RE: Radclient receives response messages from different source port than destination port of request messages

2013-05-28 Thread rosario.mattera
OK. Thank you very muck. Rosario -Original Message- From: freeradius-users-bounces+rosario.mattera=accenture@lists.freeradius.org [mailto:freeradius-users-bounces+rosario.mattera=accenture@lists.freeradius.org] On Behalf Of Alan DeKok Sent: martedì 28 maggio 2013 18:12 To: Free

RE: Quick question about $ variables

2013-05-28 Thread stefan.paetow
Thank you very much for the quick answer, Alan. :-) Stefan -Original Message- From: freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 28 May 2013 1

Re: Quick question about $ variables

2013-05-28 Thread Alan DeKok
stefan.pae...@diamond.ac.uk wrote: > Hi all, > > I've been looking at using ${...} variables wherever I can and so far it's > been relatively successful. The only place where I am stuck is using some > comparisons, e.g. > > if ("%{Attribute}" == "${variable}") { That's wrong. Use:

Re: Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Alan DeKok
Russell Mike wrote: > Dear Mulindawa / Marinal & Alan Dekok > > Thanks you very much for your advice, very much valuable for ME. Saw > some light end of the tunnel. i really need help, One more question > please. Such as as MAC authentication, is it possible to authenticate a > device using IP add

Re: Radclient receives response messages from different source port than destination port of request messages

2013-05-28 Thread Alan DeKok
rosario.matt...@accenture.com wrote: > Thanks Alan for your response. Anyway I can't modify RADIUS server > configuration because does not belongs to my domain. Then tell the other RADIUS server to fix his system. > The domain administrator told me that RADIUS server responds using a > differ

Quick question about $ variables

2013-05-28 Thread stefan.paetow
Hi all, I've been looking at using ${...} variables wherever I can and so far it's been relatively successful. The only place where I am stuck is using some comparisons, e.g. if ("%{Attribute}" == "${variable}") { ... } The Attribute portion expands, the $-variable part does not (although it

RE: Radclient receives response messages from different source port than destination port of request messages

2013-05-28 Thread rosario.mattera
Thanks Alan for your response. Anyway I can't modify RADIUS server configuration because does not belongs to my domain. The domain administrator told me that RADIUS server responds using a different source port because of Proxy-State attribute is used in the Access-Request. Is there a way to for

Re: Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Russell Mike
Dear Mulindawa / Marinal & Alan Dekok Thanks you very much for your advice, very much valuable for ME. Saw some light end of the tunnel. i really need help, One more question please. Such as as MAC authentication, is it possible to authenticate a device using IP address FR? then i can further atta

Re: Radclient receives response messages from different source port than destination port of request messages

2013-05-28 Thread Alan DeKok
rosario.matt...@accenture.com wrote: > I use radclient to send Access-Request messages to a RADIUS server > (towards 1812 port), which responds with Access-Accept messages with a > different source port number (e.g. 28120). So radclient prints out: > > rad_recv: Access-Accept packet from host 10.1

Re: Testing failure during setup

2013-05-28 Thread Alan DeKok
Elizabeth Fife wrote: > Both servers were installed from apt-get which presently gives you > freeradius version 2.1.12 for ubuntu 13.04 servers Well, it *should* work. I don't recall ever seeing this issue before. > PS if it helps radtest user1 secret 192.168.0.93 1812 aaabbb works Because

Re: Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Alan DeKok
Russell Mike wrote: > Currently, We do manually connection / disconnection. If a customer did > not pay until 31st, somebody manually disconnect the link. And manually > connect when customer comes to pay. That's what Session-Timeout is for. Set it to 1 day (86400 seconds). That way they have

Re: Freeradius: change user passwords through pam_radius

2013-05-28 Thread Alan DeKok
Roberto Carna wrote: > OK Alan thanks...do you know if is there any way that let users to > change their own Radius passwords by themselves ??? You were responding to Arran, not Alan. The only way for users to change the RADIUS password is to give them some kind of access to the database used

Re: Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Mrinal K
Daloradius might be an overkill. I guess you can update your nas table (who has paid and who did not) every night and restart radius service. On Tue, May 28, 2013 at 6:13 PM, Mulindwa wrote: > There is something called Daloradius which works with Freeradius > > > Eric M > ---

Radclient receives response messages from different source port than destination port of request messages

2013-05-28 Thread rosario.mattera
Hi everyone, I use radclient to send Access-Request messages to a RADIUS server (towards 1812 port), which responds with Access-Accept messages with a different source port number (e.g. 28120). So radclient prints out: rad_recv: Access-Accept packet from host 10.130.159.200 port 28120, id=20,

Re: help

2013-05-28 Thread Giovanni Perna
Hi all, I use only radiusClient : radclient -xf test.tcs ip:port -r1 -s auth log received: rad_recv: Access-Accept packet from host port 28120, id=20, length=266 radclient: received response to request we did not send. (id=20 socket 3) radclient: no response from server for ID 20 socket 3

Re: Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Mulindwa
There is something called Daloradius which works with Freeradius   Eric M From: Russell Mike To: FreeRadius users mailing list Sent: Tuesday, May 28, 2013 3:20 PM Subject: Service Provisioning Using AAA (FreeRadius) Dear FreeRadius Gurus Greetings, I wo

Re: Freeradius: change user passwords through pam_radius

2013-05-28 Thread Roberto Carna
OK Alan thanks...do you know if is there any way that let users to change their own Radius passwords by themselves ??? Thanks again. Roberto 2013/5/27 Arran Cudbard-Bell > > On 27 May 2013, at 18:03, Arran Cudbard-Bell > wrote: > > > > > On 27 May 2013, at 15:26, Roberto Carna > wrote: > >

Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Russell Mike
Dear FreeRadius Gurus Greetings, I work with an ISP, i have been asked to research about "service provisioning using AAA". I am NOT very new to FreeRadius. Have implemented and managing central CoovaChilli hotspot solution where we run more than 35 hotspots across the city using CoovaChilli + Free

Re: AW: Override EAP invalid result in authentication section

2013-05-28 Thread Phil Mayers
On 05/28/2013 09:06 AM, PENZ Robert wrote: But I can't change a Reject to Accept in Post-Auth .. at least that's what I read. Can you show me what I should to? I don't need to change VLANs .. just need an accept, the VLAN is already correct (set in authorize already as it's the same as for MAC

AW: Override EAP invalid result in authentication section

2013-05-28 Thread PENZ Robert
Hi! > That doesn't work. You MUST return an EAP-Message attribute in the > reply. Just sending an Access-Accept means that the NAS will *ignore* > it, and close the connection. I've removed the "Auth-Type := Accept" lines and keep the "ok" line. so it looks this way # EAP did

RE: rlm_sql_oracle:libclntsh.so.11.1: cannot open shared object file

2013-05-28 Thread Okis Chuang
Finally, I got this done later by install some missing libs and modules of. lol Thans Iliya anyway! But I encountered another problem on sql authorize. I'll post another one on the list later. Thanks all of you who spend time for reading this. Okis. From: Iliya Peregoudov [via FreeRADI