Re: Replicating to multiple servers.

2013-09-12 Thread Cooper, Tom
Sorted. I did this in my acct_users file: DEFAULT Replicate-To-Realm := "ALLOT-SMP",Replicate-To-Realm += "Procera-SMP" On 12/09/2013 08:29, Tom Cooper wrote: > Hi all, > How can I replicate to more than 1 server? I have set up replication to > one host, but when I set up a second host it does n

Re: Replicating to multiple servers.

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 08:17, "Cooper, Tom" wrote: > Sorted. > I did this in my acct_users file: > > DEFAULT Replicate-To-Realm := "ALLOT-SMP",Replicate-To-Realm += > "Procera-SMP" or preacct { update control { Replicate-To-Realm := "ALLOT-SMP" Replicate-T

Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
Hello, I am trying to use http://www.packetfence.org/downloads/PacketFence/freeradius/freeradius-2.2.0-2.el6.src.rpm to create custom FreeRadius RPMs for RHEL/CentOS 6. The main aim is to add --with-dhcp compile option which is not included in the standard build. The secondary aim is to bu

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Arran Cudbard-Bell
--with-rlm-ldap-lib-dir= --with-rlm-ldap-include-dir= Top level configure. > > Thanks, > Nick > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Replicating to multiple servers.

2013-09-12 Thread Cooper, Tom
I did that as well. I included that in the original post. On 12/09/2013 09:28, Arran Cudbard-Bell wrote: > > On 12 Sep 2013, at 08:17, "Cooper, Tom" wrote: > >> Sorted. >> I did this in my acct_users file: >> >> DEFAULT Replicate-To-Realm := "ALLOT-SMP",Replicate-To-Realm += >> "Procera-SMP" > >

Re: Replicating to multiple servers.

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 10:35, "Cooper, Tom" wrote: > I did that as well. I included that in the original post. No you didn't. You included a bunch of shit config that didn't work in your first post. You can't put server sections in realms, it doesn't work. Just because the server doesn't complai

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
On 12/9/2013 11:47 πμ, Arran Cudbard-Bell wrote: --with-rlm-ldap-lib-dir= --with-rlm-ldap-include-dir= Top level configure. Thanks Arran, It worked! I have built and installed the new RPMs and things are working OK. Interestingly, trying to build with the default system libs was failing:

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 11:02, Nikolaos Milas wrote: > On 12/9/2013 11:47 πμ, Arran Cudbard-Bell wrote: > >> >> --with-rlm-ldap-lib-dir= >> --with-rlm-ldap-include-dir= >> >> Top level configure. > > Thanks Arran, > > It worked! I have built and installed the new RPMs and things are working OK.

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Fajar A. Nugraha
On Thu, Sep 12, 2013 at 3:25 PM, Nikolaos Milas wrote: > Hello, > > I am trying to use http://www.packetfence.org/**downloads/PacketFence/** > freeradius/freeradius-2.2.0-2.**el6.src.rpmto > create custom

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
On 12/9/2013 2:46 μμ, Arran Cudbard-Bell wrote: Your linker's search path doesn't include the directory the libraries are in. Hmm, it seems the path is included but the ldap libs therein are not used because there is an "override" in /etc/ld.so.conf: # ldconfig -v | grep -v ^$'\t' /usr/lib6

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Alan DeKok
Nikolaos Milas wrote: > ldconfig -v output does not list any *ldap* libraries in /usr/lib64 > although they exist (while it lists *ldap* libs in > /usr/local/openldap/lib64), obviously because: Well... this is a local OS issue. You'll need to consult your OS documentation to figure out what's

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 16:29, Arran Cudbard-Bell wrote: > >> It's like you're asking for flying lessons, and showing up with a >> bicycle. There's a bit of a disconnect somewhere. > > Not true, they make these awesome little fold up bikes you can chuck in the > back of the plane. Still trying t

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 15:47, Kevin Bigalke wrote: > Hello, > i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login with > 802.1 works perfectly. I`m using a Windows LDAP Server for the Login and want > to add a second LDAP-Server for a Fail Over. I`m following the Tutorials to

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Alan DeKok
Kevin Bigalke wrote: > i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login > with 802.1 works perfectly. I`m using a Windows LDAP Server for the > Login and want to add a second LDAP-Server for a Fail Over. I`m > following the Tutorials to setup my Freeradius Server: **Click > <

Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Kevin Bigalke
Hello, i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login with 802.1 works perfectly. I`m using a Windows LDAP Server for the Login and want to add a second LDAP-Server for a Fail Over. I`m following the Tutorials to setup my Freeradius Server: *Click*. I`cant find a suita

Freeradius + 2 x LDAP + VLAN

2013-09-12 Thread Miroslav Lednicky
Hello, I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 I using it for 802.1x users. I need switch users from ldap1 to VLAN 1 and users from ldap2 to VLAN 2. I don't know how can i do it. My configuration: /etc/freeradius/modules/ldap: ldap ldap1 { ...

EAP + SSL + Certificate chains

2013-09-12 Thread Trevor Jennings
Hello, We are using freeradius with EAP/SSL and although it is working fine, I was wondering if there was a way to prevent the user from getting the prompt to accept the certificate? I have combined the intermediate and server certificates to one file and used that file in the 'certificate_file'

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
> It's like you're asking for flying lessons, and showing up with a > bicycle. There's a bit of a disconnect somewhere. Not true, they make these awesome little fold up bikes you can chuck in the back of the plane. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubsc

Re: Freeradius + 2 x LDAP + VLAN

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 18:18, Miroslav Lednicky wrote: > Hello, > > I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 authorize { ldap1 if (ok) { update reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802 Tunnel-Private-Group-Id = 1

RE: EAP + SSL + Certificate chains

2013-09-12 Thread Brian Julin
> Trevor Jennings wrote: > We are using freeradius with EAP/SSL and although it is working fine, I was > wondering if there was a way to prevent the user from getting the prompt to > accept the certificate? I have combined the intermediate and server > certificates to one file and used that fil

Re: EAP + SSL + Certificate chains

2013-09-12 Thread Mathieu Simon
2013/9/12 Brian Julin > > > Trevor Jennings wrote: > > [...] > > > On OSX, the certificates are marked as valid, including the root, > intermediate > > and server, but still prompts the user to accept. Is there a way around > this? > > About the only way I can think of is to install a profile (.m

RE: EAP + SSL + Certificate chains

2013-09-12 Thread Brian Julin
> Mathieu wrote: > At least from that side there is hope for improvements with Android 4.3 > onwards there > are API calls for enterprise wireless configuration. > > Maybe "someone" steps up by making an application that can manage > profiles or something like this. That is promising, but I hope

Freeradius authenticate against Active directory

2013-09-12 Thread trevor obba
I am running freeradius 2.2.0, I have configured freeradius to authenticate against active directory and also offer eduroam service  When I authenticate my username as “test” and password in to my wireless devices it works. However if I try to authenticate my username as t...@abc.ac.uk it does no