Re: Adding domain names to user logins

2012-06-22 Thread Kriston
On Fri, June 22, 2012 21:24, Alan DeKok wrote: > Kriston wrote: >> Well, when I run it, it says it doesn't recognize the atdomain module, >> which >> makes sense to me since I don't see one in the modules directory. I'm >> using >> FreeRadius 2.1.10 (2.1.10-5.el6) that comes from the CentOS 6.2 >>

Re: radwho

2012-06-22 Thread Alan DeKok
Luo, Frank Y.F. Mr. wrote: > I have noticed that radwho command only return one entry at any time but > obviously there are more than one people logged in > > $ sudo radwho > Login Name What TTY When FromLocation > d0c1b122dc d0c1b122dc75 shell S29 Fri 1

Re: Adding domain names to user logins

2012-06-22 Thread Alan DeKok
Kriston wrote: > Well, when I run it, it says it doesn't recognize the atdomain module, which > makes sense to me since I don't see one in the modules directory. I'm using > FreeRadius 2.1.10 (2.1.10-5.el6) that comes from the CentOS 6.2 repositorie. So... look at the 1.x config, find the atdom

Re: Question on Cisco-AVPair = "device-traffic-class=voice"

2012-06-22 Thread John
  Thanks. Matthew   With this solution, both Ip phone or other device will be marked as 'voice', right?   Can we distinguish it is a 'voice' device?  then add Cisco-AVPair = "device-traffic-class=voice" . otherwise, don't add this attribute.   Hangjun --- 12年6月23日,周六, Matthew Newton 写道: 发件人:

Re: Question on Cisco-AVPair = "device-traffic-class=voice"

2012-06-22 Thread Matthew Newton
On Sat, Jun 23, 2012 at 06:24:40AM +0800, John wrote: > Is there a way that freeradius can tell it is a VOICE device?  > Like ACS server: Cisco-AVPair = "device-traffic-class=voice". man unlang update reply { cisco-avpair := "device-traffic-class=voice" } Matthew -- Matthew Newton, Ph.D.

Question on Cisco-AVPair = "device-traffic-class=voice"

2012-06-22 Thread John
Hi,   Is there a way that freeradius can tell it is a VOICE device?  Like ACS server: Cisco-AVPair = "device-traffic-class=voice".   Here is a link to IP Telephony In IEEE 802.1X ... http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6638/config_guide_c17-605524.html#wp9000357   T

RE: Can't figure out Group Authentication

2012-06-22 Thread Julson, Jim
You rock man ! I will dive deeper into this and see what I can conjur up. Thanks again for the time. I've been looking through the list archives for days and haven't found anything "direct" that could point me in this direction. Then again, I probably passed over it many times just because

Re: Can't figure out Group Authentication

2012-06-22 Thread alan buxey
Hi, >Any hints as to where I’d possibly begin?  if you want to use LDAP to define./check groups, then you need to look at the LDAP module - if you look at this module you can see how to configure it , its fairly well self-documented and there are LDAP HOWTOs and docs on the main freeradius do

RE: Can't figure out Group Authentication

2012-06-22 Thread Julson, Jim
Any hints as to where I’d possibly begin? I might be able to stumble through it if I at least knew what files I had to edit I think. From: Alan Buxey [mailto:a.l.m.bu...@lboro.ac.uk] Sent: Friday, June 22, 2012 2:36 PM To: Julson, Jim; freeradius-users@lists.freeradius.org Subject: Re: Can't fi

Re: Can't figure out Group Authentication

2012-06-22 Thread Alan Buxey
You've got to set up some group checking...you haven't, so ldap-group means nothing to the server so you hit the default reject that you added... alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Adding domain names to user logins

2012-06-22 Thread Kriston
On Fri, June 22, 2012 09:45, Alan DeKok wrote: > Kriston wrote: >> I have many domain names but my users log in with just their usernames. >> How >> do I append the correct domainname to it? In FreeRadius 1.x I used >> "%{User-Name}%{atdomain:%n}" but what's the equivalent in FreeRadius 2.x?. > >

radwho

2012-06-22 Thread Luo, Frank Y.F. Mr.
I have noticed that radwho command only return one entry at any time but obviously there are more than one people logged in $ sudo radwho Login Name What TTY When FromLocation d0c1b122dc d0c1b122dc75 shell S29 Fri 11:43 172.18.47.242 172.24.192.42 Any

Can't figure out Group Authentication

2012-06-22 Thread Julson, Jim
First, I'd like to thank Alan for his beyond countless hours of dedication to all the blogs, forum posting, and general support within the community. Your write-ups are thorough and well thought out. I wish more people were like you. I'm pretty new to RADIUS and as consequently, Linux in gene

Re: Reg: Accept the user without Mysql check.

2012-06-22 Thread Matthew Newton
On Fri, Jun 22, 2012 at 04:17:21PM +0100, Malla reddy Sama wrote: > Please check once now. I am facing same problem.. Your netmask is wrong, or your subnet is wrong  client 172.20.0.0/24 { should probably be  client 172.20.68.0/24 { Matthew -- Matthew Newton, Ph.D. Systems Architect (UNI

Re: Reg: Accept the user without Mysql check.

2012-06-22 Thread Fajar A. Nugraha
Please keep cc to the list. On Fri, Jun 22, 2012 at 9:45 PM, Malla reddy Sama wrote: > Dear Fajar, > > I am facing a problem like below. please help where I am doing mistake. > > Ignoring request to authentication address * port 1812 from unknown client > 172.20.68.97 port 59268 Let's find out

Re: Adding domain names to user logins

2012-06-22 Thread Alan DeKok
Kriston wrote: > I have many domain names but my users log in with just their usernames. How > do I append the correct domainname to it? In FreeRadius 1.x I used > "%{User-Name}%{atdomain:%n}" but what's the equivalent in FreeRadius 2.x?. That didn't change in 2.x. What doesn't work about

Adding domain names to user logins

2012-06-22 Thread Kriston
I have many domain names but my users log in with just their usernames. How do I append the correct domainname to it? In FreeRadius 1.x I used "%{User-Name}%{atdomain:%n}" but what's the equivalent in FreeRadius 2.x?. Thank you, Kriston - List info/subscribe/unsubscribe? See http://www.freera

Re: Reg: Accept the user without Mysql check.

2012-06-22 Thread Fajar A. Nugraha
On Fri, Jun 22, 2012 at 5:59 PM, Malla reddy Sama wrote: > Dear Fajar, > > Thank you very for the help. > > I have some doubts can you clarify please :) > > In the Clients.conf I assign the clients as below: > > client 193.168.1.0/24 { //ip of server >     secret=secret > } > > 1

Posts from nabble

2012-06-22 Thread Alan DeKok
After recent messages, I've banned nabble.com from posting to the list. The signal to noise ratio was just too high. The overwhelming majority of the questions were... not good. I've discussed this off-line with the nabble administrators. The nabble pages are now marked read-only. i.e. you

Re: Building FreeRADIUS on HP-UX B.11.31 ia64 (gcc, 32bit)

2012-06-22 Thread Alan DeKok
Alexander Gattin wrote: > gcc +b src/lib/.libs was in fact started by > ./libtool: Yes. The version of libtool used by FreeRADIUS is quite old. Unfortunately, I've tried to upgrade it multiple times without much success. libtool, libltdl, and configure are incestuously related in bizarre way

Re: How LDAP Authentication works

2012-06-22 Thread Alan DeKok
Tobias Hachmer wrote: > The Test MS AD Server has domain functional level "2008 R2" and quite > default settings. Active directory is not really an LDAP server. The reasons are complicated. It's almost an LDAP server, but it's different in critical ways. > In radiusd -X output the ldap module

Re: Building FreeRADIUS on HP-UX B.11.31 ia64 (gcc, 32bit)

2012-06-22 Thread Alexander Gattin
Hello, On Fri, Jun 22, 2012 at 12:16:00PM +0300, Alexander Gattin wrote: > 1. ld options '+b ' are passed without >'-Wl,' prefix directly to gcc (not to ld): gcc +b src/lib/.libs was in fact started by ./libtool: > > /comptel/ilink/src/freeradius-server-2.1.12/libtool --mode=link gcc > > -re

Re: Reg: Accept the user without Mysql check.

2012-06-22 Thread Malla reddy Sama
Dear Fajar, Thank you very for the help. I have some doubts can you clarify please :) In the Clients.conf I assign the clients as below: client 193.168.1.0/24 { //ip of server     secret=secret } 1. It is possible with above IP and Password the clients get the authentication

Re: Reg: Accept the user without Mysql check.

2012-06-22 Thread Fajar A. Nugraha
On Fri, Jun 22, 2012 at 5:27 PM, Malla reddy Sama wrote: > > Dear All, > > I am using freeradius 2.1.10 and Mysql. > > The server working on interface eth0. Any request get to this interface, the > request has to be accept without checking the database. > > Any suggestion on this regards. As usua

Reg: Accept the user without Mysql check.

2012-06-22 Thread Malla reddy Sama
Dear All, I am using freeradius 2.1.10 and Mysql. The server working on interface eth0. Any request get to this interface, the request has to be accept without checking the database.  Any suggestion on this regards.   Thanks & Best Regards, MallaReddy, - List info/subscribe/unsubscribe? See

Re: How LDAP Authentication works

2012-06-22 Thread Tobias Hachmer
On 22.06.2012 10:18, Fajar A. Nugraha wrote: But is this identity also needed for authentication only? There are several ways you can use LDAP for authentication. For "normal" LDAP servers which stores user password in an accessible attribute with optional supported encrypted schema, you only n

Building FreeRADIUS on HP-UX B.11.31 ia64 (gcc, 32bit)

2012-06-22 Thread Alexander Gattin
Hello, There are 2 problems with HP-UX build (I use GNU gcc and native ld): 1. ld options '+b ' are passed without '-Wl,' prefix directly to gcc (not to ld): > gcc -shared -Wl,+h -Wl,rlm_acctlog-2.1.12.so -Wl,+nodefaultrpath -o > .libs/rlm_acctlog-2.1.12.so .libs/rlm_acctlog.o +b > /compt

Re: How LDAP Authentication works

2012-06-22 Thread Fajar A. Nugraha
On Fri, Jun 22, 2012 at 1:30 PM, Tobias Hachmer wrote: > In LDAP module configuration I set an identity. For my understanding this is > for the ldap bind user. With this identity FR will get access to the ldap > database, to do groupmembership information or attributes and so on. correct. > But