Re: can you internally proxy a request more than once?

2012-03-24 Thread Phil Mayers
On 03/23/2012 02:12 PM, mark.le...@stfc.ac.uk wrote: isn’t possible, do I have any other options? Would a solution be to make the virtual servers listen on two different IP addresses, and configure the NAS to use a different RADIUS server IP address for each SSID? That is the common solution,

Re: Radacct table not working properly

2012-03-24 Thread Phil Mayers
On 03/23/2012 04:16 PM, Javier Ruiz Escalante wrote: Hello, Despite taht my user is authenticated, I don't get the data in RADACCT table, my output is this one. Can anybody help me? Your NAS didn't send any accounting packets. So no accounting packets were logged to the database. - List

Re: FW: Radacct table not working properly

2012-03-24 Thread Phil Mayers
On 03/23/2012 11:07 PM, Javier Ruiz Escalante wrote: I have realized that my radius system does not record the logging information in my radius Data base, in radacct table, but nevertheless creates a folder in /var/log/freeradius for every NAS which is called “radacct” inside this folder there

Re: group search filter openLDAP

2012-03-24 Thread Phil Mayers
On 03/24/2012 05:51 AM, dhanushka ranasinghe wrote: Hi guys, im using freeradius with LDAP , and its authentication works fine when i use following configuration. server = ldap.home.com identity = cn=admin,dc=home,dc=com password = home basedn =

Re: Zombie Clarification

2012-03-24 Thread Alan Buxey
Hi, there was never any more on this thread, so just to add some final info Now, for whatever reason, the Windows box decides to discard some requests. Unfortunately, the error reporting is pretty weak (discarding invalid request). Our Windows guys are digging into this. It seems to be

Re: Zombie Clarification

2012-03-24 Thread Alan DeKok
Alan Buxey wrote: Microsoft decided, in their wisdom, to just discard packets that arent right. this affects IAS and NPS. if your policy says, for example, NAS-Port-Type = Wireless-802.11 an the packet doesnt have that attribute...or its not Wireless-802.11..then the packet is just

Re: Zombie Clarification

2012-03-24 Thread James J J Hooper
On 24/03/2012 13:13, Alan Buxey wrote: Hi, there was never any more on this thread, so just to add some final info Now, for whatever reason, the Windows box decides to discard some requests. Unfortunately, the error reporting is pretty weak (discarding invalid request). Our Windows guys are

RE: FW: Radacct table not working properly

2012-03-24 Thread Javier Ruiz Escalante
Hello, SQL is configured as long as I know, and actually before, when I had installed chillispot, I think it was working as I had values in my radacct table. What should I check then, because the data is logged, at least part of it but in a file, not in the radacct table. Regards

Re: FW: Radacct table not working properly

2012-03-24 Thread Alan Buxey
It might be configured...ie you edited sql.conf but did you add 'sql' to the relevant sections in the relevant virtual server? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: can you internally proxy a request more than once?

2012-03-24 Thread Brian Julin
Phil Mayers [p.may...@imperial.ac.uk] wrote I'm curious about what you mean here. I don't see the difference between a single server performing attribute filter auth, versus two separate processes. Can you explain what threat model you think this addresses? It limits the exposed fuzzable