Re: Freeradius for several services

2012-03-23 Thread David Seira
Hi. Finally I achieved it with the huntgroups. Adding a huntgroup with a nas and then adding this huntgroup to a specific user group. Regards, David El 22 de marzo de 2012 14:05, Alan DeKok al...@deployingradius.comescribió: David Seira wrote: I want to use the same freeradius server for

Disconnect a Mikrotik NAS client from Daloradius

2012-03-23 Thread Javier Ruiz Escalante
Hello all, I would like to disconnect a client which is connected through a Mikrotik Hotspot and the command used normally via Chillispot does not work, I know that I have to use several attributes like session id and so on, but no clue how to use them. Can somebody give me a clue? Thank

update reply problem

2012-03-23 Thread Ana Gallardo Gómez
/freeradius/radacct/%Y/%m/%d/%{Client-IP-Address}-reply-detail-%Y%m%d - /var/log/freeradius/radacct/2012/03/23/10.253.40.43-reply-detail-20120323 [reply_log] /var/log/freeradius/radacct/%Y/%m/%d/%{Client-IP-Address}-reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/2012/03/23/10.253.40.43

Re: Freeradius 2 with MSCHAPv2 using system user

2012-03-23 Thread Marlos Alex
Alan thanks, I'lltry to seewith mysql. Marlos Em 22/03/2012 12:09, Alan Buxey escreveu: Hi, Really? Does freebsd store passwords as cleartext or nt-hash? Otherwise I can't imagine how mschapv2 will

Re: Disconnect a Mikrotik NAS client from Daloradius

2012-03-23 Thread Alan DeKok
Javier Ruiz Escalante wrote: I would like to disconnect a client which is connected through a Mikrotik Hotspot and the command used normally via Chillispot does not work, I know that I have to use several attributes like session id and so on, but no clue how to use them. Can somebody give me a

Re: access level on cisco routers

2012-03-23 Thread Alan DeKok
Elad Shy wrote: I am looking for a way to give different access level to cisco router based on unix group membership. I went through the documentation but could not find a simple (or other) way to do this. Use the Group attribute... Got a bit confused when it came to which (if at all)

can you internally proxy a request more than once?

2012-03-23 Thread mark.leese
Hi, I have been using FreeRADIUS to authenticate visitors onto a wireless network using LDAP against Active Directory. I now need to also deploy eduroam. I thought it would be sensible to do this as two separate virtual servers, so I created a new minimal 'default' server that proxies to a

Radacct table not working properly

2012-03-23 Thread Javier Ruiz Escalante
Hello, My Radacct table in mysql Freeradius saves only sometimes the values of my users when they log in, does anybody know why? Thanks regards -Original Message- From: freeradius-users-bounces+fruiz002=hotmail@lists.freeradius.org

RE: can you internally proxy a request more than once?

2012-03-23 Thread Brian Julin
Not sure, but you should consider running non-virtual instances (not that hard to do) and using privilage separation such that there is little potential for exposure of your internal authentication structure or internally-utilized crypto material to an externally presented service. Also, it is

newbiie

2012-03-23 Thread Khapare Joshi
I am just a new with freeradius. so please consider. This is what I am trying to do today. 1. installed pptpd server on centos 6 box, tested with chap-secert password and worked. 2. installed freeradius server to handle stuff like ip pool and authenticaton, and integrate with my existing

radpostauth - from client ip

2012-03-23 Thread Steven Staples
Hello All... I have been trying to figure out why our radius.log file shows the 'from client:' IP correctly on accepted logins, but when I'm storing them into my database, I get a different IP? In my query, I'm using %{NAS-IP-Address}, which is giving me an IP, but not the one I'm expecting to

TCP/TLS - radsec / application

2012-03-23 Thread Jason Rohm
I've been doing some research and it seems like there has been a lot of talk about radsec and some movement on the IETF standardization front, but I'm unclear about the state of radsec within the freeradius codebase. I've downloaded the current master source as of a few days ago and successfully

RE: TCP/TLS - radsec / application

2012-03-23 Thread Brian Julin
Jason Rohm wrote: I'm unclear about the state of radsec within the freeradius codebase. I've downloaded the current master source as of a few days ago and successfully compiled it on CentOS 6.2 64bit. Everything seems to work save some EAP stuff that I'm not using and was able to

Re: radpostauth - from client ip

2012-03-23 Thread Ana Gallardo Gómez
Which attribute should I be using to store the same 'from client' that the radius.log is storing? I think that what you want is clientname %C :: Ana Gallardo Gómez :: - List info/subscribe/unsubscribe? See

Re: Radacct table not working properly

2012-03-23 Thread Alan DeKok
Javier Ruiz Escalante wrote: Despite taht my user is authenticated, I don't get the data in RADACCT table, This question is answered in the FAQ. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radpostauth - from client ip

2012-03-23 Thread Alan DeKok
Steven Staples wrote: I have been trying to figure out why our radius.log file shows the 'from client:' IP correctly on accepted logins, but when I'm storing them into my database, I get a different IP? In my query, I'm using %{NAS-IP-Address}, which is giving me an IP, but not the one I'm

Re: can you internally proxy a request more than once?

2012-03-23 Thread Alan DeKok
mark.le...@stfc.ac.uk wrote: I may not have provided enough detail, but am I doing something that obviously won’t work? I don’t know if it’s possible to internally proxy a request more than once, e.g. to two different virtual servers. It's not. It will likely work (eventually) in 3.0.

RE: radpostauth - from client ip

2012-03-23 Thread Steven Staples
Thank you! That worked perfectly! Steve -Original Message- From: freeradius-users-bounces+sstaples=mnsi@lists.freeradius.org [mailto:freeradius-users-bounces+sstaples=mnsi@lists.freeradius.org] On Behalf Of Ana Gallardo Gómez Sent: March 23, 2012 2:08 PM To: FreeRadius

Re: TCP/TLS - radsec / application

2012-03-23 Thread Alan Buxey
Hi, I've been doing some research and it seems like there has been a lot of talk about radsec and some movement on the IETF standardization front, but I'm unclear about the state of radsec within the freeradius codebase. I've downloaded the current master source as of a few days ago and

Re: newbiie

2012-03-23 Thread Alan Buxey
Hi, 3. I looked at the /etc/raddb/radiusd.conf but I do not see the the LDAP section modules/ldap 4. how can I integrate the my freeradius server to hook up with ldap server ? edit modules/ldap - and then configure the 'ldap' section (you'll either need to uncomment or add it)

Re: newbiie

2012-03-23 Thread Khapare Joshi
Hi Alan, I just checked in modules directory but could not find anything with ldap. This is what is in my /etc/raddb: root radiusd 671 Jul 19 2011 acct_users -rw-r- 1 root radiusd 4174 Jul 19 2011 attrs -rw-r- 1 root radiusd 513 Jul 19 2011 attrs.access_challenge -rw-r- 1

Re: newbiie

2012-03-23 Thread John Dennis
On 03/23/2012 05:07 PM, Khapare Joshi wrote: Hi Alan, I just checked in modules directory but could not find anything with ldap. This is what is in my /etc/raddb: ... Am I missing some package to install ? freeradius-ldap -- John Dennis jden...@redhat.com Looking to carve out IT costs?

Re: newbiie

2012-03-23 Thread Alan Buxey
Hi, I just checked in modules directory but could not find anything with ldap. This is what is in my /etc/raddb: you installed via package manager? you've probably got a freeradius-ldap package you need to install alan - List info/subscribe/unsubscribe? See

Re: newbiie

2012-03-23 Thread Khapare Joshi
Thanks guys, I should have search for it :) I configured the ldap section that fits to my environment. Now, how to load this ldap module in radiusd.conf file so it will use ldap authentication ? also where can i add the redundant ldap server in the ldap module ? sorry for too many my early

FW: Radacct table not working properly

2012-03-23 Thread Javier Ruiz Escalante
From: Javier Ruiz Escalante [mailto:fruiz...@hotmail.com] Sent: viernes, 23 de marzo de 2012 18:49 To: 'freeradius-users@lists.freeradius.org' Subject: RE: Radacct table not working properly Good evening, I have realized that my radius system does not record the logging information

RE: Radacct table not working properly

2012-03-23 Thread Javier Ruiz Escalante
Sorry but I do not see anything related to my problema in the FAQ, could you please specify a bit more? Maybe the link? Thanks -Original Message- From: freeradius-users-bounces+fruiz002=hotmail@lists.freeradius.org

group search filter openLDAP

2012-03-23 Thread dhanushka ranasinghe
Hi guys, im using freeradius with LDAP , and its authentication works fine when i use following configuration. server = ldap.home.com identity = cn=admin,dc=home,dc=com password = home basedn = ou=users,dc=home,dc=com filter =