Re: The Operation of SQL module

2013-09-22 Thread Mehdi Ravanbakhsh
thanks Alan On Fri, Sep 20, 2013 at 9:44 PM, Alan DeKok al...@deployingradius.comwrote: Mehdi Ravanbakhsh wrote: *i can not find any detailed document on this.* doc/rlm_sql. It's on the Wiki, and distributed with the server tar file. Alan DeKok. - List info/subscribe/unsubscribe?

Expiration and EAP verification question

2013-09-22 Thread WorkingMan
In strongswan for ikev1 it uses xauth-eap that I use to do validation with RADIUS (that's the only way for ikev1 clients with strongswan). My design is that I don't actually care about secondary authentication with RADIUS since it's already doing certificate validation from strongswan side

PPTP and IPSEC/IKE1/2

2013-09-22 Thread WorkingMan
I am wondering is it possible to configure one server using a single IP to handle PPTP/IPSEC --- freeradius? Does it make sense (or possible) to create a virtual servers against PPTP and IPSEC separately? I am just wondering what's the best practice. I don't want to increase number of hardware

Re: PPTP and IPSEC/IKE1/2

2013-09-22 Thread Phil Mayers
On 22/09/2013 15:12, WorkingMan wrote: I am wondering is it possible to configure one server using a single IP to handle PPTP/IPSEC --- freeradius? Does it make sense (or possible) to create a virtual servers against PPTP and IPSEC separately? I am just wondering what's the best practice. I

Re: PPTP and IPSEC/IKE1/2

2013-09-22 Thread Alan DeKok
WorkingMan wrote: I am wondering is it possible to configure one server using a single IP to handle PPTP/IPSEC --- freeradius? Yes. Does it make sense (or possible) to create a virtual servers against PPTP and IPSEC separately? If you want. Read raddb/sites-available/README. It

Re: Expiration and EAP verification question

2013-09-22 Thread Alan DeKok
WorkingMan wrote: My design is that I don't actually care about secondary authentication with RADIUS since it's already doing certificate validation from strongswan side before doing secondary authentication. All is good if I was only need secondary authentication since I can bypass with

Re: PPTP and IPSEC/IKE1/2

2013-09-22 Thread WorkingMan
Alan DeKok aland at deployingradius.com writes: WorkingMan wrote: I am wondering is it possible to configure one server using a single IP to handle PPTP/IPSEC --- freeradius? Yes. Does it make sense (or possible) to create a virtual servers against PPTP and IPSEC separately?

Re: Expiration and EAP verification question

2013-09-22 Thread WorkingMan
Alan DeKok aland at deployingradius.com writes: WorkingMan wrote: My design is that I don't actually care about secondary authentication with RADIUS since it's already doing certificate validation from strongswan side before doing secondary authentication. All is good if I was only

Re: PPTP and IPSEC/IKE1/2

2013-09-22 Thread Alan DeKok
WorkingMan wrote: So from what I gather I can make my VPN servers pointing to different ports (in strongswan.conf) and have freeradius's listen{} pointing to matching ports but I can keep the same IP for the virtual servers. Yes. Does this look correct (or at least conceptually)? My test

Re: Expiration and EAP verification question

2013-09-22 Thread Alan DeKok
WorkingMan wrote: Can you give me an example on how to always accept connection on EAP-* authentication (it will be password based from xauth-eap from strongswan) No. EAP doesn't (and can't) work that way. but at the same time still honour Expiration logic? I am not sure what to do it

DHCP Relay Invalid type dhcp in listen section

2013-09-22 Thread bayu setiawan
Hi, i have problem when i configured for dhcp relay, i have configured ./sites-enabled/dhcp-relay according to https://github.com/FreeRADIUS/freeradius-server/blob/master/raddb/sites-available/dhcp.relay and i have included dictionary.dhcp in ./dictionary config file, but i still got error

Re: DHCP Relay Invalid type dhcp in listen section

2013-09-22 Thread Fajar A. Nugraha
Which version is this? 2.2.0 should have DHCP support enabled by default. Older version (e.g. the one bundled with debian/ubuntu) might not have that support yet. -- Fajar On Mon, Sep 23, 2013 at 10:17 AM, bayu setiawan baydongko...@gmail.comwrote: Hi, i have problem when i configured for

Re: DHCP Relay Invalid type dhcp in listen section

2013-09-22 Thread bayu setiawan
this is my version *radiusd: FreeRADIUS Version 2.1.12, for host i386-redhat-linux-gnu* On Mon, Sep 23, 2013 at 10:25 AM, Fajar A. Nugraha l...@fajar.net wrote: Which version is this? 2.2.0 should have DHCP support enabled by default. Older version (e.g. the one bundled with

Re: DHCP Relay Invalid type dhcp in listen section

2013-09-22 Thread Fajar A. Nugraha
On Mon, Sep 23, 2013 at 10:34 AM, bayu setiawan baydongko...@gmail.comwrote: this is my version *radiusd: FreeRADIUS Version 2.1.12, for host i386-redhat-linux-gnu* Short version: upgrade. If you know how to build a package from source (i.e. rpmbuild), 2.2.0 has a working spec file. Due to

Re: DHCP Relay Invalid type dhcp in listen section

2013-09-22 Thread bayu setiawan
Is dhcp not available in 2.1.12 version? and is my configure automaticly exitst if i built package from source for latest 2.x.x version? so i don't need reconfigure it? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: DHCP Relay Invalid type dhcp in listen section

2013-09-22 Thread Fajar A. Nugraha
On Mon, Sep 23, 2013 at 11:35 AM, bayu setiawan baydongko...@gmail.comwrote: Is dhcp not available in 2.1.12 version? Yes, if you enable it. and is my configure automaticly exitst if i built package from source for latest 2.x.x version? so i don't need reconfigure it? No idea what you