded do their usual job. I do not see any problems so far. its on one of our production servers and on a couple of other systems. alan - List info/subscribe/unsubscribe? See

Re: Proxying Based on Criteria Other Than REALM

2011-09-01 Thread Det Det
Hey thanks! :) From: Phil Mayers p.may...@imperial.ac.uk To: freeradius-users@lists.freeradius.org Sent: Thursday, September 1, 2011 10:04 PM Subject: Re: Proxying Based on Criteria Other Than REALM On 01/09/11 14:53, det.explo...@yahoo.com wrote: Hi, Is

rlm_eap: SSL error

2011-09-01 Thread Chad Rebuck
Can someone point me in the right direction on figuring this out? I'm running Arch linux and I installed via pacman -S freeradius. I didn't edit any config files yet. [root@pogo /]# uname -a Linux pogo 2.6.39-ARCH #2 PREEMPT Mon Jul 11 14:08:22 MDT 2011 armv5tel Feroceon 88FR131 rev 1 (v5l)

Re: rlm_eap: SSL error

2011-09-01 Thread Alan DeKok
Chad Rebuck wrote: Can someone point me in the right direction on figuring this out? I'm running Arch linux and I installed via pacman -S freeradius. I didn't edit any config files yet. It's supposed to build the various cert files the first time it's booted. If that isn't happening

Help: Error in PEAP configuration

2011-09-01 Thread Andrei M. Castillo
Hi guys, I encountered this error when starting radiusd -X trying to make it work with peap. Can you help me fix this or give me an idea how to? Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap