Freeradius2.1.3 + Fedora9 + PEAP + AD = problem

2009-02-12 Thread Andrey . Trubnikov
Hi I configure Freeradius 2.1.3 how it describes in http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO but it doesn't work. here is debug output: FreeRADIUS Version 2.1.3, for host i386-redhat-linux-gnu, built on Dec 8 2008 at 16:00:08 Copyright (C) 1999-2008 The FreeRADIU

Colubris-AVPairs

2005-07-27 Thread Andrey
attempt to authenticate the AP, the Access-Accept response has only the first Colubris-AVPair, whichever it might be (i've tried different orders). Is there any reason for this kind of behaviour? Do attributes have to have unique names? (since all three are called Colubris-AVPair). Thanks for any

AVPair question

2005-07-15 Thread Andrey
ept 1 integer Colubris When I try to authenticate, I get "unknown-vendor 8744, size 30 = '' " for my attributes dump. What am I missing? Is there a separate file for defining vendors? Any help appreciated. - Andrey - List info/subscribe/unsubscribe? See

Re: [Q] Access-Reject logging

2005-06-30 Thread Andrey Panin
M_USERLOCK (eg in LDAP the access > attribute has denied access). It fails in perl script used to glue freeradius server with existing authentication database. Perl authorization function returns RLM_MODULE_REJECT. -- Andrey Panin| Linux and UNIX system administrator [EMAIL PROTE

Re: [Q] Access-Reject logging

2005-06-30 Thread Andrey Panin
On 181, 06 30, 2005 at 01:29:48PM +0200, Nicolas Baradakis wrote: > Andrey Panin wrote: > > > > > I have rlm_perl module which performs some checks of Access-Request > > > > and if rlm_perl returns RLM_MODULE_REJECT freeradius sends > > > > Access-Reje

Re: [Q] Access-Reject logging

2005-06-30 Thread Andrey Panin
On 181, 06 30, 2005 at 11:47:31AM +0200, Nicolas Baradakis wrote: > Andrey Panin wrote: > > > I have rlm_perl module which performs some checks of Access-Request > > and if rlm_perl returns RLM_MODULE_REJECT freeradius sends Access-Reject, > > but this Access-Reject does

[Q] Access-Reject logging

2005-06-30 Thread Andrey Panin
st regards. -- Andrey Panin| Linux and UNIX system administrator [EMAIL PROTECTED] | PGP key: wwwkeys.pgp.net signature.asc Description: Digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How can I using postgres NAS table

2005-06-16 Thread Andrey V. Elsukov
TABLE nas ( ... -- WBR, Andrey V. Elsukov - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Running radiusd as an unprivileged user

2005-06-02 Thread Andrey
Hi Andrey. Edit your radiusd.conf and uncomment: #user = nobody #group = nobody done that. You can manually add new users the radius will run as. Propaly the easiest way is to run vipw and copy line from some other service, change the uid, gid and the username, edit /etc/group and put there

Running radiusd as an unprivileged user

2005-06-01 Thread Andrey
Hi everyone, Just a quick question about running radiusd as a user other than root. Do I need to compile the server as that user? And do I need to do anything else other than uncomment the lines in radius.conf? Is there a help/doc file about this? Thanks a bunch. Andrey - List

Re: autentificacion TLS

2005-05-25 Thread Andrey
Very true, most people here understand English a lot better :-) Andrey Quoting Ernesto Freyre Ramírez <[EMAIL PROTECTED]>: Hola Juan Carlos , te recomiendo que a esta lista escribas en Ingles, será muy raro que alguien te responda en castellano Ernesto Freyre Ramírez J

Re: Auth-Type = System and DSL Static IP

2005-05-12 Thread Andrey Furukin
Dustin, I appreciate your help, but everything is working fine now, so you can drop the issue, okay? Thanks. Andrey Quoting Dustin Doris <[EMAIL PROTECTED]>: On Thu, 12 May 2005, Andrey wrote: Not to be mean or anything, but you don't seem to have read the whole email or the full cor

Re: Auth-Type = System and DSL Static IP

2005-05-12 Thread Andrey
, and the override is set to no. Thanks for the suggestions though. Andrey Quoting Dustin Doris <[EMAIL PROTECTED]>: On Tue, 10 May 2005, Andrey wrote: Hi List, I have a question about Auth-Type = System. I have several accounts that need to be authenticated through System and it works great

Re: Auth-Type = System and DSL Static IP

2005-05-10 Thread Andrey Furukin
estuser' ? AND NASIPAddress= 'x.x.x.186'' rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 modcall[accounting]: module "sql" returns ok for request 207 modcall: group accounting returns ok for request 207 Sending Accounting-Response of i

Re: Counting number of open sessions in RADIUS

2005-05-10 Thread Andrey
the easiest way off the top of my head would be to run: %radius_dir%/bin/radwho | grep "" -c that will pipe all your logged-in users to grep, which will tell you how many of them there are. Andrey Quoting Sonali Karmarkar <[EMAIL PROTECTED]>: Hi I am using freeradius 0.9.3 wit

Re: Freeradius accounting question

2005-05-10 Thread Andrey
My guess would be that you need to set the "Session-Timeout" variable. 2 hours would be "7200" and 1 hour would be "3600". hope this helps. Andrey Quoting Software Development Group <[EMAIL PROTECTED]>: Hello, I have compiled and installed freeradius and it is

Auth-Type = System and DSL Static IP

2005-05-10 Thread Andrey
atic ip accounts that authenticate from sql, and those work just fine. Just the ones that are from System. Any suggestions most appreciated. Andrey - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

MySQL Accounting in Freeradius

2005-05-05 Thread Andrey
work? For some reason I doubt it, but thought I'd ask just to make sure. If that's a bug, how would I go about fixing it? Thanks for your time! -Andrey - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

xlat

2005-01-13 Thread Andrey Pavlenko
Hi! Freeradius modify char "#" to "=23" in all attributes. In the radacct/detail: Called-Station-Id = "12378#7095507" In the postgresql.conf: accounting_stop_query = "INSERT INTO ${acct_table} \ (id, calledstationip, calledstationid) \ VALUES \ (DEFAULT, '%{h323-remote-

Re: Fall-Through in acct_users

2004-07-13 Thread Andrey Lakhno
Exec-Program = "/home/voip/aaa/acct_call_generic", Fall-Through = Yes DEFAULT NAS-IP-Address == x.x.x.x, Acct-Status-Type == Stop Exec-Program = "/home/voip/aaa/test" -- Andrey Lakhno, land-ripe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Fall-Through in acct_users

2004-07-13 Thread Andrey Lakhno
Hello, Is it possible to use Fall-Through in acct_users like in users file ? -- Andrey Lakhno, land-ripe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html