Re: Design question

2012-02-01 Thread Alan DeKok
Dan Letkeman wrote: > From what I understand I need to create myself a certificate and > install that certificate into the freeradius server and into each of > my client computers. Yes. > Then I need to configure my switches to connect > use the freeradius server to allow the traffic through w

Re: bin/164526: kill(1) can not kill process despite on -KILL

2012-02-01 Thread Alan DeKok
Коньков Евгений wrote: > repeated again: > bug is repeateable: > 1. radiusd + mod_perl + example.pl(it is connects to FireBird) + Why? FreeRADIUS has native support for all major SQL servers. There's no need to use a Perl plugin. > FireBIrd > 2. restart firebird > 3. try to restart radiusd > 4

Design question

2012-02-01 Thread Dan Letkeman
Hello, I'm new to using radius servers and I have a few questions on best practices and design. We primarily use windows 7 on the machines that will authenticate, and they are all connected to cisco switches and access points. If I understand things correctly I have the option of authenticating

Re: Newbie and Sqlippool

2012-02-01 Thread Fajar A. Nugraha
2012/2/2 Antonio Modesto : > My production radius server is running freeradius 1.1.8, I installed > freeradius 2 in another server with another SQL database and copied the > configuration files from the production server to the test server and > changed some stuff to get it running, then I am doing

Re[4]: bin/164526: kill(1) can not kill process despite on -KILL

2012-02-01 Thread Коньков Евгений
Title: Re[4]: bin/164526: kill(1) can not kill process despite on -KILL Здравствуйте, Alan. Вы писали 2 февраля 2012 г., 0:24:55: > kill -9  doesn't want to play either? Read the docs/debugging file. Compile FR with debugging/developer stuff and run it under gdbm control and do your kil

Re: Re[2]: bin/164526: kill(1) can not kill process despite on -KILL

2012-02-01 Thread Alan Buxey
kill -9 doesn't want to play either? Read the docs/debugging file. Compile FR with debugging/developer stuff and run it under gdbm control and do your killing of firebird again. It's likely to be the PERL integration as thats what will get done in when firebird is restarted. Are you perl with

Re[2]: bin/164526: kill(1) can not kill process despite on -KILL

2012-02-01 Thread Коньков Евгений
Здравствуйте, Jilles. Вы писали 28 января 2012 г., 20:24:07: >> [stuck process cannot be killed, system hangs when reboot is >> attempted] JT> A signal cannot forcibly kill a process that is stuck in the kernel. JT> Allowing this would put the integrity of the kernel data structures at JT> risk

Re: Multi-domain AD [Kudos]

2012-02-01 Thread McNutt, Justin M.
Btw, kudos to Alan DeKok and the rest of the FR developers for these FR abilities. The things listed here were INVALUABLE to figuring all of this out without just guessing: 1) "radiusd -XC" You just can't live without this. Seriously. 2) "radiusd -X"It's there for a reason. Specifical

Multi-domain AD and Users Who Aren't So Bright

2012-02-01 Thread McNutt, Justin M.
So I'm working on a way to Improve the User Experience. I've gotten a LONG way, but now I'm stuck. Here's the short/long version (all details, without undue explanation or discussion of what I tried that doesn't work): WARNING: This may well be a case of doing it the hard way. If that's the

Re: Blackberry disabled server certificates query

2012-02-01 Thread Alan Buxey
hi, just to revisit this recent thread. Was at a site who were implementing 802.1X authentication and they noted the Blackberry issue - some devices okay, others not... the FreeRADIUS server was configured to have the WHOLE CA chain of certs (root, intermediate,server signer and server cert) in th

Doubt about Dropping Conflicting Error.

2012-02-01 Thread Rodrigo Yoshioka
Hi folks, Does anyone have explanations about this error?? I couldn´t find something understandable about it on the internet.  Error: Dropping conflicting packet from client PPPoE_FTTH:41882 - ID: 66 due to unfinished request 457370 My radius server gives me this error frequently. Thanks - L

Re: Newbie and Sqlippool

2012-02-01 Thread Alan DeKok
Antonio Modesto wrote: > My production radius server is running freeradius 1.1.8, I installed > freeradius 2 in another server with another SQL database and copied the > configuration files from the production server to the test server and > changed some stuff to get it running, then I am doing the

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 20:59 +0700, Fajar A. Nugraha wrote: > 2012/2/1 Antonio Modesto : > > But I don't want to use per-user pools, if it is possible, > > the better solution for me would be setting the pool based on some > > information of the NAS, because my routing topology doesn't permit a sin

Re: Newbie and Sqlippool

2012-02-01 Thread Fajar A. Nugraha
2012/2/1 Antonio Modesto : > But I don't want to use per-user pools, if it is possible, > the better solution for me would be setting the pool based on some > information of the NAS, because my routing topology doesn't permit a single > pool for all cities that we attend. It depends. If your NAS

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 14:24 +0100, Alan DeKok wrote: > Antonio Modesto wrote: > > Sorry for the ignorance, but where must I put this section? Can I just > > put it anywhere in radiusd.conf or it must be inside another section? > > You don't. I had assumed you were running version 2. Not in m

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 19:53 +0700, Fajar A. Nugraha wrote: > 2012/2/1 Antonio Modesto : > > On Wed, 2012-02-01 at 09:19 -0200, Antonio Modesto wrote: > > > > On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: > > > > Antonio Modesto wrote: > >> I am trying to test sqlippool on freeradius, bu

Re: Newbie and Sqlippool

2012-02-01 Thread Alan DeKok
Antonio Modesto wrote: > Sorry for the ignorance, but where must I put this section? Can I just > put it anywhere in radiusd.conf or it must be inside another section? You don't. I had assumed you were running version 2. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradiu

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 13:31 +0100, Alan DeKok wrote: > Antonio Modesto wrote: > >> That's wrong. Use "Cleartext-Password :=" instead of "User-Password ==" > > > > The problem is that my production server is running Freeradius 1.8, > > and it uses the Attribute User-Password > > No. The

Re: Newbie and Sqlippool

2012-02-01 Thread Fajar A. Nugraha
2012/2/1 Antonio Modesto : > On Wed, 2012-02-01 at 09:19 -0200, Antonio Modesto wrote: > > On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: > > Antonio Modesto wrote: >> I am trying to test sqlippool on freeradius, but i've found that the >> documentation explains very well how to implement

Re: Newbie and Sqlippool

2012-02-01 Thread Alan DeKok
Antonio Modesto wrote: >> That's wrong. Use "Cleartext-Password :=" instead of "User-Password ==" > > The problem is that my production server is running Freeradius 1.8, > and it uses the Attribute User-Password No. The change to Cleartext-Password was done in 1.1.4. The 1.1.8 version

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 09:19 -0200, Antonio Modesto wrote: > On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: > > > Antonio Modesto wrote: > > > I am trying to test sqlippool on freeradius, but i've found that the > > > documentation explains very well how to implement it, but it doesn't

RE: Verifying you are Joining the Active Directory Domain

2012-02-01 Thread Axford M.F.
> Plus when I go to my 2008 Server and I open up Active Directory, Select my > Domain and choose Domain Controllers that my FreeRadius Server isn't listed > in that directory but it is listed under computers. Is this correct? That would seem likely as it's not a Domain Controller. The default pla

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: > Antonio Modesto wrote: > > I am trying to test sqlippool on freeradius, but i've found that the > > documentation explains very well how to implement it, but it doesn't > > explain very well how I can set a user or a group to use this pool

Re: Member of Group Check Else REJECT

2012-02-01 Thread Alan Buxey
Your unlang is wrong. If both checks are true then you will reject...anything else, ie not a member of that group or from that NAS will continue alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html