Re: Using freeradius as proxy for EAP-SIM/EAP-AKA

Can I know what brand of radius server you are going to use for EAP-SIM/AKA ? I am interesting on this On Tue, Jul 2, 2013 at 3:51 PM, Phil Mayers wrote: > On 07/02/2013 07:56 AM, Ming-Ching Tiew wrote: > > So this > [^@]*@wlan.mncX.mccY.**3gppnetwork.org

Re: call exec when proxy authentication success

but the latest release version is 2.2.0, Can someone help to explain how to filter it on 2.2.0 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: call exec when proxy authentication success

that means I want to differentiate the "Access-Accept" or "Access-Reject" in the post-proxy section, On Wed, Jun 19, 2013 at 2:27 PM, Bill Yuan wrote: > Hi > > I did google alot and still did not manage to find an answer, so I ask > here, hope someone can he

call exec when proxy authentication success

Hi I did google alot and still did not manage to find an answer, so I ask here, hope someone can help on this, my freeradius is running as a proxy, and I want to add a exec command when authentication is successful. so I add exec in the post-proxy { , but how to filter by the authentication res

Re: building new module with external library dependencies

This has been resolved. Using: _ldflags="-L/path/to/lib -Wl,-rpath=/path/to/lib -labc -lxyz ..." will do it. Be sure to do a 'gmake clean' before running configure. Also it appears that the 'make' and 'make install' need to be done as two separate s

Re: building new module with external library dependencies

Using 2.2.0. Should I repost to the devel list or keep the thread here? On 6/17/2013 10:55 AM, Arran Cudbard-Bell wrote: On 17 Jun 2013, at 16:42, Bill Schoolfield wrote: Hello all, I have created a new module (using rlm_detail.c as it was closest to my needs). For the building I took the

building new module with external library dependencies

ld like to use rpath so no runtime setup is needed. I've tried setting rpath in ldflags but this doesn't work. Does anyone know how to accomplish this? Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: evaluating unlang IF with sql results

o the IF always evaluated to true. I've concluded that the use of IF with multiple expressions won't work. So I have move this logic to perl. Bill On 6/13/2013 6:55 PM, Alan DeKok wrote: Bill Schoolfield wrote: The above code fails with a message (below) that says "(Right fiel

evaluating unlang IF with sql results

e fails with a message (below) that says "(Right field is not a number at: (1371158700))". I tried adding a zero to force a number interpretation but this does nothing. I have checked every source I can find and I don't see anyhing that addresses this problem. Thoughts anyone?

Re: unlang and update section

On 6/13/2013 10:33 AM, Alan DeKok wrote: Bill Schoolfield wrote: Can update sections contain if conditions? I get the following error: /etc/raddb/sites-enabled/default[573]: "update" sections cannot have subsections What is unclear about that? /etc/raddb/sites-enabled/d

Re: unlang and update section

Thanks all for the confirmation. I guess I'll use the perl module instead. Bill On 6/13/2013 10:30 AM, Phil Mayers wrote: On 13/06/13 16:26, Phil Mayers wrote: The documentation is authoritative. It should need to be confirmed. Shouldn't. Sigh. - List info/subscribe/unsubscribe

unlang and update section

d in an "update" section are attributes and values which I assume is the issue. Please confirm. Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: noresetcounter

logies for the false alarm. On 6/6/2013 4:20 PM, Bill wrote: Hello all, I'm trying to use rlm_sqlcounter to disable login once time exceeded together with unlang to set Session-Timeout. I can get either to work but having trouble getting both to work. Right now the Session-Timeout (comput

noresetcounter

-++-+ | 1 | wrs | Cleartext-Password | := | test123 | | 2 | wrs | Max-All-Session-Time | := | 600 | ++--+--++-+ I can provide the whole radiusd -X log if this is not enough info; Bill - List info/subs

RE: Error: rlm_sql_unixodbc: SQL down 08S01 [unixODBC][FreeTDS][SQL Server]Unable to connect: Adaptive Server is unavailable or does not exist

mypol" "semodule -i mypol.pp" That fixed the problem, thanks again. From: Bill Grant [wgr...@ebpl.org] Sent: Saturday, May 25, 2013 8:29 PM To: FreeRadius users mailing list Subject: RE: Error: rlm_sql_unixodbc: SQL down 08S01 [unixODBC][FreeTDS]

RE: Error: rlm_sql_unixodbc: SQL down 08S01 [unixODBC][FreeTDS][SQL Server]Unable to connect: Adaptive Server is unavailable or does not exist

2013 7:44 PM To: FreeRadius users mailing list Subject: Re: Error: rlm_sql_unixodbc: SQL down 08S01 [unixODBC][FreeTDS][SQL Server]Unable to connect: Adaptive Server is unavailable or doesnot exist Bill Grant wrote: > I am having trouble starting freeradius at boot on CentO

Error: rlm_sql_unixodbc: SQL down 08S01 [unixODBC][FreeTDS][SQL Server]Unable to connect: Adaptive Server is unavailable or does not exist

I am having trouble starting freeradius at boot on CentOS 6.4. It starts, but it does not connect to my database; however, if run it manually from the command the it works fine. I think there is permission issue somewhere. See the log below: when I run following command as root it works # radi

smbpasswd or etc_smbpasswd?

f they match, it works great. I'm seeing the same sample configuration on el5, el6, and on git head, so maybe I'm doing something wrong? Thanks, -Bill -- Bill McGonigle, Owner BFC Computing, LLC http://bfccomputing.com/ Telephone: +1.855.SW.LIBRE Email, IM, VOIP: b...@bfccomputing.com V

Re: Session-Timeout anomalies

Alan, Being a moderator does NOT give you moral license to treat people like children. You're a rude man. Please ban me. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Session-Timeout anomalies

Again Alan, read between the lines. I've been scanning these emails from this group for about year through google searches. What I've learned from this mailing list is that you routinely castigate people who ask questions on here. That's rude. Your tone is arrogant. And that's rude. Yes, I'm

Re: Session-Timeout anomalies

On 02/08/2013 09:50 AM, Alan DeKok wrote: Bill Isaacs wrote: Ok so the question then is: where the hell is radclient getting the notion that the account has 2366393 seconds left? From the RADIUS server. This isn't magic. radclient doesn't invent attributes in reply packets. I

Re: Session-Timeout anomalies

Ok so the question then is: where the hell is radclient getting the notion that the account has 2366393 seconds left? That is *entirely* the wrong question. It's why you haven't solved the problem yet. Look at the *radius server* debug output. It's the one sending the Session-Timeout.

Session-Timeout anomalies

Hello all, I'm researching this anomaly myself in all the documentation, but thought it would also be helpful both to me and to others to post the problem here. SYMPTOM: Some "Access-Period" accounts (accounts which have X number of seconds to continue logging in and out starting from the ve

Re: Dynamic IP Allocation

Please disregard this thread. I have solve my problem. Setup (as you probably guessed) mistake. Bill On 11/9/2012 1:20 PM, Bill Schoolfield wrote: Any help on this? I have deleted the db.ippool and db.ipindex files, restarted the server... But I get the same result. Different ip but from a

Re: Dynamic IP Allocation

Any help on this? I have deleted the db.ippool and db.ipindex files, restarted the server... But I get the same result. Different ip but from a private address range. Bill On 11/9/2012 12:31 PM, Bill Schoolfield wrote: Hi I'm trying to get dynamic ip allocation working. I ran a tes

Dynamic IP Allocation

se the billtest2 user is a user that belongs to a group linked to this pool. The default site file has this pool in the post auth section. Below is the radius log? What am I missing? Bill /usr/sbin/radiusd -X FreeRADIUS Version 2.1.10, for host x86_64-redhat-linux-gnu, built on Mar 25

Re: simple accounting proxy setup.

. But I have checked the secret on both sides and it is the same. What else could it be? I'm a little unclear on the remote server's client entry for this relay. Should it be the ip of the freeradius server or should it match the ip of the originating NAS? I have set up both to no avail.

Re: simple accounting proxy setup.

To be clear, remove the line below??? virtual_server = copy-acct-to-home-server Does the "update control { Proxy-To-Realm := 'home_realm' } section handle this association for us? Bill On 10/2/2012 12:19 PM, Matthew Newton wrote: > On Tue, Oct 02, 2012 at 11:37:31AM -0500

Re: simple accounting proxy setup.

1813 secret = ?? } home_server_pool poolit { home_server = myhomeserver virtual_server = copy-acct-to-home-server type = fail-over } realm home_realm { acct_pool = poolit } Is this right? Bill On 10/2/2012 2:58 AM, Matthew Newton wrote: > Hi, > >

simple accounting proxy setup.

Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 ++[sql] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> Fnord attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 153 to 127.0.0.1 port 44057 Finished request 0. Cleaning up request 0 ID 153 with timestamp +178 Going to the next request Ready to process requests. TIA, Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Edge case: TLS failure

I feel I should put this out there just in case someone else does something as unusual as this: This morning, one of my staff members reported that her PC, which we're testing 802.1x authentication on, was dropping off the network. I thought to check the logfile and found Wed May 11 10:09:38 2

RE: The last piece of the puzzle - XP host authentication

dius.org > Subject: Re: The last piece of the puzzle - XP host authentication > > On 19/04/11 14:59, East, Bill wrote: > > >> Have you made sure that your root cert is present in the right stores > >> - remember windows clients have both machine and per-user cert stores.

RE: The last piece of the puzzle - XP host authentication

> -Original Message- > From: freeradius-users-bounces+eastb=pffcu@lists.freeradius.org > [mailto:freeradius-users- > bounces+eastb=pffcu@lists.freeradius.org] On Behalf Of Phil Mayers > Sent: Tuesday, April 19, 2011 4:38 AM > To: freeradius-users@lists.freeradius.org > Subject: Re:

RE: The last piece of the puzzle - XP host authentication

> -Original Message- > From: freeradius-users-bounces+eastb=pffcu@lists.freeradius.org > [mailto:freeradius-users- > bounces+eastb=pffcu@lists.freeradius.org] On Behalf Of Alan Buxey > Sent: Monday, April 18, 2011 3:54 PM > To: FreeRadius users mailing list > Subject: Re: The last

Re: Problem with realms

Ok thanks Alan. Moving PAP and changing the users file format worked. I had been beating my brains out for about three days. On 7/8/2010 9:38 AM, Alan DeKok wrote: Bill Larson wrote: It worked fine with that on my old server, It was wrong. and I tried it both ways on both auth-type

Re: Problem with realms

sting" ^^^ Cleartext-Password := "testing" := is a comparison == is a setting alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Bill Larson Network Administrator, Compu-Net Enterprises http://www.compu.net/ - List info/subscribe/u

Problem with realms

I am sure the solution to my problem is simple however I can't figure it out. This is my user blarson Auth-Type := Local, Cleartext-Password == "testing" Service-Type = Framed-User, Session-Timeout = 18000, Framed-Protocol = PPP, Framed-IP-Address = 255.255.255

Cisco VPN 3000 and Simultaneous Use via checkrad

Greetings, In order to implement simultaneous use checking in my environment I added a subroutine to checkrad that handles snmp checks to the Cisco 3000 series VPN concentrators. I am happy to share my work/experience with anyone that may have a similar environment. Sincerely, Bill McCormick

Huntgroup and regular expression

experts on the list in case I over had looked something obvious. Thanks for your time and wisdom. --Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Stale Sessions

me to some documents that may be of assistance. Maybe I don't have enough resources to process the commands? I have about 1500 users. This is my setup: openSuSE 10.2 Freeradius 1.1.13 MySQL 5.0.26 128MB RAM Pentium III Thanks for any help, Shane -- Bill [EMAIL PROTECTED] http://www.

Re: Freeradius and poprelayd - any ideas please (fwd)

That worked perfectly... I have added both the setting of the address when someone logs in, and again removing the address when someone logs out. -- Bill [EMAIL PROTECTED] http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300

Re: Freeradius and poprelayd - any ideas please

- any ideas please Bill Brunton wrote: So - if I could have freeradius add the IP to the popip database when they log in, it would make everyone much happier, especially me. I think it should be an easy thing to do... I think we did something like that in the lab about 6 years ago and

Re: Freeradius and poprelayd - any ideas please

matika ISP Dana 28/3/2008, "Bill Brunton" <[EMAIL PROTECTED]> pi?e: Well - it seems that many customers have trouble with Outlook and Outlook Express.. If they have an email in the outbox, say they compose offline and connect to send it, it tries to send it before checking e

Re: Freeradius and poprelayd - any ideas please

at least delete an old radlast entry when the user signs in again? On Thu, 27 Mar 2008, Bill Brunton wrote: Date: Thu, 27 Mar 2008 19:20:58 -0500 (CDT) From: Bill Brunton <[EMAIL PROTECTED]> Reply-To: FreeRadius users mailing list To: FreeRadius users mailing list Subje

Re: Freeradius and poprelayd - any ideas please

n you can send. Ivan Kalik Kalik Informatika ISP Dana 27/3/2008, "Bill Brunton" <[EMAIL PROTECTED]> pi?e: I am using Freeradius 1.1.3 on Centos 5. I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelay

Freeradius and poprelayd - any ideas please

incorporate that as post processing step, module etc in freeradius? Any ideas or suggestions? Thank you -- Bill [EMAIL PROTECTED] http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET

Wifi and Client-Side authentication

Here's the scenario, I have a Linksys WRT54GS running DD-WRT RC5 which is fully configured for Radius. I have a small FreeBSD server running FreeRadius-1.1.7_2. HTTPD (or Apache) has not been installed on the system and in it's current configuration would be difficult to do so. The BSD box i

Trouble configuring SQL data store for users (second attempt)

Please forgive the duplicate post. I posted this a few days back and didn't see any response; thought I would give it just one more try. Thanks for any response. --Bill I have started to experiment with using mysql as the datastore for users and clients instead of the default

Touble configuring SQL data store for users

of the two, the second record always returns a failure. I am sure this is probably something really stupid, but I just cannot see it. Any help would be appreciated. I have attatched table dumps, sample commands, and a debug trace. I hope it is helpful Thanks, --Bill FreeRadius version

Re: Help needed with Realms (Freeradius) Urgent!

company.com and > prevent cross authentication. > > Any help is appreciated or does anyone know how to specify a user to a > single realm. Thanks > -- Bill [EMAIL PROTECTED] http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300

Free Radius 1.1.2, Fedora 5 & "invalid ELF header"

was "busted". Pb?/local/lib/rlm_exec.a P2?/local/lib/rlm_exec.a ??/local/lib/rlm_exec.a Thanks, Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re-write Attributes based upon NAS-Port-Type and LDAP authorization response

User-Password == "admin", NAS-Port-Type == "Wireless-802.11" Tunnel-Medium-Type == "IEEE-802", Tunnel-Type == "VLAN", Tunnel-Private-Group-Id == "156" admin User-Password == "admin", NAS-Port-Type == "Ethernet" Filter-ID == "Enterasys:version=1:policy=Allow-All" Thanks to all in advance. Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Rewriting/Filtering Attributes based upon NAS-IP or NAS-Port-Type

some example of how I implement this within the DEFAULT realm. Anybody with an example or insight into how this be accomplished, THANKS in ADVANCE!! Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radius unstable

gh = Yes Here's the log piece: Acct-Session-Id = "606B" User-Name = "bill" User-Password = "bill" NAS-IP-Address = 127.0.0.1 NAS-Port-Id = "32" NAS-Port-Type = Async Service-Type = Framed-User

Unstable FreeRadius

Last week I reported an issue I had with FreeRadius 1.0.5 on Red Hat Enterprise Linux ES release 3. It had to do with dropped MySQL connections. We continue experience severe problems with FreeRadius. The server will run for upwards to 8 hours, sometimes more, before getting into some unknow

dropped mysql connections

effect of this seems to be that FreeRadius stopped responding to requests. Is this normal behavior when this happens? I assume so. Secondly is there anything we can do to prevent or mitigate this problem? Would increasing the number of connections help? Are there known problems in this area? T

v1.1.1 build problems (SSL, EAP)

eeRadius_users_mailing_list/thread357241.htm ) about rlm_eap compilation problems where it was suggested that removing the rlm_eap directory would allow the build to finish and the server to run. So I removed src/modules/rlm_perl and src/modules/rlm_eap and I now have a running server. Regards, Bill Roberts - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: no response from server on other machine

. > > In order to resolve the problem one must know what the problem is. May I > suggest that you start Radius with "radiusd -sfxxyz -l stdout" and observe > what happens and then maybe that will give you a clue. > > > -- Bill [EMAIL PROTECTED] http://ww

Re: No matching entry in the database for request from user

I did. Turns out it had nothing to do with the proxy. I had inadvertently placed a reply attribute as a check attribute in the db. That of course caused the lookup to fail. My apologies for the false alarm. Bill Alan DeKok wrote: Bill Schoolfield <[EMAIL PROTECTED]> wrote: I just test

Re: No matching entry in the database for request from user

I just tested the exact same setup but this time accessing this radius server directly (instead of thru a proxy) and it works fine. So the proxy is changing something. Thoughts? Bill Schoolfield wrote: Hello, I'm getting "No matching entry in the database for request from user&

No matching entry in the database for request from user

Hello, I'm getting "No matching entry in the database for request from user" returned from the sql lookup. Below I have the radclient and server diagnostics interlaced. All look correct and the querries are good (see below for them). What is wrong? Bill /usr/local/bin/

Re: radclient ignores 'Group' attribute

one of the queries (the one for radreply) was failing because I put no user specific attributes there. Do I have to supply a dummy (constant) attribute per user? Right now, all attributes to be returned appear in the radgroupreply table. Thanks for your quick response. Bill Alan DeKok wrote

radclient ignores 'Group' attribute

NAS-Port-Id = 32, NAS-Port-Type = Async, Service-Type = Framed-User, Framed-Protocol = PPP Thanks in advance for your response. Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Ascend-Data-Filters

lters to the user and to the group which the user > is a part of and gotten the same result. > > Anyone know what my problem is here. Is there a setting that I have to > set to allow it to send multiple instances of the same reply attribute back? > > Thanks for any help you ca

Re: Installing FR 1.05

stuff. - Original Message - From: Bill Neely To: freeradius-users@lists.freeradius.org Sent: Friday, September 23, 2005 7:28 PM Subject: Installing FR 1.05 Am installing Free Radius 1.0.5 on Free BSD 5.4 OS Installation went alright, but when I fire it up, it fails to load the sql module.

Installing FR 1.05

radutmp Module: Instantiated radutmp (radutmp) Initializing the thread pool...Listening on authentication *:1645Listening on accounting *:1646Ready to process requests.   In radiusd.conf, I have       $INCLUDE  ${confdir}/sql.conf     What else do I need to do?   Bill   - List info/subscribe

RE: PEAP issues

Remove the " Auth-Type Local" >From the guest account. Let freeradius figure out to do EAP on it's own. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of allan.borman Sent: Friday, August 26, 2005 12:32 PM To: FreeRadius users mailing list Subject: PEAP is

MPPE/PEAP support not in anything but CVS snapshots?

I have a quick question, I ran across a note in a document about 0.97 stating that MPPE support was only in the nightly snapshots and not in the normal releases. (http://www.alphacore.net/contrib/nantes-wireless/eap-tls-HOWTO.html) If this changed since 2002, could someone let me know when? Ot

Re: Script to encrypt/decrypt User-Password

#x27;' C routine (python and perl have a scriptable interface to this). In python this check might be: from crypt import crypt cryptpw == crypt(plaintext, cryptpw) Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC UUCP: camco!bi

Re: Are there any Virtual NAS?

e a small FreeRadius Server with AAA, > > billing system but i don't have any NAS in NAS list, > > can you advise me? > > You can't bill anyone if you don't have a NAS that provides > accounting information. > >

Unsubscribe

Unsubscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Validating using EAP TLS

State = 0x5599c28ab72f3dfde79ae5c18602a18a Finished request 31 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... Thnaks Bill > -Original Message- > From: Alan DeKok [mailto:[EMAIL PROTECTED] >

Validating using EAP TLS

P/TLS - WinXP HOWTO" at http://www.alphacore.net/contrib/nantes-wireless/eap-tls-HOWTO.html We still do not get a connection. Following is an excerpt from radiusd -X Can anyone give me idea what is going on? Thanks in advance! Bill Stewart :-) Kaman Corporation 1332 Blue Hi

Strip realm from accounting

n the right direction? I use MySQL for the accounting and also save the records to the detail files. Bill - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius and Active Directory

to handle group lookups and such or is it just authentication? Bill Michael Griego wrote: | For using PEAP with FreeRADIUS and Active Directory, you'll need to use | the ntlm_auth functionality in the mschap module. | | --Mike | | | On Thu, 2004-10-21 at 06:36, Cool Man wrote: |

Re: Freeradius and Active Directory

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cool Man wrote: | Hi, | | | Active Directory works with freeradius through, but if | you want to use it within a 802.1x/EAP environment it | won't work. Because you have to get out of Active | Directory the NT Passwords. Active Directory doesn't | supp

radiusd seg faulting

Hello, Somehow I have been able to get radiusd to seg fault. I am not sure exactly what to provide - so if there is something someone needs to further diagnose, let me know. Details of the issue: If I authenticate 1 time, access-accept. Same for time #2. Third time is not so good - it seg-faults th

Re: FreeRadius and BillMax billing software.

On Fri, Aug 27, 2004, Shannon Sariman wrote: >Hi Bill, > >On Fri, Aug 27, 2004, Bill Campbell wrote: > >>I think time BillMax uses a MySQL database for their processing so it >>shouldn't be difficult to either process from the standard freeradius mysql >>data

Re: FreeRadius and BillMax billing software.

On Fri, Aug 27, 2004, Shannon Sariman wrote: >Hi All, > >Is there anyone (FreeRadius user) out there who has configured the BillMax >billing software (for radius accounting purposes) to work with FreeRadius? >I'm having difficulty trying to get radius accounting data into Bil

Re: radutmp and Multiple Logins

I think I fixed my problem. The answer was at http://lists.cistron.nl/archives/freeradius-users/2004/06/frm00038.html Bill Dunn - Original Message - From: Bill To: [EMAIL PROTECTED] Sent: Friday, July 23, 2004 10:51 AM Subject: radutmp and Multiple Logins Hi

radutmp and Multiple Logins

adius verifies a Multiple Login by using the checkrad.pl script. In this situation the login is being denied because the radutmp file says so (and it isn't correct). Bill Dunn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Proxy with GlobalPOP

Ok, thanks. This is the kind of information I will I was hoping for. Bill Dunn - Original Message - From: Alan DeKok To: [EMAIL PROTECTED] Sent: Thursday, June 03, 2004 3:14 PM Subject: Re: Proxy with GlobalPOP "VCI Help Desk" <[EMAIL PROTECTED]> wrote: >

Proxy with GlobalPOP

uld be adequate. retry_delay = 5 retry_count = 6 Does anyone have any suggestions? Bill Dunn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: LDAP Authentication (MS Windows AD)

on howto's or other references getting OpenLDAP and MS AD to talk, I would appreciate the suggestions.) Thanks for the pointers. --Bill >From Dustin Doris on Sat, 29 May 2004 10:40:55 -0400 (EDT) Hmmm... Perhaps you should double-check just to make sure. Do you have access to a

Re: LDAP Authentication (MS Windows AD)

usd is not able to > > negotiate a connection that the ldap server will accept. > > > > Any recommendations would be appreciated. > > --Bill > > > > > > --- ldap config from radiusd.conf > > > > ldap { > > server = "win-dc.win-dom.

LDAP Authentication (MS Windows AD)

iated. --Bill --- ldap config from radiusd.conf ldap { server = "win-dc.win-dom.ctc.edu" port = 636 identity = "CN=User\\, Asteroid,OU=System Accounts,OU=CIS,OU=Accounts,DC=WIN-DOM,DC=ctc,DC=edu" password = "" start_tls = yes

Freeradius+PAM+LDAP

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello everyone, I've been working on having radius authenticate through PAM which is getting it's authentication info from LDAP. This is so I can use pam_tally to monitor failed logins. I actually have the system working, but with one show stopping

Re: Using kerberos for authentication -- multiple realms.

prove to be the option I need to take if I can't get the Kerberos working soon. Thanks for your assistance. --Bill On Sun, May 09, 2004 at 08:34:48AM -0400, Alan DeKok wrote: > Bill Shaver <[EMAIL PROTECTED]> wrote: > > I need to add at least one more Kerberos realm (re

Using kerberos for authentication -- multiple realms.

oks like I would have the same problem. Any pointers, even to existing documents I have not yet found, would be most appreciated. If it can't be done, feel free to tell me that too -- I will stop beating my head against this wall. Best Wishes, --Bill - List info/subscribe/unsubs

Re: FreeRadius on Suse Linux 9 PRO

On Fri, Apr 30, 2004, [EMAIL PROTECTED] wrote: > >Does anyone know if this has been done? I've been using it for quite a while, built as packages under the OpenPKG.org packaging system. Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Systems, Inc. UUCP:

Re: Open ports over firewall

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 27 Apr 2004 13:15:24 +0200 "Gabriele D'Andrea - TNET S.p.A." <[EMAIL PROTECTED]> wrote: > Hi everybody, > I'm running Freeradius on my RedHat server. Which OUTPUT ports sholud I > leave open for freeradius? > For accounting i leave udp 1812-13

Re: getting a UID on the client after PAM authentication passes

services that are capable of providing that > information (such as NIS and LDAP). > > --Mike > > On Fri, 2004-03-19 at 13:42, Bill Feero wrote: > > I'm trying to authenticate with PAM to freeRADIUS 0.9.0 > > I'm using pam_radius_auth version 1.3.15 on a RedHat 8.0 system

getting a UID on the client after PAM authentication passes

t want to create user's on the client, so how can I force a UID, home dir. and default shell settings for a user that has been authenticated by RADIUS? Thanks for any help. -- Bill Feero Logical Solutions, Inc. 203 647 8700 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Help installing

> configure: error: installation or configuration problem: C compiler cannot > > create executables. > > can't you read? your gcc doesn't work! > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > - &

Re: Help installing

> configure: error: installation or configuration problem: C compiler cannot > create executables. > > This is on a fresh install of RedHat 7.1. > > Any ideas? > > Thanks in advance. > > DAMN > > > - > List info/subscribe/unsubscribe? See http://www.free

Re: Tag the subject?

: Zehntausende Kinder brauchen Hilfe. UNICEF hilft den > Kindern - helfen Sie mit! https://www.unicef.de/spe/spe_03.php > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- Bill [EMAIL PROTECTED] http://www.brunton.net http://www.icu.net KA0SEP

RE: SU, and here there

Title: Message Yes, I only joined the list today and the FIRST mail from it was this, header below.       Received: from mail1 ([172.16.0.1]) by altair.rockgrove with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2657.72) id CRATQX2V; Thu, 8 Jan 2004 12:23:36 -Received: from

Re: Disabling User

On Wed, Jan 07, 2004, Anson Rinesmith wrote: >Just set their Auth-Type := Reject, no need to change the password. That's fine for radius, but doesn't solve the larger problem (e.g. POP/IMAP access and other things that depend on the password). Bill -- INTERNET: [EMAIL PROTECTED]

Re: Disabling User

. Then removing the ``*'' from the password enables the account easily. Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC UUCP: camco!bill PO Box 820; 6641 E. Mercer Way FAX:(206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 URL: h

Re: SPAM [was: Re: VXAMCECD, the whistle made]

nsisting of a paragraph of random words with a single URL in the body. These aren't caught by spamassassin, or most of the other filters. The good thing about them is that they're typically small. Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC UUCP:

  1   2   >