Re: dailycounter is not working with redundant sql

2012-03-19 Thread Alan DeKok
Oleg Sorocean wrote: > Hi Alan, > Thanks once again for your response, it is clear now, but could you > suggest please the correct way to configure the module to work with > multiple sql servers? There is no "module". You're trying to do string expansion. String expansion isn't a module. Th

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Josh Hiner
Alan. Thanks for the reply. One of my previous emails I did put reply_log in the post auth reject spot. Im also copying the user from the inner tunnel to the outer tunnel. I am getting reject logs but without the username. I swear I have read the section above the post auth reject spot in my defaul

Re: Issues with squid_radius_auth

2012-03-19 Thread danegirl
Hi, I'm having the same issue, could anyone solve it? -- View this message in context: http://freeradius.1045715.n5.nabble.com/Issues-with-squid-radius-auth-tp2788947p5578622.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://ww

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Alan Buxey
Hi, >Ok I went back, looked at the config, and used some common sense to figure >part of it out. I have it now logging replys for rejects using the ...to remind you what Alan said: > �Read raddb/sites-available/default. �Look for Post-Auth-Type Reject. > > �This is documented

Re: Freeradius crash with two radclient

2012-03-19 Thread Alan Buxey
Hi, >thanks for your answer. >Do the 2.1.12 fix this kind of problem? did you try with 2.1.12 ? its got a lot of fixes related to this behaviour. there is really no need to question/query the advice given. use the latest version - IF there is still a problem then its important as then it

dailycounter is not working with redundant sql

2012-03-19 Thread Oleg Sorocean
Hi Alan, Thanks once again for your response, it is clear now, but could you suggest please the correct way to configure the module to work with multiple sql servers? Thanks Oleg Alan: >As I said on the bugzilla, this won't work. > sqlcounter dailycounter { > counter-name = Daily-Session

Re: Freeradius crash with two radclient

2012-03-19 Thread Fajar A. Nugraha
On Tue, Mar 20, 2012 at 4:47 AM, fulvio fabiani wrote: > Hi Phil, > thanks for your answer. > Do the 2.1.12 fix this kind of problem? 2.1.11 has some known bugs, fixed in 2.1.12 in newer. It might be one of them. If you don't want to waste anyone's time, re-run your tests on 2.1.12 > > We did so

Re: Freeradius crash with two radclient

2012-03-19 Thread fulvio fabiani
Hi Phil, thanks for your answer. Do the 2.1.12 fix this kind of problem? We did some additional analysis, we found that with this configuration: - 1 freeradius - 1 radclient everythings works, but with - 1 freeradius - 2 radlicent the freeradius instance crash as we start the second clien

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Josh Hiner
Along with enabling user_tunneled_reply=yes etc.. I am also updating the outer tunnel with the inner tunnel username like this: update outer.reply { User-Name = "%{request:User-Name}" } in ./sites-enabled/inner-tunnel Watching radius debug I can even see attr_filter.access

Re: Question on logging EAP/PEAP authentication rejections

2012-03-19 Thread Josh Hiner
Ok I went back, looked at the config, and used some common sense to figure part of it out. I have it now logging replys for rejects using the reply_log section of ./modules/detail.log (I also enabled copy tunneled reply to the outer tunnel in eap.conf). In the logged rejections Im not getting the u

RE: AP->FR->LDAP authentication

2012-03-19 Thread Julie
huh? OSX lion can do whatever you have told it to do using the mobileconfig tool (iPhone configuraton utility can generate such). now, far be it from me to shout from the rooftopsbut i wouldnt rely on some unsubstantiated result found by google. if you do the legwork you'll find it CAN do w

RE: AP->FR->LDAP authentication

2012-03-19 Thread Julie
> if your clients are doing EAP-TTLS/PAP then this will work - the PAP > module can deal the requirements. I'm trying to setup the EAP-TTLS/PAP. I'm testing with Mac Lion. Just saw someone posted online saying Lion support only MSChapV2 in the inner-tunnel part. Trying to figure out how to chan

Re: Alvarion WiMax VSA's

2012-03-19 Thread Alan DeKok
David Peterson wrote: > Am I correct in my understanding that only version 3 will support the new > Alvarion WiMax VSAs. Yes. > If I am, would John Dennis be willing to supply any roadmap for 3.0 support > in Redhat? Probably after 3.0 is released. Which will be... sometime soon, maybe.

Alvarion WiMax VSA's

2012-03-19 Thread David Peterson
Alan, Am I correct in my understanding that only version 3 will support the new Alvarion WiMax VSAs. If I am, would John Dennis be willing to supply any roadmap for 3.0 support in Redhat? David - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: dailycounter is not working with redundant sql

2012-03-19 Thread Alan DeKok
Oleg Sorocean wrote: > in default in each section authorization, accounting I am using > redundant_sql instead of sql > everything is working ok beside the daily counter which is not working > as expected if primary sql server is down As I said on the bugzilla, this won't work. > sqlcounter

dailycounter is not working with redundant sql

2012-03-19 Thread Oleg Sorocean
Dear all, I have the radius configuration with 2 radius servers and mysql, I configured radius for sql redundancy like below: radiusd.conf instantiate { . redundant redundant_sql { sql1 sql2 } } in default in each section authorization, accounting

Re: Accounting-Request with invalid signature

2012-03-19 Thread Alan DeKok
Shurbann Martes wrote: > Are there any limitation to the secret key? I.e. some special characters > not allowed or length? All characters are allowed. HOWEVER, some characters, like "$" and "\" require escaping. Put single quotes around the secret, and it could work, too. See "man unlang" f

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-19 Thread Rathod Subhashchandra
Hi Iliya, It is working now. Thanks for your help. Thanks ! Rathod. -Original Message- From: freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org [mailto:freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org ] On Behalf Of Iliya Peregoudov Sent: Thursday,