802.1x, deault windows supplicant and kerberos

googled out some info about using ttls tunnel instead of peap, but I have no idea how to force windows supplicants to do so. Best regards -- Adrian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 802.1x, deault windows supplicant and kerberos

won't be allowed to do. Regards -- Adrian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: again .. mac based auth + user/password for pppoe

 No.  See man unlang for the meaning of the operators.  You did NOT configure a check against a specific MAC.  You used := instead of == Damn, thanks again, noted on my wiki so I won't forget the next time. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: again .. mac based auth + user/password for pppoe

On Thu, Feb 23, 2012 at 12:47 PM, Listas Angelo angelo-lis...@prolinx.com.br wrote: Hello, I have a environment with this situation, follow my confs: I don't think that just having the columns in the sql table is enough. You probably have a custom setup of some sort ! :) Using == as operator

again .. mac based auth + user/password for pppoe

Hey again, I've searched the list for my old conversation here but couldn't find it .. still.. here it goes... I have rp-pppoe started in kernel mode ( the calling-station-id gets sent as I can see it ) You'll notice that even though I added in radcheck Calling-Station-Id to be

Freeradius2 Accounting secret

packet from client with invalid signature! (Shared secret is incorrect.) Dropping packet without response. Where do I set the shared secret in freeradius2 config for the accounting side? thanks, Regards, Adrian Hall. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: about kick off oldest user

neah .. I think he has problems with timeout's and users can't reconnect because they're already connected ?... I did some ip-up scripting to radzap the old connection if there is any .. 2010/12/27 Martín Ruiz [Ibersystems.es] martinr...@ibersystems.es LOL, only to know.. why you need to do

pppoe+freeradius+mysql reject user

Hey, SO far I got it working alright. The only thing is that I might want to reject a username ( even if the password is ok ) ( for example that username hasn't paid ). I tried inserting into radreply Auth-Type := Reject but it still gets access-accept :/ Any ideas ? Thanks in advance, Adrian

Re: pppoe+freeradius+mysql reject user

Auth-Type is not a reply attribute, it's a check attribute. Yup, true. Works, thanks. Sorry for the useless message. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

no calling-station-id received

Hey everybody I don't seem to get a calling-station-id packet when a username is trying to connect. I'm running gentoo and have the following package versions: net-dialup/ppp-2.4.5-r1 USE=activefilter atm dhcp eap-tls pam radius -gtk -ipv6 0 kB net-dialup/rp-pppoe-3.10-r1 USE=-X 0 kB

Re: no calling-station-id received

I don't seem to get a calling-station-id packet when a username is trying to connect. Fix the client software so that it sends a Calling-Station-Id. clientsoftware being the pppd or rp-pppoe ? Would this also fix the second problem ? - List info/subscribe/unsubscribe? See

Re: no calling-station-id received

I'm receiving the calling station id now .. I somehow fscked up the sqlippool :| everybody seems to receive 10.67 ips :/ On Fri, Dec 3, 2010 at 5:50 PM, S Adrian dex...@d3xt3r01.tk wrote: I don't seem to get a calling-station-id packet when a username is trying to connect. Fix the client

Re: no calling-station-id received

you run pppoe-server right? 1. you can run pppoe-server in kernel mode to send calling-station-id to radius yup .. this was it .. Thanks :) There's a problem in gentoo's ippool.conf # ## If you prefer to allocate a random IP address every time, i # ## use this query instead allocate-find =

RE: My Static IP Client conf. not work

using. Adrian -Original Message- From: freeradius-users-bounces+adrian=dsl4u...@lists.freeradius.org [mailto:freeradius-users-bounces+adrian=dsl4u...@lists.freeradius.org] On Behalf Of Tevfik Ceydeliler Sent: Tuesday, January 12, 2010 2:15 AM To: freeradius-users@lists.freeradius.org

RE: My Static IP Client conf. not work

Best regards, Adrian Boros -Original Message- From: freeradius-users-bounces+adrian=dsl4u...@lists.freeradius.org [mailto:freeradius-users-bounces+adrian=dsl4u...@lists.freeradius.org] On Behalf Of Tevfik Ceydeliler Sent: Monday, January 11, 2010 4:55 AM To: freeradius-users

Huntgroup replies using mysql

to send it the above attributes from sql instead of the users flatfile. Any help is appreciated, Adrian From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Dennis Sent: Tuesday, November 11, 2008 9:43 AM To: FreeRadius users mailing list Subject: Re: Restricting user

RE: Huntgroup replies using mysql

Thanks Alan, I will look into that. Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, December 01, 2008 12:33 PM To: FreeRadius users mailing list Subject: Re: Huntgroup replies using mysql Adrian wrote: The Users file

freeRADIUS not sending accounting responses

Hello All, I stumbled onto some unexpected behavior with freeRADIUS and I'm curious if it's a mis-configuration or a defect. The first thing I did was comment out all places where radutmp and sradutmp were being used. I don't use those files so I figured I'd free up some resources by commenting

convert steel-belt radius .dct to freeradius dictionary

Hi everybody, I got a file that looks like this (utstarcom.dct) which would need to be translated to freeradius .. anyone can help? start of file # utstarcom.dct - Radius dictionary for UTStarcom BBS1000 @radius.dct # # UTStarcom specific parameters # MACRO UTStarcom-VSA(t,s) 26 [vid=7064

Re: convert steel-belt radius .dct to freeradius dictionary

That one's pretty easy; have a peek at the other FreeRADIUS-formatted vendor dictionaries that come with the package and spy the nuances in the differences. Ok, but what about that radius.dct .. should it affect what I enter in the new freeradius dictionary file ? # utstarcom.dct - Radius

Re: convert steel-belt radius .dct to freeradius dictionary

Here it is attached to this message. Thanks .. but still .. those thingies .. c .. cr .. 7064 .. what are they ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: accounting method

concurrency and so . I tried to google it and didn't found anything useful for this , is there anywhere I can read about this or anyone can help me here regarding this? Well, you could try to modify the queries for mysql ? ( sql/mysql/dialup.conf ) Thanks in advance , You welcome, Ram Adrian

Failed to create the pair: Invalid octet string...

, Adrian. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Failed to create the pair: Invalid octet string...

Ok, and how would that have to look like ? Hi I think you have to declare this attribute in the dictionary file 2008/8/8 S Adrian [EMAIL PROTECTED] Hi again ... I need this attribute ... UTstarcome-CLI-Access-Level .. but when I insert it .. I get: Failed to create the pair: Invalid

Howto log wrong-password ( and other attempts ) to radacct ( sql_log ? )

Hi again everybody Ok, it seems my freeradius only wants to log access-accept stuff to sql .. but when I login with wrong password .. it doesn't insert it in sql .. anyone can tell what do I need to have in what section please? Thanks in advance, Adrian. - List info/subscribe/unsubscribe

radacct insert issue.

issue .. is the rp-pppoe server sending 2 accounting requests ? :| why would he do that ?! Thanks again for the quick answer. Adrian. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

radacct insert issue.

/radiusd.conf sites-enabled/default http://d3xt3r01.tk/~dexter/rad/default I have another issue with making snmp work but that'll be in another thread after this is fixed. Thanks in advance, Adrian. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: NAS-Group? - different replies to different NASes?

Hello All, Thank you for your help. I was able to get the issue fixed by enabling both the users file and sql at the same time. I'm only using the users file for the DEFAULT Huntgroup parameters as suggested by Ivan. Everything works great. Best regards, Adrian -Original Message

RE: NAS-Group? - different replies to different NASes?

server? Best regards, Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adrian Sent: Tuesday, February 26, 2008 5:09 PM To: 'FreeRadius users mailing list' Subject: RE: NAS-Group? - different replies to different NASes? Thanks Ivan, I will give

RE: NAS-Group? - different replies to different NASes?

? Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adrian Sent: Wednesday, February 27, 2008 6:04 PM To: 'FreeRadius users mailing list' Subject: RE: NAS-Group? - different replies to different NASes? Hello Ivan, I haven't had much luck with setting

RE: NAS-Group? - different replies to different NASes?

attributes. PS. Thank you all for putting up with my questions. Thanks Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Tuesday, February 26, 2008 3:57 AM To: FreeRadius users mailing list Subject: Re: NAS-Group? - different replies

RE: NAS-Group? - different replies to different NASes?

versus my NAS). Based on the RLM_SQL documentation the first table the authentication hits is the radcheck table, then radreply and then the usergroup table. If there are any changes to be made, I think it first has to be done in these tables somewhere. That's my dilemma, Adrian -Original Message

RE: NAS-Group? - different replies to different NASes?

Thanks Ivan, I will give that a try. Thanks for all your help. Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan Kalik Sent: Tuesday, February 26, 2008 2:37 PM To: FreeRadius users mailing list Subject: RE: NAS-Group? - different replies

RE: NAS-Group? - different replies to different NASes?

) Does that make sense? Any other way to group attributes for specific NASes? Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan Kalik Sent: Sunday, February 24, 2008 3:57 PM To: FreeRadius users mailing list Subject: RE: NAS-Group? - different

RE: NAS-Group? - different replies to different NASes?

groups. Thanks Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan Kalik Sent: Friday, February 22, 2008 10:22 AM To: FreeRadius users mailing list Subject: RE: NAS-Group? - different replies to different NASes? NAS-IP-Address should be different

RE: NAS-Group? - different replies to different NASes?

. For now I'll do some reading on unlang as per Alan's request and see how that goes. Thanks Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan Kalik Sent: Friday, February 22, 2008 6:32 AM To: FreeRadius users mailing list Subject: RE: NAS-Group

RE: NAS-Group? - different replies to different NASes?

Hello Alan, I'll do some reading as per your suggestions. Does it matter what version of FreeRadius I use? I currently have 1.17 installed using mysql. Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Friday, February 22, 2008

RE: NAS-Group? - different replies to different NASes?

to the PPPOE request from my LNS only. Any help is appreciated. (I'm currently using groups to achieve this but it does not work yet) Thank you Adrian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Friday, November 02, 2007 8:45 AM

NAS-Group? - different replies to different NASes?

selectively allow only certain responses to NAS A and others to NAS B? Thanks for the help Adrian Boros attachment: winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Load Balancing user requests to multiple LNS's

the :2: tunnel information. I'm using Freeradius 1.0.4 with a mysql config. Thanks Adrian Boros - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: how to log Disconnects/Stop (Acct-Status-Type)

Adrian -Original Message- From: Peter Nixon [mailto:[EMAIL PROTECTED] Sent: Monday, December 18, 2006 12:24 To: [EMAIL PROTECTED]; FreeRadius users mailing list Subject: Re: how to log Disconnects/Stop (Acct-Status-Type) On Mon 18 Dec 2006 18:56, Adrian wrote: Hello Everyone, We recently

Freeradius users

the connection. I have reviewed a lot of web pages but I found only PPP dial server information. I will appreciate your help and support! Adrian Acuna View this message in context: Freeradius users Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe

FreeRadius/jRadius with Ericsson GGSN

in the request varies the length of the Class response by the same number of characters. The NAS is an Ericsson GGSN. Any suggestions welcome Adrian Heath TrackTrans begin:vcard fn:Adrian Heath n:Heath;Adrian org:TrackTrans Limited adr:The University of Reading, Earley Gate;;Reading Enterprise Hub;Reading

RE: how to authenticate only via username

Stefan, Don't specify a password in the users file for that user. If you are using MYSQL don't specify any password in the radcheck table. ie. (users file example) Before: - test123 Password=test123 After: - test123 In the above case (After:) any password would be allowed. Adrian

RE: Expire attribute

15:26 Is that possible? ... Is there a different time format I have to use?... We use a colubris box as the NAS. PS. If we send just the date, without the time, everything works fine. Much appreciated, Adrian Boros -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

rlm_perl.c

freeradius-0.8.1, Linux 7.3 - I am trying to build freeradius but I am getting the following error : src/modules/rlm+perl/rlm_perl.c:113: undefined reference to 'boot_DyanLoader' Can anyone point me in the right direction please. Regards Adrian - List info/subscribe/unsubscribe? See http

Setup Help: freeradius + cisco catalist + linux windows clients

see a request. for the above debug i used linux workstation with its mac-address 00-10-a4-99-8c-c4 Please help. Kind Regards, Adrian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radwho Acct-Status-Type = Alive

FreeRADIUS bug 62 Thanks Paul. Call me daft if you like, but can you give me a URL to said bug? == Adrian Griffin Administrator RetNet Internet Services -- Phone: 07 5527 0436 PO Box 105 Fax: 07 5532 9172 Southport BC

Fw: radwho Acct-Status-Type = Alive

I'm just wondering if anybody has read or knows anything about the issue below. Thanks, == Adrian Griffin Administrator RetNet Internet Services -- Phone: 07 5527 0436 PO Box 105 Fax: 07 5532 9172 Southport BC

radwho Acct-Status-Type = Alive

-IP-Address = 203.132.224.xxx Acct-Unique-Session-Id = aa396f12969f1d9e Timestamp = 1086222182 == Adrian Griffin Administrator RetNet Internet Services -- Phone: 07 5527 0436 PO Box 105 Fax: 07 5532 9172