freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
Hi there, Im trying use freeradius with oracle database. I've used guide on this site http://wiki.freeradius.org/modules/Rlm_sql_oracle to compile oracle driver. I'e installed oracle instant client from rpm packages (basic + devel) When i use ./configure --with-oracle-lib-dir=/usr

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread A . L . M . Buxey
Hi, >I'e installed oracle instant client from rpm packages (basic + devel) okay. if you've done this rather than manually installing from Oracle then its most likely that the paths are different...you will need to check where your Oracle files have been installed and use those paths instead

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Fajar A. Nugraha
On Thu, Oct 10, 2013 at 2:22 PM, Puzzel wrote: > --with-oracle-include-dir=/usr/lib/oracle/11.2/client64 > > ** ** > > > configure: WARNING: oracle headers not found. Use > --with-oracle-include-dir=.configure: WARNING: silently not > building rlm_sql_oracle. > > configure: WARNING: FA

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
Yes, you are right, the oracle inlcude path was in the different location (/usr/include/oracle/11.2/client64 not /usr/lib...). Now i've got another problem. ./configure --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib --with-oracle-include-dir=/usr/include/oracle/11.2/client64 checking for

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 09:22, Puzzel wrote: > Yes, you are right, the oracle inlcude path was in the different location > (/usr/include/oracle/11.2/client64 not /usr/lib...). > > Now i've got another problem. > > ./configure --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib > --with-oracle-i

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
Tnx Arran, ./configure went fine and then created all.mk file. What to do next? "make" don't work. I'm sorry i'm not very much experienced in linux. -Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmai

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-10 Thread Alex Sharaz
o.k deinstalled the package and package manager I was using, installed homebrew, installed latest openssl and talloc and ….. just compiled and installed. Simples! Thanks for that A On 9 Oct 2013, at 11:54, Arran Cudbard-Bell wrote: > > On 9 Oct 2013, at 11:21, Alex Sharaz wrote: > >> you d

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 10:31, Puzzel wrote: > Tnx Arran, > > ./configure went fine and then created all.mk file. > What to do next? "make" don't work. I'm sorry i'm not very much experienced > in linux. You need to do make in the top level directory not in the module directory. all.mk is a make i

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 10:44, Alex Sharaz wrote: > o.k deinstalled the package and package manager I was using, installed > homebrew, installed latest openssl and talloc and ….. just compiled and > installed. Simples! Hmm wonder what rudix was doing to mess up talloc installation. Anyway, we ha

Generating timing stats for ntlm_auth

2013-10-10 Thread Phil Mayers
All, We're seeing bursts of: Thu Oct 10 11:52:14 2013 : Info: WARNING: Child is hung for request 47516341 in component authenticate module peap. Thu Oct 10 11:52:16 2013 : Info: WARNING: Module rlm_eap became unblocked for request 47516341 ...since the return of our students this year. I

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-10 Thread Alex Sharaz
On 10 Oct 2013, at 12:02, Arran Cudbard-Bell wrote: > > On 10 Oct 2013, at 10:44, Alex Sharaz wrote: > >> o.k deinstalled the package and package manager I was using, installed >> homebrew, installed latest openssl and talloc and ….. just compiled and >> installed. Simples! > > Hmm wonder

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
When i do make at top level, i'm getting this output: make Makefile:10: *** Missing 'Make.inc' Run './configure [options]' and retry". Stop. -Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail@li

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 12:34, "Puzzel" wrote: > When i do make at top level, i'm getting this output: > > make > Makefile:10: *** Missing 'Make.inc' Run './configure [options]' and retry". > Stop. - Missing - Something is not there that should be. - 'Make.inc' - The thing that should be there but

Re: Generating timing stats for ntlm_auth

2013-10-10 Thread A . L . M . Buxey
Hi, > Thu Oct 10 11:52:16 2013 : Info: WARNING: Module rlm_eap became > unblocked for request 47516341 > > ...since the return of our students this year. > > I am 99% sure this is ntlm_auth being slow, and I have a strong > suspicion this is related to some changes in our AD infrastructure > ove

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
I've made configure at top level ./configure --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib --with-oracle-include-dir=/usr/include/oracle/11.2/client64 Then i made make, but i still can't find rlm_sql_oracle.so file. :/ -Original Message- From: freeradius-users-bounces+puzzel1982

Re: Generating timing stats for ntlm_auth

2013-10-10 Thread Alan DeKok
Phil Mayers wrote: > In order to prove this to the AD team, I need to gather some timing > stats for ntlm_auth; can anyone think of an easy way to do this within > FreeRADIUS? I had patches for this a while ago. But they won't apply to the current code. The idea was to update the modsingle s

Re: Generating timing stats for ntlm_auth

2013-10-10 Thread Phil Mayers
On 10/10/13 12:56, a.l.m.bu...@lboro.ac.uk wrote: Hi, Thu Oct 10 11:52:16 2013 : Info: WARNING: Module rlm_eap became unblocked for request 47516341 ...since the return of our students this year. I am 99% sure this is ntlm_auth being slow, and I have a strong suspicion this is related to some

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 13:39, Puzzel wrote: > I've made configure at top level ./configure > --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib > --with-oracle-include-dir=/usr/include/oracle/11.2/client64 > > Then i made make, but i still can't find rlm_sql_oracle.so file. :/ run the configu

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Alan DeKok
Puzzel wrote: > I've made configure at top level ./configure > --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib > --with-oracle-include-dir=/usr/include/oracle/11.2/client64 If the build is having issues, you should READ the output of "configure". It tells you what it's building, and wha

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread John Dennis
On 10/10/2013 08:39 AM, Puzzel wrote: > I've made configure at top level ./configure > --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib > --with-oracle-include-dir=/usr/include/oracle/11.2/client64 > > Then i made make, but i still can't find rlm_sql_oracle.so file. :/ Try reading the outp

RE: Generating timing stats for ntlm_auth

2013-10-10 Thread stefan.paetow
> authentications (as microsoft call it) - but I'm also looking at > samba4 - as it has a new option that will balance ntlm_auth against all > known boxes rather than the first box it latches onto - to spread the > load. Samba 4 is lurvely... apparently 100% compatible with existing AD installati

Re: Generating timing stats for ntlm_auth

2013-10-10 Thread A . L . M . Buxey
Hi, > Any chance you can point me in the direction of these? heres one: http://support.microsoft.com/kb/2688798 > Semi-related, but to my annoyance we're seeing rather less SSL > resumption than I would expect, given that iOS and Android both do > it by default. Cisco wireless problem? there

Re: Generating timing stats for ntlm_auth

2013-10-10 Thread A . L . M . Buxey
Hi, > Samba 4 is lurvely... apparently 100% compatible with existing AD > installations, although, as always, it's a bit finicky and info is a bit thin > on the ground (and I've not written up a guide when I set my test environment > up that uses an S4 server for EAP-MSCHAPv2). But at least it

RE: Generating timing stats for ntlm_auth

2013-10-10 Thread stefan.paetow
> it can also BE an AD master etc. anyway, you dont know how tempting it > was to "yum install samba4" on our production system ;-) Indeed. That's exactly what I'm using it for. :-) > I'd certainly like to see some samba3.x versus samba4 benchmarks in > this sort of context Yes, versus Windows

Re: FR3 Debugging Switches

2013-10-10 Thread Phil Mayers
On 09/10/13 19:09, Alan DeKok wrote: That is *exactly* what the server does for TCP. ...in which case my comment is entirely redundant, please disregard! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Generating timing stats for ntlm_auth

2013-10-10 Thread Brian Julin
Phil wrote: > I could wrap ntlm_auth in a script that times it and lots the info, but > I'm slightly wary of that - it might perturb the timings. > > Any obvious/easy thing I'm missing? You might be able to run FR under gdb (or attach/resume a running FR), and set breakpoints with commands that

Re: Generating timing stats for ntlm_auth

2013-10-10 Thread Phil Mayers
On 10/10/13 17:16, Brian Julin wrote: You might be able to run FR under gdb (or attach/resume a running FR), and set breakpoints with commands that resume after running the GDB commands. That's in inventive one, but I'm not *that* desperate yet! - List info/subscribe/unsubscribe? See http://www

Error messages in debug on 3.0

2013-10-10 Thread Phil Mayers
I've just ported our config to 3.0 and I'm seeing a few error messages; they don't seem to be critical but are concerning me. Specifically I'm seeing: ERROR: Conditional evaluation failed due to internal sanity check. ...whenever I try to compare against absent attributes. What's the correct

Re: Error messages in debug on 3.0

2013-10-10 Thread Phil Mayers
On 10/10/13 18:32, Phil Mayers wrote: I've just ported our config to 3.0 and I'm seeing a few error messages; they don't seem to be critical but are concerning me. Specifically I'm seeing: We're also getting: Info: Invalid operator for item Sql-Group: reverting to '==' ...which is logged to

Re: Error messages in debug on 3.0

2013-10-10 Thread Arran Cudbard-Bell
> On 10 Oct 2013, at 18:32, Phil Mayers wrote: > > I've just ported our config to 3.0 and I'm seeing a few error messages; they > don't seem to be critical but are concerning me. > > Specifically I'm seeing: > > ERROR: Conditional evaluation failed due to internal sanity check. > > ...whe

Re: Error messages in debug on 3.0

2013-10-10 Thread Phil Mayers
On 10/10/13 18:51, Arran Cudbard-Bell wrote: possibly if (outer.request && Hmm, no same thing, and worse it's squashing Module-Failure-Message :o( - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error messages in debug on 3.0

2013-10-10 Thread Alan DeKok
Phil Mayers wrote: > I've just ported our config to 3.0 and I'm seeing a few error messages; > they don't seem to be critical but are concerning me. > > Specifically I'm seeing: > > ERROR: Conditional evaluation failed due to internal sanity check. That should be fixed. Either it can be delet

Re: Generating timing stats for ntlm_auth

2013-10-10 Thread Jonathan Gazeley
On 10/10/13 15:01, a.l.m.bu...@lboro.ac.uk wrote: Hi, Any chance you can point me in the direction of these? heres one: http://support.microsoft.com/kb/2688798 Semi-related, but to my annoyance we're seeing rather less SSL resumption than I would expect, given that iOS and Android both do i

Re: Error messages in debug on 3.0

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 22:23, Alan DeKok wrote: > Phil Mayers wrote: >> I've just ported our config to 3.0 and I'm seeing a few error messages; >> they don't seem to be critical but are concerning me. >> >> Specifically I'm seeing: >> >> ERROR: Conditional evaluation failed due to internal sanity

clone break freeradius

2013-10-10 Thread trevor obba
I configured freeradius version 2.2.0 running on Ubuntu 12.04 to authenticate against active directory and it is working fine until I decide to clone (vmware) the machine. Once the machine is clone I changed the IP address, hostname in (/etc/hosts and /etc/hostname) and also changed the name in /e