Re: Question on logging EAP/PEAP authentication rejections

2012-03-20 Thread Alan DeKok
Josh Hiner wrote: > Im not sure why people kept telling me to read the spot > above the Post-Auth-Type Reject section. Because it describes how the Post-Auth-Type Reject section works. Note: no text saying "it magically doesn't log User-Names" > Here is a paste of the text > above that secti

Re: Freeradius crash with two radclient

2012-03-20 Thread Alan DeKok
fulvio fabiani wrote: > Hi Alan, > We did same test with freeRadius version 2.1.12, unfortunately same > result: as we start second radClient, Freeradius instance crash. > Answering previous questions, no we don't use rlm_sql, we use perl > module, that via oracle perl driver, executes query on th

Re: Question on logging EAP/PEAP authentication rejections

2012-03-20 Thread Alan DeKok
Josh Hiner wrote: > ...to remind you what Alan said: > >> �Read raddb/sites-available/default. �Look for Post-Auth-Type Reject. >> >> �This is documented. > > in post-auth section > > >Post-Auth-Type REJECT { >attr_filter.access_reject >} *This* is

Re: Question on logging EAP/PEAP authentication rejections

2012-03-20 Thread Josh Hiner
Ok. I did follow this advice: >Ok I went back, looked at the config, and used some common sense to figure >part of it out. I have it now logging replys for rejects using the ...to remind you what Alan said: > �Read raddb/sites-available/default. �Look for Post-Auth-Type Reject. >

Re: Question on logging EAP/PEAP authentication rejections

2012-03-20 Thread Alan Buxey
Hi, >being a mooch. The only reason I can think of such short and erroneous >replies is that some people helping on the list are generally annoyed by >any questions. That is too bad. A quick reply of "use linelog" would have >been helpful. Why not help people? ...or it could be th

Re: Freeradius crash with two radclient

2012-03-20 Thread Alan Buxey
Hi, >We did same test with freeRadius version 2.1.12, unfortunately same >result: as we start second radClient, Freeradius instance crash. >Answering previous questions, no we don't use rlm_sql, we use perl module, >that via oracle perl driver, executes query on the database. cool

Re: Freeradius crash with two radclient

2012-03-20 Thread fulvio fabiani
Hi Alan, We did same test with freeRadius version 2.1.12, unfortunately same result: as we start second radClient, Freeradius instance crash. Answering previous questions, no we don't use rlm_sql, we use perl module, that via oracle perl driver, executes query on the database. BR, Fulvio 2012

EAP-TLS for Hotspots.

2012-03-20 Thread Mrinal K
This is not exactly a freeradius configuration related query, but considering the deployment related exposure of all of us this seems to be the best place. So here it goes.. We are trying to implement a 802.1x based framework for user authentication for public hotspots. To go about authentication

Re: Question on logging EAP/PEAP authentication rejections

2012-03-20 Thread Josh Hiner
Well I eventually found and switched to using linelog to log access rejects since I can define my own variables that are logged. Oddly enough freeradius was showing a packet-type of Access-Request for eap authentication failures. Since I was calling linelog only from the post_auth_reject spot I jus