Re: LDAP/MSCHAP

2011-11-11 Thread Phil Mayers
On 11/10/2011 11:36 PM, Sallee, Stephen (Jake) wrote: Please forgive the interjection, but does anyone know of a helper module like ntlm_auth that would work with LDAP, seems like such a tool would make questions like this a non-issue. MSCHAP is a challenge-response mechanism. To execute the

Re: Removing domain prefix from login

2011-11-11 Thread Phil Mayers
On 11/11/2011 07:46 AM, Alejandro Gandara wrote: I got erros anyways. I've attached debug output The debug output didn't make it through; I guess it was too big. Use a pastebin, or put it inline in the email? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: LDAP/MSCHAP

2011-11-11 Thread Phil Mayers
On 11/11/2011 01:29 AM, Gary Gatten wrote: I agree with Jake, in that I *think* it would be possible to have a plugin or whatever interface with LDAP/AD in the same manner ntlm_auth does. I don't think one *needs* a cleartext password, but To quote from the other email I just sent: People

Re: LDAP/MSCHAP

2011-11-11 Thread Alan DeKok
Whitlow, Michael wrote: I am really close to a successful Freeradius implementation for 802.1X wireless using LDAP authentication on the back end. Are you sure the backend is LDAP, and not AD? It it's AD, see my web page: http://deployingradius.com It has complete instructions for

Re: LDAP/MSCHAP

2011-11-11 Thread Alan DeKok
Gary Gatten wrote: I agree with Jake, in that I *think* it would be possible to have a plugin or whatever interface with LDAP/AD in the same manner ntlm_auth does. It's possible to have a plugin, but there is no benefit. FreeRADIUS already has an LDAP plugin. The *only* reason for

Re: Removing domain prefix from login

2011-11-11 Thread Alejandro Gandara
2011/11/11 Phil Mayers p.may...@imperial.ac.uk On 11/11/2011 07:46 AM, Alejandro Gandara wrote: I got erros anyways. I've attached debug output The debug output didn't make it through; I guess it was too big. Use a pastebin, or put it inline in the email? this is the short view:

Re: Removing domain prefix from login

2011-11-11 Thread Phil Mayers
On 11/11/11 09:52, Alejandro Gandara wrote: this is the short view: [peap] The users session was previously rejected: returning reject (again.) [peap] *** This means you need to read the PREVIOUS messages in the Sigh. Read this line. - List info/subscribe/unsubscribe? See

RE: ldap+freeradius

2011-11-11 Thread suggestme
Guys, I configured FreeRadius for Authentication with Active Directory by following the steps as suggested by Alan's deployingradius.com. Everything is working successfully like Samba, Kerberos, ntlm_auth configuration, I can successfully join the domain as an administrator and also user can

Re: ldap+freeradius

2011-11-11 Thread Alan Buxey
Hi, I configured FreeRadius for Authentication with Active Directory by following the steps as suggested by Alan's deployingradius.com. Everything is working successfully like Samba, Kerberos, ntlm_auth configuration, I can successfully join the domain as an administrator and also

Re: Fixed Duration Weekly, Monthly and Daily Accounts

2011-11-11 Thread JennyBlunt
I'm looking at your query and am a bit lost as to what I should use for the attributes. Say I wanted 24 hour voucher - expires exactly 24 hours after first login. I need to give the user some attribute in the db of 86400 seconds - for example I'll call this Access-Duration So how do I insert the

Re: Cannot assign requested address Error starting FreeRadius

2011-11-11 Thread Paul Heil
I have a GuruPlug Server 003-GP0001 running Debian Linux 6.0.3 with FreeRadius 2.1.10 installed. I have followed the Basic Configuration HOWTOhttp://wiki.freeradius.org/Basic-configuration-HOWTO, but when I get to the point of starting the server for the first time, I get this error: Fri Nov

Re: Fixed Duration Weekly, Monthly and Daily Accounts

2011-11-11 Thread Fajar A. Nugraha
On Sat, Nov 12, 2011 at 2:43 AM, JennyBlunt jennyshoeh...@me.com wrote: I'm looking at your query and am a bit lost as to what I should use for the attributes. Say I wanted 24 hour voucher - expires exactly 24 hours after first login. I need to give the user some attribute in the db of 86400

Re: Cannot assign requested address Error starting FreeRadius

2011-11-11 Thread Fajar A. Nugraha
On Sat, Nov 12, 2011 at 2:55 AM, Paul Heil paul.h...@gmail.com wrote:     Fri Nov 11 18:31:49 2011 : Error: /etc/freeradius/sites-enabled/ inner-tunnel[32]: Error binding to port for 127.0.0.1 port 18120 Can anybody suggest how to fix this issue? (1) run it as root (2) make sure nothing else

Re: Cannot assign requested address Error starting FreeRadius

2011-11-11 Thread Paul Heil
On Fri, Nov 11, 2011 at 3:51 PM, Fajar A. Nugraha l...@fajar.net wrote: (1) run it as root (2) make sure nothing else is running on that port (e.g. another freeradius instance) (3) if you don't know what (1) and (2) means, spend some time to learn some linux/unix basics. Especially the

Re: Fixed Duration Weekly, Monthly and Daily Accounts

2011-11-11 Thread Marinko Tarlac
For example, Mikrotik understands this syntax id | UserName | Attribute | Value | Op 183 | someuser| Expiration | October 04 2011 00:00:00 | == To convert 2011-10-04 into October 04 2011 00:00:00 you should use the next SQL syntax SELECT DATE_FORMAT( `date` , '%M %d %Y %H:%i:%s' ) AS date

Re: Cannot assign requested address Error starting FreeRadius

2011-11-11 Thread Paul Heil
On Fri, Nov 11, 2011 at 4:20 PM, Paul Heil paul.h...@gmail.com wrote: I run freeradius as root. e.g $sudo freeradius -X According to lsof, nothing is using port 1820. (netstat shows the same) $lsof -i :1820 Thanks, PaulH Edit: Typo - Nothing is on port *18120*. - List

Re: Buffered SQL Setup Not Reading Detail File

2011-11-11 Thread Gary T. Giesen
Alan, Thanks for your help, the problem was that I had 3 months of detail data previously that did have the problem. I misunderstood that adding Alan Dekok's block would fix the problem for my older data. I'm going to work on making sure it doesn't happen again, but for the time being my server

Re: Cannot assign requested address Error starting FreeRadius

2011-11-11 Thread Fajar A. Nugraha
On Sat, Nov 12, 2011 at 5:51 AM, Paul Heil paul.h...@gmail.com wrote: According to lsof, nothing is using port 1820. (netstat shows the same)     $lsof -i :1820 (shrug) Something in your setup is broken then. The default debian/ubuntu package should work just fine. You can either try to