RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-19 Thread Rathod Subhashchandra
Hi Iliya, It is working now. Thanks for your help. Thanks ! Rathod. -Original Message- From: freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org [mailto:freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org ] On Behalf Of Iliya Peregoudov Sent:

Re: Accounting-Request with invalid signature

2012-03-19 Thread Alan DeKok
Shurbann Martes wrote: Are there any limitation to the secret key? I.e. some special characters not allowed or length? All characters are allowed. HOWEVER, some characters, like $ and \ require escaping. Put single quotes around the secret, and it could work, too. See man unlang for how

dailycounter is not working with redundant sql

2012-03-19 Thread Oleg Sorocean
Dear all, I have the radius configuration with 2 radius servers and mysql, I configured radius for sql redundancy like below: radiusd.conf instantiate { . redundant redundant_sql { sql1 sql2 } } in default in each section authorization,

Re: dailycounter is not working with redundant sql

2012-03-19 Thread Alan DeKok
Oleg Sorocean wrote: in default in each section authorization, accounting I am using redundant_sql instead of sql everything is working ok beside the daily counter which is not working as expected if primary sql server is down As I said on the bugzilla, this won't work. sqlcounter

Alvarion WiMax VSA's

2012-03-19 Thread David Peterson
Alan, Am I correct in my understanding that only version 3 will support the new Alvarion WiMax VSAs. If I am, would John Dennis be willing to supply any roadmap for 3.0 support in Redhat? David - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Alvarion WiMax VSA's

2012-03-19 Thread Alan DeKok
David Peterson wrote: Am I correct in my understanding that only version 3 will support the new Alvarion WiMax VSAs. Yes. If I am, would John Dennis be willing to supply any roadmap for 3.0 support in Redhat? Probably after 3.0 is released. Which will be... sometime soon, maybe.

RE: AP-FR-LDAP authentication

2012-03-19 Thread Julie
if your clients are doing EAP-TTLS/PAP then this will work - the PAP module can deal the requirements. I'm trying to setup the EAP-TTLS/PAP. I'm testing with Mac Lion. Just saw someone posted online saying Lion support only MSChapV2 in the inner-tunnel part. Trying to figure out how to

RE: AP-FR-LDAP authentication

2012-03-19 Thread Julie
huh? OSX lion can do whatever you have told it to do using the mobileconfig tool (iPhone configuraton utility can generate such). now, far be it from me to shout from the rooftopsbut i wouldnt rely on some unsubstantiated result found by google. if you do the legwork you'll find it CAN do

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Josh Hiner
Ok I went back, looked at the config, and used some common sense to figure part of it out. I have it now logging replys for rejects using the reply_log section of ./modules/detail.log (I also enabled copy tunneled reply to the outer tunnel in eap.conf). In the logged rejections Im not getting the

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Josh Hiner
Along with enabling user_tunneled_reply=yes etc.. I am also updating the outer tunnel with the inner tunnel username like this: update outer.reply { User-Name = %{request:User-Name} } in ./sites-enabled/inner-tunnel Watching radius debug I can even see

Re: Freeradius crash with two radclient

2012-03-19 Thread fulvio fabiani
Hi Phil, thanks for your answer. Do the 2.1.12 fix this kind of problem? We did some additional analysis, we found that with this configuration: - 1 freeradius - 1 radclient everythings works, but with - 1 freeradius - 2 radlicent the freeradius instance crash as we start the second

Re: Freeradius crash with two radclient

2012-03-19 Thread Fajar A. Nugraha
On Tue, Mar 20, 2012 at 4:47 AM, fulvio fabiani fabiani.ful...@gmail.com wrote: Hi Phil, thanks for your answer. Do the 2.1.12 fix this kind of problem? 2.1.11 has some known bugs, fixed in 2.1.12 in newer. It might be one of them. If you don't want to waste anyone's time, re-run your tests on

dailycounter is not working with redundant sql

2012-03-19 Thread Oleg Sorocean
Hi Alan, Thanks once again for your response, it is clear now, but could you suggest please the correct way to configure the module to work with multiple sql servers? Thanks Oleg Alan: As I said on the bugzilla, this won't work. sqlcounter dailycounter { counter-name =

Re: Freeradius crash with two radclient

2012-03-19 Thread Alan Buxey
Hi, thanks for your answer. Do the 2.1.12 fix this kind of problem? did you try with 2.1.12 ? its got a lot of fixes related to this behaviour. there is really no need to question/query the advice given. use the latest version - IF there is still a problem then its important as then it

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Alan Buxey
Hi, Ok I went back, looked at the config, and used some common sense to figure part of it out. I have it now logging replys for rejects using the ...to remind you what Alan said: �Read raddb/sites-available/default. �Look for Post-Auth-Type Reject. �This is documented.

Re: Issues with squid_radius_auth

2012-03-19 Thread danegirl
Hi, I'm having the same issue, could anyone solve it? -- View this message in context: http://freeradius.1045715.n5.nabble.com/Issues-with-squid-radius-auth-tp2788947p5578622.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Josh Hiner
Alan. Thanks for the reply. One of my previous emails I did put reply_log in the post auth reject spot. Im also copying the user from the inner tunnel to the outer tunnel. I am getting reject logs but without the username. I swear I have read the section above the post auth reject spot in my

Re: dailycounter is not working with redundant sql

2012-03-19 Thread Alan DeKok
Oleg Sorocean wrote: Hi Alan, Thanks once again for your response, it is clear now, but could you suggest please the correct way to configure the module to work with multiple sql servers? There is no module. You're trying to do string expansion. String expansion isn't a module. The