Re: Backtrace found in debug: FreeRadius 2.0.5 version

2008-09-25 Thread A . L . M . Buxey
Hi, > How can I able to revert back to my earlier FreeRadius Version 2.0.5 to > come out of this backtrace problem ? download 2.0.5 tarball from freeradius.org, extract it, build it, then install it. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Filtering RADIUS request to only allow EAP-TTLS in a proxying-only server?

2008-09-24 Thread A . L . M . Buxey
Hi, > One thing I'd like to achive in the "EDUROAM"-responsible RADIUS > "router" (server) is to make sure that *only* EAP-TTLS requests are > forwarded to the RADIUS server doing the real user authentication. the inner, or the whole request? if only the inner, then please note that this will br

Re: Fw: Re: Raduisd -X No output

2008-09-24 Thread A . L . M . Buxey
Hi, > Alan good call...  I thought that I disabled all the firewall, SElinux during > the install. > > Now I am working with the windows box XP Pro. I connects be still can't find > a cert for the network linksys. ful debug log as per the FASQ, docs and countless posts on this ML. when you ins

Re: Filtering RADIUS request to only allow EAP-TTLS in a proxying-onlyserver?

2008-09-24 Thread A . L . M . Buxey
Hi, > >Ie, I would like to make sure that it will reject requests that > >come in from the outside with user+password stuff sent in cleartext. such requests will be missing many attributes. use unlang to check for the absence of those. alan - List info/subscribe/unsubscribe? See http://www.freer

Re: Raduisd -X No output

2008-09-24 Thread A . L . M . Buxey
Hi, > Then I go to the XP system and connect to the Radius server ? And windows > gives a message that it can't find a cert to the network linksys... > > There is no further output on the radius -X log. on the fedora box tcpdump -eqntl -i eth0 port 1812 or port 1812 check iptables - you might

Re: freeradius 2.1.0 default mysql schema don't have nasidentifier table

2008-09-24 Thread A . L . M . Buxey
Hi, > And I did exactly that. :-) Anyway, it would be a small change to the > schema and queries... I also wouldn't mind having it in by default. But > I don't care enough to submit a patch. I think the issue is an UPDATE/UPGRADE issue - if the queries are liek that by default - ie schema change

Re: autentication against active directory does not work

2008-09-22 Thread A . L . M . Buxey
Hi, > now im receiving this >   ERROR: Unknown value specified for Auth-Type.  Cannot perform requested > action. > auth: Failed to validate the user. >   WARNING: Unprintable characters in the password. ?  Double-check the shared > secret on the server and the NAS! you are still having a

Re: Fwd: rlm-perl lc usernames

2008-09-22 Thread A . L . M . Buxey
Hi, > User-Name = "\\raduser" ^ ha. okay. with just a plain username you are safe, but with this windows case, you are dealing with \r - which is a special character. its getting borked elsewhere. to verify this use another username that cannot be

Re: Fwd: rlm-perl lc usernames

2008-09-22 Thread A . L . M . Buxey
Hi, > Hi Alan, it is lc'ing it, however it is also moving the "r" from the > beginning of the username to the end of the username, which is what I"m > trying to stop ..and from what you've posted so far, I'd say it isnt moving it. wheres the other upper case tests and debug as per requested? a

Re: Fwd: rlm-perl lc usernames

2008-09-22 Thread A . L . M . Buxey
Hi, > thoughts on where to go from here to get this not to alter the username and > just lc it but its not altering (apart from LC'ing it) - as your other post shows. throw the daemon some uppercased username (eg with 'radtest' tool) and check the debugging to see what you see from PERL alan -

Re: mod_radius error

2008-09-22 Thread A . L . M . Buxey
hi, specifically this isnt a mod_radius problem - its a 'how to configure apache for my distro' problem. ubuntu have split their config into 'enabled modules' which are then called into play read a suitable document to find how to get the module incorporated into your apache 2.2.x install eg h

Re: Fwd: rlm-perl lc usernames

2008-09-20 Thread A . L . M . Buxey
Hi, > Nobody :( have any tidbits to help me isolate this, obviously its not the > perl script but what is altering the username. hmmm, you play with user-name and yet you return MODULE_OK.surely you've played with attributes so *SHOULD* be sending MODULE_UPDATED alan - List info/subscribe/un

Re: MySQL not in the default port

2008-09-20 Thread A . L . M . Buxey
Hi, > Thanks man, it worked ... > Sorry, I hadn't found any docs about this directive ... thats okay - you wouldnt have, its currently not documented anyway so far as i could quickly see. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: proxying problem

2008-09-19 Thread A . L . M . Buxey
Hi, > > I want to authenticate a user, if he is not found in 192.168.123.13, ( > localhost ), he'll be proxied to 192.168.123.9 > > I'm putting this in proxy.conf, but it's not even sending a request to > 192.168.123.9! Any ideas? sure - you've defined the realm 'waza' but what aare you doing

Re: MySQL not in the default port

2008-09-18 Thread A . L . M . Buxey
Hi, > Hello, > > I had to install my MySQL not in the default port (3306), and I'm not able to > connect to the server ... I tried everything in the sql.conf like > localhost:5999, my.IP:5999, hostname, etc and nothing makes it to connect ... > Is there any (right) way to specify a port to conn

Re: Users can't authenticate through PEAP

2008-09-18 Thread A . L . M . Buxey
hi, whilst its great to see documentation available on other sites , please start with the freeRADIUS documentation - and , even better, read the files eg eap.conf alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, > I saw that there were a few changes since this message was sent. I did a > new git clone a couple hours ago and installed from there. Here is the > result. As a reminder, I am using a configuration based on the > robust-proxy-accounting example. FR 2.1.0 crashes for me when the remote

Re: Cisco IOS - rlm_pap

2008-09-18 Thread A . L . M . Buxey
Hi, > Trying to get Cisco IOS to authenticate to FR 2.0.5 using rlm_pap. I've > followed the instructions from here: > > http://wiki.freeradius.org/index.php/Cisco > > but am still having problems. I'm hoping someone can point out my error. FreeRADIUS is happy - and its sending the result bac

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, > There were a few changes to fix problems found in 2.1.0, and a whole > whack of new development to add useful new features. Unfortunately, it > looks like the new development added issues of it's own... just to report that i've got the latest GIT version now installed and running al

Re: Download/use luser error

2008-09-18 Thread A . L . M . Buxey
Hi, > So I downloaded the latest and greatest, gunzipped it (even tried the > bunzip version), but when I try to untar the file, I get "tar: directory > checksum error"... wget ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.1.0.tar.bz2 tar -xjvf freeradius-server-2.1.0.tar.bz2

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, > There were a few changes to fix problems found in 2.1.0, and a whole > whack of new development to add useful new features. Unfortunately, it yes - very aware of the new features (which is why I want to migrate from 2.0.5 to 2.1.1) - something is lurking for sure. alan - List info/subsc

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, got a problem with GIT version of 2.1.1 - it doesnt fail in debug mode (-X) but when run as a service, it soon dies (in less than 5 minutes) - as stated before, in full debug mode it runs all day. I am currently trying to discover the fault alan - List info/subscribe/unsubscribe? See h

PERL fix/patch for CentOS is now out!

2008-09-18 Thread A . L . M . Buxey
hi, just a quick note for those folk out there running lots of PERL DBI things etc with their FreeRADIUS systems on CentOS/RHEL - theres been a problem with PERL with this distro for some time - massive speed penalty - over 100x slower than ubuntu/suse/etc etc this quick PERL script should comple

Re: 2.1.1-pre

2008-09-18 Thread A . L . M . Buxey
Hi, > The tar file on the web site is old. The web site has pointers to > downloading updated tar files from github. yes, I noted...a lot of other people wont read the other 60% of the page and will just click the first .tar.gz they see alan - List info/subscribe/unsubscribe? See http://www

Re: 2.1.1-pre

2008-09-17 Thread A . L . M . Buxey
Hi, just tried a GIT checkout and got something nasty. config files work fine with the 2.1.0 release *** glibc detected *** radiusd: double free or corruption (!prev): 0x083dea60 *** === Backtrace: = /lib/libc.so.6[0x386b16] /lib/libc.so.6(cfree+0x90)[0x38a070] /usr/lib/libfreeradius

Re: 2.1.1-pre

2008-09-17 Thread A . L . M . Buxey
Hi, > I've made a number of changes to fix issues in 2.1.0. Can some people > please try git head? See git.freeradius.org for how to get a "tar" file. PS - it appears thatt he .tar.gz file thats available to download from that location is for a 2.0.6 release. just thought I'd mention it a

Re: Fedora 9 EAP issue

2008-09-17 Thread A . L . M . Buxey
hi, firewall off. a direct IP being used - what about SELinux? have you got it permissive or enforcing? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Segmentation fault in 2.1.0

2008-09-10 Thread A . L . M . Buxey
Hi, Jim, when this sort of thing happens you have to follow the advanced debugging method as per the freeradius site - http://bugs.freeradius.org/ ie enable-developer and use the gdb wrapper around the exe alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: another 2.1.0 compile error

2008-09-10 Thread A . L . M . Buxey
Hi, > asked me if I would try building the current pre-release. Since some of > the things supposedly fixed were compile problems on systems similar to > mine, I went ahead and went through the extra effort. Hopefully the > feedback provided from that was useful. yes. but, as I mentioned, would y

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > Much of the time, by the time I get around to wanting to build > freeradius, it's been months since the server was installed, so I don't > really know what's installed on it unless I check. I do know that when > include files are not found, it might mean a -devel package needs to be > instal

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > While this was on CentOS, I expect the same things could bite somebody > using RHEL (or any x86_64 system with yum). i'm usually torn between advocating the use of ./configure or the use of eg rpmbuild and the .spec file for CentOS and Fedora folk. if you used the spec and built your own

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > CentOS box for configure and make. Just a bit more of a pain than > downloading a release tar file. but thats the point...the stuff you want isnt in a release tar just yet - a nightly tarball, i guess, would be what you would prefer for this sort of action? alan - List info/subscribe/unsub

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > Nah! We've all done things like this more times than we care to admit. > Welcome to the club, your turn to bring refreshments next time :-) hey! you cant skip *your* turn! ;-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > OK, I got this done. It configures and makes on my system (CentOS congrats! - GIT is far nicer than some of the older methods of source retrieval. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > But if libfoo.h actually exists in the source tree (as in the case of > ltdl.h), then it's not so blindingly obvious that the problem is a > missing -devel package rather than a configuration/compilation issue. but you chose to use the system stuff in the configure stage rather than the sup

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > Marinko Tarlac wrote: > > 1.1.7 also requires ltdl > > The only changes made to 1.1.x from now on will be security related. > > i.e. no new features. no build fixes, etc. I dont think it was a build fix request - more a comment that 1.1.7 needs ltdl on some platforms due to the way tha

Re: another 2.1.0 compile error

2008-09-09 Thread A . L . M . Buxey
Hi, > I am running on CentOS 5.2 on an x86_64 architecture. I note a previous > report for a similar system here on the list, but this is not the same > error. That one was an error compiling radmin, this is an error > compiling the server: > > gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS

Re: Window domain (win server 2k3) ----- Free-Radius ----- NAS ------- Access Point )))) ((((( STA

2008-09-05 Thread A . L . M . Buxey
Hi, > Can anybody please help me on this problem? as, per usual, please send radiusd -X (thats a big capital X!) output to this list thanks alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Hmm... 2.1.0 && radmin

2008-09-05 Thread A . L . M . Buxey
Hi, > Looking at this a little more, it looks like a bug crept in at the > last minute that prevents radmin from working. I was about to email you about this. it loads, then it doesnt do anything (hangs after eg 'help' being typed) rather than rely on knowing the radiusd.sock location, could

Re: Problems with the authentication of users and certificates TLS

2008-09-03 Thread A . L . M . Buxey
hi, 2 things. 1) you already have a radiusd running . which is why it had errors right at the end.. but, before that 2) the user you are trying to run radiusd as does not have the right to create files in the raddb/certs directory. please ensure that, if configured to run as 'radiusd', that yo

Re: Problems with the authentication of users and certificates TLS

2008-09-03 Thread A . L . M . Buxey
Hi, > ouch!! > ok, change the version and started again :S so long as you clear out your older freeradius install (eg delete the raddb directory) then when you install 2.0.5 is will automatically make the correct (demo) certs for you when first run alan - List info/subscribe/unsubscribe? S

Re: Problems with the authentication of users and certificates TLS

2008-09-03 Thread A . L . M . Buxey
Hi, > Well, I have progressed a bit in the installation of RADIUS EAP TLS. > what I did was install the version FreeRADIUS-1.0.4.tar.gz on my server, whoa. stop there. today is the 3rd of sept 2008. the current release of FreeRADIUS is 2.0.5 the last 1.x release was 1.1.7 so the question os wh

Re: Realm delimiter characters

2008-09-01 Thread A . L . M . Buxey
Hi, > Question: WHERE does this configuration go? I have not found any suitable > configuration file. According to an outdated info in the wiki, this > information is supposed to be made in the radiusd.conf ... but this > information is no longer valid for version 2.0.5. almost all of the func

Re: EAP-TTLS in WinXP

2008-09-01 Thread A . L . M . Buxey
Hi, > Hi, > > I've seen that Windows XP does not support EAP-TTLS out of the box. I > know there is at least one package (from SecureW2) that adds this to > windows. > > Could somebody suggest me which other packages do the same? Or should I > use the one from SecureW2? open1x.sf.net, Funk Odyss

Re: Radius --> Openldap auth: Failed to validate the user

2008-09-01 Thread A . L . M . Buxey
Hi, > If I understand this correctly, each user who would like to > authenticated would require those access rights and not only laurence? no. you dont use the login user to do the binding, you use a special user. for testing, you can use root, but for production I'd advice to use a special acc

Re: Radius --> Openldap auth: Failed to validate the user

2008-08-31 Thread A . L . M . Buxey
Hi, > As user laurence I am able to search, so the root now binds, however > laurence does not authenticate. I am able to connect via ssh via ldap > server etc. and the debug log shows > auth: type "LDAP" > Processing the authenticate section of radiusd.conf > modcall: entering group L

Re: Radius --> Openldap auth: Failed to validate the user

2008-08-31 Thread A . L . M . Buxey
hi, please stop emailing in HTNL! anyway, yes - a LOT of people find that they need to use a privileged account for the LDAP bind - personally, I would create a new account that has the required priv's to search the LDAP etc but doesnt have as much power as root. alan - List info/subscribe/un

Re: Radius --> Openldap auth: Failed to validate the user

2008-08-31 Thread A . L . M . Buxey
Hi, lovely. HTML email. please dont looks like your problem is here: > rlm_ldap: login attempt by "laurence" with password "" > rlm_ldap: user DN: cn=Laurence Mayer,ou=people,dc=istraresearch,dc=com > rlm_ldap: (re)connect to 172.16.16.5:389, authentication 1 > rlm_ldap: could not set LDAP_

Re: Compile problems

2008-08-29 Thread A . L . M . Buxey
Hi, > I wish what you said was true. I see that in Make.inc sysconfdir is set to > /etc. Great. The problem is when I run radius -X after installing. It says > it is looking for the config files in /usr/local/etc/raddb. I can use > radiusd -Xd /etc/raddb and things work fine. The problem i

Re: Fwd: MSCHAP module returns OK, authentication fails..

2008-08-28 Thread A . L . M . Buxey
hi, whats wrong with that debug? looked fine here - that should end with a happy connection. ntlm_auth got the correct response. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MSCHAP module returns OK, authentication fails..

2008-08-26 Thread A . L . M . Buxey
Hi, > I'm using a MacOS as a test client, which connects to the wireless > network, prompts about an invalid certificate chain for the SSL cert well, unless you've installed the CA etc that you signed the RADIUS server with, this will always be the case. until you trust the cert (by trusting the

Re: mysql connection

2008-08-26 Thread A . L . M . Buxey
Hi, > now radisd dont broken up but when i looked the debug i see cant connect to > mysql > here is the debug log I can clearly see the connection to MySQL - its in the SQL section of the debug log - it opens 5 concurrent sessions to your DB...successfully. to configure for authentication, rea

Re: NAS-IP-Address, rlm_perl, and loopback

2008-08-22 Thread A . L . M . Buxey
Hi, > Which explains what's going on. PEAP is really two things: an outer > TLS session, and inner EAP-MSCHAPv2 authentication. So there are *two* > streams of RADIUS packets. One that sets up the tunnel, and one that > does the authentication inside of the tunnel. yep - so if you only want

Re: Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = "test" User-Password = "testing123" NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host 10.0.6.

2008-08-14 Thread A . L . M . Buxey
Hi, > hi ! to firts alan my server is 10.30.1.104 no 10.0.6.29 and when i write > this: radiusd -i 10.30.1.104 -p 1812 -x -X : okay. your server is 10.30.1.104 > ok, and when i write : radtest test testing123 10.0.6.29 1812 testing123 i > get: do you know what that command means? you are send

Re: Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = "test" User-Password = "testing123" NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host 10.0.6.

2008-08-14 Thread A . L . M . Buxey
hi, you need to look at the debug log for the RADIUS server which lives at 10.0.6.29 as that is the thing doing the rejecting! alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius 2.0.5 AD PEAP

2008-08-14 Thread A . L . M . Buxey
hi, you've configured inner-tunnel for EAP - but do you have the inner-tunnel virtual server config file living in sites-enabled/ ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: clients.conf - identifying a "client" - sql/ldap

2008-08-13 Thread A . L . M . Buxey
Hi, > Hi all, > > Received no responses to the post below. its been answered countless times on the list before go a google or list archive search should help. basically, use either something like dyndns so you can use the DNS name etc to get started, or, better still, use eg 'openvpn' so the N

Re: Error compiling FreeRadius-2.0.5

2008-08-13 Thread A . L . M . Buxey
Hi, > I have Red Hat Linux release 8.0 > > and i am trying to install free radius 2.0.5 fresh > > > > getting the following errors while doing a make after the ./configure have you got openssl-devel installed? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/user

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread A . L . M . Buxey
Hi, > Hi, I'm trying to implement FreeRadius to authenticate Wireless > CLient based on MAC address only, unfortunately all my wireless client > using EAP/TLS (Windows XP SP2) . I found that tutorials and doc are > not leading me to the right direction. Besides, I will not burden my > Windows XP

Re: Slow Starting..

2008-08-07 Thread A . L . M . Buxey
Hi, > Where would you think the dns problem is .. Is their a debug mode that is > more verbose that can show the exact thing that freeradius us looking for? > > All the naming is by IP not a dns name .. Also there are not a lot of places > in the freeradius to put in dns servers numbers. clients

Re: Server not responding to requests

2008-08-06 Thread A . L . M . Buxey
Hi, > However, ifconfig shows eth0 has the wrong IP address. It looks like it > grabbed a DHCP address from my Windows DHCP server. When I look at eth0 > connection properties on the task bar it shows 172.16.3.4. In > /etc/hosts, under System Administration Network Configuration, and on > my D

Re: RES: RES: Installation problem

2008-08-06 Thread A . L . M . Buxey
hi, I'd follow eg the FAQ http://wiki.freeradius.org/FAQ eg How do I use Login-Time for groups, not for users? DEFAULT Group == "daysonly", Login-Time := "0800-2000" DEFAULT Group == "weekdays", Login-Time := "Wk0800-2000" of course, you dont care about timesso justhave eg DEFAULT Group

Re: Server not responding to requests

2008-08-05 Thread A . L . M . Buxey
Hi, > Hi All, > > I have freeradius 1.1.7 running on RHEL 5. radtest works with a local > user setup, and also with authentication via Active Directory. However, > anything outside the radius server host does not get a reply. I have > configured a Multitech MA820 and also tried ntradping, and b

Re: RES: Installation problem

2008-08-05 Thread A . L . M . Buxey
Hi, > > After running /sbin/ldconfig -v , I was able to execute radiusd. > > The only weird thing is that the daemon is not showing when I type ps aux. > > Even after running /usr/sbin/radiusd, nothing happens. yep - at this point you run radiusd -X to see whats wrong alan - List info/sub

Re: Installation problem

2008-08-04 Thread A . L . M . Buxey
Hi, > I am rather new to freeradius and I´m having trouble running the server after > installation > > > > I installed using: > > ./configure --sysconfdir=/etc okay - and the libraries have gone into /usr/local/lib as per the stuff that spews out when you do make install you need to ensu

Re: postgresqlippool

2008-08-03 Thread A . L . M . Buxey
Hi, > I cannot upgrade to 2.0.x now because my radius is under 24*7 load and I > don't have spare server to test it. huh? but you are planning on making changes to this live server so whats the difference? bring up a 2.0.5 system on the same box but use different ports for testing. alan - List

Re: Vista Issue

2008-08-01 Thread A . L . M . Buxey
Hi, > Do you have any news on the Vista EAP issue? ? we use Vista against 1.1.7 -> 2.0.5 without issue. before 1.1.4 we had problems due to a new PEAP issue (padding of the SSL) but 1.1.4 fixed that. what version of OpenSSL do you have on your system? alan - List info/subscribe/unsubscribe? S

Re: realm question

2008-07-24 Thread A . L . M . Buxey
Hi, > Can I strip the "idm/something/" somehow? sure. a simple strip in the config would work... or unlang of course. eg in radiusd.conf attr_rewrite copy.user-name { attribute = Stripped-User-Name new_attribute = yes searchfor = "" searchin = packet replacewith = "%{User-Name}" } attr_rewri

Re: Re : EAP-TLS OK - EAP-PEAP KO!! why that?

2008-07-22 Thread A . L . M . Buxey
Hi, > so my question is, if the certificate (with server extension) is missing on > the client, could it interfer in EAP-PEAP authentication success? yes. you need a RADIUS cert with the extensions...and if doing proper PEAP, you need the CA installed on the client too - with 'validate server

Re: more than one user file

2008-07-18 Thread A . L . M . Buxey
Hi, > Hi > all,is it possible to place radius users in more than one > Livingston-style file.For example one file is maintained by another > department than the other.What is the syntax in the radiusd.conf file > when using more than one fileThx ThorstenSPIRIT/21 > AG just create one 'tree' u

Re: Re : EAP-TLS OK - EAP-PEAP KO!! why that?

2008-07-18 Thread A . L . M . Buxey
Hi, on your command line locate winbind_privileged it'll usually be /var/cache/samba/ cd /var/cache/samba/ chgrp radiusd winbind_priviledged (if you run radius as group radiusd) restart freeradius i dont see how the error/debug output could be any clearer alan - List info/subscribe/unsub

Re: freeradius in windows

2008-07-15 Thread A . L . M . Buxey
Hi, > Has anyone ever done the porting of freeradius from Linux to Windows? > > I need this as I am not getting the source code for the Windows version > of freeradius. If that can be got from some location or in case someone > has it. Please let me know. freeradius.net windows version - uses

Re: about EAP using 1.1.7 and 2.0.3

2008-07-09 Thread A . L . M . Buxey
hi, as Alan stated - your NAS doesnt seem to be getting the responses from your server. some ACL or routing issue? (stick a sniffer directly in front of the switch...if you need to, you may need to have a 'port mirror' or somesuch from the switch that feeds that switch if traffic is on a mgmt VLA

Re: ASSERT FAILED

2008-07-08 Thread A . L . M . Buxey
Hi, > As snmp is not available right now, I am looking in how to deal with > statistics, status_server and played a bit. > This way I was able to kill freeradius... > > First I noticed: > radclient: dict_init: /usr/share/freeradius//dictionary.freeradius[47]: > dict_addattr: attribute name too l

Re: virtual server and clients from sql

2008-07-08 Thread A . L . M . Buxey
Hi, > Modified nas_query: >{"nas_query", PW_TYPE_STRING_PTR, > offsetof(SQL_CONFIG,nas_query), NULL, "SELECT > id,nasname,shortname,type,secret,server FROM nas"}, > rebuild the server. huh? thats the default query in the code - if you edit sql.conf and modify nas_query in the con

Re: virtual server and clients from sql

2008-07-07 Thread A . L . M . Buxey
Hi, > With the actual git/cvs I wanted to setup client based virtual Servers, > where the clients are stored in a mysql database. > I added a column "server" to the nas table and set it to the name of a > virtual server. the logic is in rlm_sql.c alrady, all you need to do is update your nas_qu

Re: preproxy_users doesn't filter attributes

2008-07-07 Thread A . L . M . Buxey
Hi, > Michael da Silva Pereira wrote: > > It is interesting you say that this stuff is already included, I do not > > see it in the prepackage version which comes with Ubuntu (hardy). > > > > http://packages.ubuntu.com/hardy/i386/freeradius/filelist > > That's version 1.1.7. Version 2.0 has be

Re: xp sp3 and freeradius 2.0.5

2008-07-07 Thread A . L . M . Buxey
hi, further to previous post - your log shows several WARNING entries - fix those. finally, read eap.conf - especially the part about Windows systems not responding to EAP challenges...which is what your log looks like alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/u

Re: xp sp3 and freeradius 2.0.5

2008-07-07 Thread A . L . M . Buxey
hi, we use FR 2.0.5 (and have used .09 through to the current version too. Vista was supported with 1.1.4 upwards. we've had no issues (so far!) with XP SP3 or Vista systems on 2.0.5 alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Get clients virtual_server info from SQL nas table

2008-07-07 Thread A . L . M . Buxey
Hi, > /* > * Table structure for table 'nas' > */ > CREATE TABLE nas ( > id SERIAL PRIMARY KEY, > nasname VARCHAR(128) NOT NULL, > shortname VARCHAR(32) NOT NULL, > typeVARCHAR(30) NOT NULL DEFAULT 'other', > ports int4, > secret VARCHAR(60)

Re: freeradius with multiple ldap servers

2008-07-07 Thread A . L . M . Buxey
Hi, > I went through the documentation on the website and in the doc/ > directory in the source distribution. I read through the > ldap_howto.txt. Is that the example you refer to ? (Thats the only one I > found with the source distribution). It had many components that I dont > require. I scrol

Re: freeradius 2.0.5 problem

2008-07-06 Thread A . L . M . Buxey
Hi, > Hello, > > I tried to optimize tables, and also followed the sql tunning guide by > setting the database to innodb but I still get only these error: DB still too slow - what and how did you attempt to optimise the DB? what queries are you doing on a live DB - are you doing live SQL logging

Re: your mail

2008-07-06 Thread A . L . M . Buxey
Hi, > unsubscribe please either re-read the vrey first email you recieved when joining this list, or simply read the email headers of any email that comes from this list - both will tell you how to unsubscribe. any decent email client will understand the list headers and will enable you to unsubs

Re: freeradius 2.0.5 problem

2008-07-03 Thread A . L . M . Buxey
Hi, > Mikrotik Router > freeradius server > Mysql Server > > From time to time (Maybe once in 4-5 days) i get this error repeated for > many many times: your MySQL is too slow to respond to the requests - check your SQL queries and see how you can optimise them. I've been able to go from querie

Re: FreeRadius crashing

2008-07-03 Thread A . L . M . Buxey
Hi, > We have been experiencing a weird crashing problem with FreeRadius 1.1.7 > on fedora core 7 and was hoping someone would be able to help. yeh, it doesnt that with EAP - thats why 2.0.x came along. 2.0.5 HIGHLY recommended. read the Changelog to note all the errors fixed etc if you feel an u

Re: =?UTF-8?Q?freeradi us-proxy_+_PAP_works , _PEAP_and_the_rest_doesn=C2=B4t?=

2008-07-03 Thread A . L . M . Buxey
Hi, > ... that Radius Server is an FreeRadius server. I called the administrator of > it. And it is running great with all other Radius server within the rest of > the "sharing WLAN access" community. > It is in fact running now for years. > > So, must be another error, I guess? are you filter

Re: =?UTF-8?Q?freeradi us-proxy_+_PAP_works , _PEAP_and_the_rest_doesn=C2=B4t?=

2008-07-03 Thread A . L . M . Buxey
hi, if you really are using freeradius as a proxy, as you stated, then you dont need certificates...as the system will JUST proxy. if you mean you want to terminate EAP on your freeradius, then please dont call it a proxy. get the terminology correct. what did you do wrong? well, since 1.1.7 an

Re: Can't find directory

2008-07-03 Thread A . L . M . Buxey
Hi, > I would like /etc/raddb/ well tell it to use that location during the ./configure stage of the build process then! ./configure --help for further information alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can't find directory

2008-07-03 Thread A . L . M . Buxey
Hi, > Hy i'm beginner in Linux and freeradius. Can someone help pe because, when i > finish my instalationn of freeradius i can't fint etc/raddb/ directory in > etc???!!! where did you tell it to go - ie when you configured. by default it'd be /usr/local/etc/raddb certain distros etc will use /op

Re: FreeRadius Mysql Problem Solaris

2008-06-29 Thread A . L . M . Buxey
Hi, > crle -u -v -l > /usr/local/ssl/lib:/usr/local/lib:/usr/local/BerkeleyDB.4.2/lib:/etc/lib:/usr/share/l > ib:/etc/security/lib:/usr/sfw/lib:/usr/openwin/lib:/usr/css/lib:/usr/xpg4/lib:/usr/dt/lib:/usr/loca > l/mysql/lib/mysql its cant find development headers - ensure that the --with-openssl-

Re: Re : Re : Authorization?? pb Authentication against AD

2008-06-27 Thread A . L . M . Buxey
Hi, > the result of ntlm_auth in command line: > > -- > aaa:/var/lib/samba #ntlm_auth --username glouglou --domain pluton > password: > NT_STATUS_OK: Success (0x0) > aaa:/var/lib/samba # > > --

Re: EAP failure since upgrade

2008-06-27 Thread A . L . M . Buxey
hi, yum updated your samba package. this means that /var/cache/samba/winbindd_privileged would have had its group permissions changed. you probably changed the permissions eg group radiusd when setting your radiusd up. this change will need to be done again or add radiusd to the group that o

Re: FreeRadius Mysql Problem Solaris

2008-06-26 Thread A . L . M . Buxey
Hi, > > I tried to install FreeeRadius 2 on Solaris 10_X86. But it got error on make > here is the error. firstly, this is 2.0.3 - use 2.0.5 secondly, dd you specify the location / PATH for the mysql link libraries on the configure line? are you building as a static or dynamic? alan - List info/

Re: radrelay.conf in freeradius 2.0.5

2008-06-25 Thread A . L . M . Buxey
Hi, > I could see it has not read > "raddb/sites-available/copy-acct-to-home-server". I think through this ^^ sites-available list sites that are AVAILABLE.. ie prestored config. to USE the virtual server, you need to put it into sites-enabled (or do a symlink to the site

Re: radrelay.conf in freeradius 2.0.5

2008-06-25 Thread A . L . M . Buxey
Hi, > Thanks for the reply. Actually in the freeradius-1.x the radrelay is > Separate executable (process), so as per the release notes of 2.x, > radrelay functionality is clubbed with radius core server (radiusd). > > How can I check whether radrelay is running or not, when I am running > radiu

Re: Problème avec le dé mon radiusd

2008-06-23 Thread A . L . M . Buxey
Hi, > Je suis en stage pour la rédaction de mon mémoire de fin de formation. Je > veux mettre en place un hotspot wifi. he suis desole mais le mailing-list freeradius-users c'est un ML dans anglais - > /radiusd/src/lib/libfreeradius-radius.la -lnsl -lresolv -lpthread \ > -lcrypt -lltdl -lcrypto

Re: Problems running FreeRadius 1.1.7 on Linux

2008-06-23 Thread A . L . M . Buxey
Hi, > *E**rrors reading dictionary: dict_init: Dictionary > "/usr/local/share/freeradius/dictionary" is not a regular file > Errors reading radiusd.conf** seems clear - check tht file and see exactly what it is and isnt alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/u

Re: radrelay.conf in freeradius 2.0.5

2008-06-23 Thread A . L . M . Buxey
Hi, > We are newbie to free radius. We have done some exploration with > 1.1.7. Now we have moved from freeradius 1.1.7 to freeradius 2.0.5. As > per the documentation (doc/radrelay), there should be radrelay.conf in > /usr/local/etc/raddb. But this file is not present in our setup. what are yo

Re: Dependencies of Freeradius 2.0.5

2008-06-23 Thread A . L . M . Buxey
Hi, > Hi Alan, > > I know about radius -X ... I already setted up the version 1.1.7 > succesfully ... but now I'm working on almost complety revised version > 2.0.5 ... so SQL configs are different for me and I might made some > mistakes there so that the radius -X is not showing me some pg code

Re: Kicking off billing scipt in accounting block

2008-06-22 Thread A . L . M . Buxey
Hi, > FreeRADIUS is a gem, to be sure, and it continues to help me make money, > but I've configured a lot of services over the years and the FreeRADIUS > "documentation," frankly, sucks. hmm, FreeRADIUS makes you moneyand you get all the support from us, this list, and the free wiki etc fo

<    2   3   4   5   6   7   8   9   10   11   >