Re: EAP-SIM on 2.2.0

2012-09-11 Thread Alan DeKok
Francois Gaudreault wrote: > [eap] processing type sim > [eap] Handler failed in EAP/sim > [eap] Failed in EAP select That's not nice. The module should return some kind of message. This looks like an issue for digging into the code. Alan DeKok. - List info/subscribe/unsubscribe? See http

Adding reply AVPs to an authorization proxy

2012-09-11 Thread Chadwick Sorrell
Hello, I'm using replicate to proxy my authorization and accounting requests to a server. I'm curious if it's possible to add some of the auth reply attributes to the auth proxy before I send it over. That way the proxied auth has both the request and the reply. Thanks - List info/subscribe/uns

Re: EAP-SIM on 2.2.0

2012-09-11 Thread Francois Gaudreault
Hi, On 2012-09-11 4:05 PM, Phil Mayers wrote: On 09/11/2012 07:49 PM, Francois Gaudreault wrote: Hi, I am playing with EAP-SIM on 2.2.0, but I am facing an issue I cannot even understand :S Not because I don't want to, but the error messages are not talking much. I did compute SRES/Kc for my

Re: EAP-SIM on 2.2.0

2012-09-11 Thread Phil Mayers
On 09/11/2012 07:49 PM, Francois Gaudreault wrote: Hi, I am playing with EAP-SIM on 2.2.0, but I am facing an issue I cannot even understand :S Not because I don't want to, but the error messages are not talking much. I did compute SRES/Kc for my SIM, but after the third triplet, I just have:

Re: .rpmnew files during RPM upgrade

2012-09-11 Thread Phil Mayers
On 09/11/2012 04:37 PM, Brian Julin wrote: -Original Message- On 11/09/12 12:16, Phil Mayers wrote: This approach of a separate available/enabled modules dir is the default approach in the MASTER branch (to be 3.x) Would redhat packaging policy allow the package scripts to instead crea

Re: Radius.Logs

2012-09-11 Thread George Innocent
> I can authenticated successfully using a test user and the NAS but i check > on the logs and the scripts below keep re-appearing even when there is no > attempt on logging to the NAS. > > rad_recv: Access-Request packet from host 10.250.0.7 port 43677, id=185, > length=70 > > NAS-IP-Address = 10.

EAP-SIM on 2.2.0

2012-09-11 Thread Francois Gaudreault
Hi, I am playing with EAP-SIM on 2.2.0, but I am facing an issue I cannot even understand :S Not because I don't want to, but the error messages are not talking much. I did compute SRES/Kc for my SIM, but after the third triplet, I just have: rlm_perl: Added pair EAP-Sim-Rand3 = 0xff626ed610

Re: LDAP module file using localhost instead of external?

2012-09-11 Thread Jennifer Mehl
> On 09/10/2012 11:47 PM, Jennifer Mehl wrote: > >> Here is the output of freeradius -X showing part of the file being read but >> then ignored?: > > It doesn't look to me like it's ignoring it, which in any event the > server doesn't do. It looks like it's just a different file. It's not > j

RE: .rpmnew files during RPM upgrade

2012-09-11 Thread Brian Julin
> -Original Message- > On 11/09/12 12:16, Phil Mayers wrote: > > This approach of a separate available/enabled modules dir is the default > approach in the MASTER branch (to be 3.x) Would redhat packaging policy allow the package scripts to instead create e.g. modules.rpmnew/ and stuff its

Re: radlogin works, mobile device not

2012-09-11 Thread Fajar A. Nugraha
On Tue, Sep 11, 2012 at 7:42 PM, Mihajlo Joksimovic wrote: > No there are no other lines before that one. > > I cannot update, because univention ucs2.4 is based on lenny and FR 2.2 > depends on newer packets from squeeze. Well, lenny is no longer supported. That's a risk you face for using somet

How to Authenticate Users from Multiple IP Adresses Using the MySQL Tables

2012-09-11 Thread Scott Meyer
Using freeradius 2.1.8 The environment I am working in requires some users to be able to authenticate from multiple ip address and others from only one. How is this accomplished using the MySQL tables? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: .rpmnew files during RPM upgrade

2012-09-11 Thread Phil Mayers
On 11/09/12 12:16, Phil Mayers wrote: Change the modules directory to a locally-managed one: $INCLUDE modules-active/ ...and symlink from there to the files in the rpm-managed directory, or edit locally as needed. (In more length now that I'm back at my desk) This approach of a separate av

Re: .rpmnew files during RPM upgrade

2012-09-11 Thread Alan DeKok
Jonathan Gazeley wrote: > It seems to me that the "broken" behaviour is not with RPM but with > FreeRADIUS. Can the regular expression that includes config files and > modules be tweaked to exclude *.rpmnew files? As always, patches are welcome. Alan DeKok. - List info/subscribe/unsubscribe?

Re: .rpmnew files during RPM upgrade

2012-09-11 Thread Phil Mayers
Jonathan Gazeley wrote: >I rolled and deployed an RPM of FreeRADIUS 2.2.0. As expected for RPM >packages, it left a number of *.rpmnew files in /etc/raddb. > >Trouble is, FreeRADIUS reads these files as live configs and was unable > >to start after the upgrade, until I had manually intervened an

.rpmnew files during RPM upgrade

2012-09-11 Thread Jonathan Gazeley
I rolled and deployed an RPM of FreeRADIUS 2.2.0. As expected for RPM packages, it left a number of *.rpmnew files in /etc/raddb. Trouble is, FreeRADIUS reads these files as live configs and was unable to start after the upgrade, until I had manually intervened and deleted the .rpmnew files.

Re: radlogin works, mobile device not

2012-09-11 Thread Alan DeKok
Fajar A. Nugraha wrote: > ... and seriously, upgrade. There are many known bugs fixed since > 2.0.x. And if you can edit the configuration freely by hand, you > should be able to upgrade. He's also doing freeradius consulting for $$. a) be competent at the job you get paid for b) pay someo

Re: radlogin works, mobile device not

2012-09-11 Thread Fajar A. Nugraha
On Tue, Sep 11, 2012 at 3:54 PM, Mihajlo Joksimovic wrote: > IPhone test: > rad_recv: Access-Request packet from host 10.119.12.2 port 1318, id=21, > length=197 > Message-Authenticator = 0x24691ccd1f2040d828405d72ef7189ec > > Service-Type = Framed-User > User-Name = "nadine.bosshard"

Re: radlogin works, mobile device not

2012-09-11 Thread Alan DeKok
Mihajlo Joksimovic wrote: > Yes i have. > > Here are the two different logs, one from radlogin on the server and the > the second from an iphone who wants to connect. 1) Learn how to edit your messages. 2) READ THE MESSAGES YOU POST The answer to your problem is in the message you poste

Re: radlogin works, mobile device not

2012-09-11 Thread Mihajlo Joksimovic
Yes i have. Here are the two different logs, one from radlogin on the server and the the second from an iphone who wants to connect. RADLOGIN: rad_recv: Access-Request packet from host 127.0.0.1 port 46391, id=99, length=71 Service-Type = Login-User User-Name = "Administrator" User-Pa

Re: radlogin works, mobile device not

2012-09-11 Thread Alan DeKok
Mihajlo Joksimovic wrote: > Well its no univention package, its only from the univention repo. they > dont like other repos in their system. Please edit your posts to delete unnecessary text. > ill post two more things. the output from start with -X and the > inner-tunnel. Please do NOT pos

Re: radlogin works, mobile device not

2012-09-11 Thread Fajar A. Nugraha
On Tue, Sep 11, 2012 at 3:29 PM, Mihajlo Joksimovic wrote: > Well i started with a fresh installation and made minimal changes. > i put in the ap's in clients.conf, activated and configured ldap and copied > the certs in the correct direction. that's a start > This is the output when i start wit

Re: radlogin works, mobile device not

2012-09-11 Thread Fajar A. Nugraha
On Tue, Sep 11, 2012 at 2:13 PM, Mihajlo Joksimovic wrote: > well i cannot update the installation because its an univention > installation. Then ask them for help. > > i activated the sections in inner-tunnel like that. (sigh) had you provided full debug log, we'd be able to see whether or no

Re: radlogin works, mobile device not

2012-09-11 Thread Mihajlo Joksimovic
well i cannot update the installation because its an univention installation. i activated the sections in inner-tunnel like that. and radlogin will connect properly to ldap. when someone wants to connect via access point, it is not possible... authorize { ... # # The ldap module