On Monday, February 18, 2013, Mobin Yazarlou wrote:
>
>
> On Mon, Feb 18, 2013 at 9:50 PM, Phil Mayers
> 'p.may...@imperial.ac.uk');>
> > wrote:
>
>> On 18/02/13 18:02, Mobin Yazarlou wrote:
>>
>>> Hi,
>>> I am using freeradius v2.1.12 with MySQL support and noticed if a user
>>> disconnect wh
On Monday, February 18, 2013, Phil Mayers wrote:
> On 18/02/13 18:02, Mobin Yazarlou wrote:
>
>> Hi,
>> I am using freeradius v2.1.12 with MySQL support and noticed if a user
>> disconnect when radius server is down, NAS can not inform radius about
>> user being disconnected and radius assume us
On 18/02/13 18:02, Mobin Yazarlou wrote:
Hi,
I am using freeradius v2.1.12 with MySQL support and noticed if a user
disconnect when radius server is down, NAS can not inform radius about
user being disconnected and radius assume user is still online after
coming up again. This restricts user fr
Hi,
I am using freeradius v2.1.12 with MySQL support and noticed if a user
disconnect when radius server is down, NAS can not inform radius about user
being disconnected and radius assume user is still online after coming up
again. This restricts user from connecting again when you set
simultaneou
To answer my own question, I found that using the return code RLM_MODULE_OK
triggers the server to respond back with Access-Accept. If I used
RLM_MODULE_HANDLED instead, the response packet type was set to what I
expected it to be. This makes sense since I expect the client to exchange
several mess
On 18/02/13 16:43, Michell wrote:
Hello all,
what would be the best way to not allow the user connection that does
not have a group or have a group that does not exist?
What does "have a group that does not exist" mean? How can you be in a
group that doesn't exist?
Should I create a polic
Hello Mr. DeKok,
Thank you for your reply. There are many NASes in many regions and translation
rules for them are different, I wanted make translation configuration using my
ERP interface. Using files for this I will have to manage NAS configuration in
two places and have a huge policy.conf.
Maxim S. Denisov wrote:
> I need to translate calling-station-id to E.164. NAS can send these numbers
> in several formats, for example number +74951234567 can come as 1234567,
> 04951234567 or 0074951234567. I think about adding a field in nas table and
> specify several regexps with delimiter.
Hello,
I need to translate calling-station-id to E.164. NAS can send these numbers in
several formats, for example number +74951234567 can come as 1234567,
04951234567 or 0074951234567. I think about adding a field in nas table and
specify several regexps with delimiter. Can I fetch this field,
Hi,
Looking through archives for this exact question, I see a post from 2008 (
http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg47423.html)
where this exact question was previously asked.
Here is my server version info:
radiusd: FreeRADIUS Version 2.2.0, for host x86_64-unknow
I've configured my server to successfully authenticate against AD using my ldap
module.
However, my users are in multiple OUs, and I can only specify one basedn at a
time. I know that's probably not good directory structure, but I don't manage
our directory. What approach to others use to sea
Srinu Bandari wrote:
> And New one: Here the tls state machine goes from Access-Request to
> Access-Rejected and then ends with segmentation fault
The debug log doesn't show a SEGV...
But there was an unrelated issue. Please do "git pull" for the
v2.x.x. branch, and try again. I've fixed th
On 15-Feb-13 09:19, freeradius-users-requ...@lists.freeradius.org wrote:
[SNIP/]
>I hope someone can point me in the right direction here. I am trying to
>build FR version 2.1.12 with the option "--with-experimental-modules" on
>Debian Linux Squeeze 2.6.32-5-amd64 because I need to
On 18/02/13 10:57, Muhammad Nadeem wrote:
ca_cert="/usr/local/etc/raddb/certs/ca.pem"
client_cert="/usr/local/etc/raddb/certs/client.pem"
private_kry="/usr/local/etc/raddb/certs/server.key"
^^^ typo - should be "client.key"
This is basic stuff; please read the docs for wpa_supplicant/eapol_te
Hi,
> > (but this mailing list isnt a support forum for either of those tools!)
I guess you dont read what I post..which means I'm not likely to answer you.
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 2/18/13, a.l.m.bu...@lboro.ac.uk wrote:
> Hi,
>
>> Thankfully, this isn't correct. You can use "eapol_test" which comes
>> with the "wpa_supplicant" source to test pretty much every EAP type
>> there is, including EAP-TLS.
>>
>> To the OP - download wpa_supplicant sources and build eapol_test.
Alan,
We have tried with patch provided.
Here is the Debug log form old (master 2.2.0) and new (latest 2.x.x branch
18/2/2013)
Old one: Here the tls state machine goes from Access-Request to
Access-Challenge and then to Access-Accepted
And New one: Here the tls state machine goes from Acc
On 2/18/13, Phil Mayers wrote:
> On 02/18/2013 06:31 AM, Tobias Hachmer wrote:
>> Hello Muhammad,
>>
>> On 18.02.2013 07:17, Muhammad Nadeem wrote:
>>> Now I want to practically test EAP-TLS with freeradius on REDHAT 5. I
>>> have configured eap.confg to use EAP-TLS. But i don't know , how to
>>>
Hi,
> Thankfully, this isn't correct. You can use "eapol_test" which comes
> with the "wpa_supplicant" source to test pretty much every EAP type
> there is, including EAP-TLS.
>
> To the OP - download wpa_supplicant sources and build eapol_test.
eapol_test is VERY powerful.and there are even
On 02/18/2013 06:31 AM, Tobias Hachmer wrote:
Hello Muhammad,
On 18.02.2013 07:17, Muhammad Nadeem wrote:
Now I want to practically test EAP-TLS with freeradius on REDHAT 5. I
have configured eap.confg to use EAP-TLS. But i don't know , how to
send requests to freeradius server, so that he can
20 matches
Mail list logo
