Re: FreeRadius Error " Access Rejected" Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
Thank you Alan I will pursue that line of inquiry further. On 9/23/2013 8:18 PM, Alan DeKok wrote: Daniel Baker wrote: [ldap] performing search in dc=citlao,dc=local, with filter (uid=root) [ldap] object not found [ldap] search failed What part of that is unclear? What can I try

FreeRadius Error " Access Rejected" Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
Hi Guys, we are trying to get Free Radius to authenticate our users who connect through a Cisco Small Business POE switch. When testing authentication with a shutdown / no shutdown command on port fa/17 which has an IP phone connected to it we receive the following errors: FREE RADIU

FreeRadius Error " Access Rejected" Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
Hi Guys, we are trying to get Free Radius to authenticate our users who connect through a Cisco Small Business POE switch. When testing authentication with a shutdown / no shutdown command on port fa/17 which has an IP phone connected to it we receive the following errors: FREE RADIUS

Re: client code for long extended attributes?

2013-09-02 Thread Daniel Pocock
On 20/07/13 14:56, Alan DeKok wrote: > Daniel Pocock wrote: >> Should this code be shared with the client project freeradius-client? > No. The freeradius-client code is pretty bad. > >> Or is it preferred to build a new client (or shared library) from the >> f

Re: Fwd: radiusclient-ng in Debian

2013-09-02 Thread Daniel Pocock
The FTP masters just accepted the new freeradius-client package, it should be available to install now using "apt-get" I've opened a bug request for removal of the radiusclient-ng package from the Debian archive On 19/07/13 19:25, Daniel Pocock wrote: > > On 15/07/13

Re: client code for long extended attributes?

2013-07-19 Thread Daniel Pocock
On 15/07/13 21:53, Alan DeKok wrote: > Daniel Pocock wrote: >> Can anybody comment on which client code should be used for long >> extended attributes? >> >> I see that the freeradius-client project predates RFC 6929. > > By a LONG ways. > >

Re: Fwd: radiusclient-ng in Debian

2013-07-19 Thread Daniel Pocock
On 15/07/13 23:21, Daniel Pocock wrote: > > > On 15/07/13 21:51, Alan DeKok wrote: >> Daniel Pocock wrote: >>> I just opened this report against radiusclient-ng in Debian (see below), >>> can anybody else comment on the situation, in particular, for >>>

Re: Fwd: radiusclient-ng in Debian

2013-07-15 Thread Daniel Pocock
On 15/07/13 21:51, Alan DeKok wrote: > Daniel Pocock wrote: >> I just opened this report against radiusclient-ng in Debian (see below), >> can anybody else comment on the situation, in particular, for >> compatibility? Is there any urgency for Debian to update to t

client code for long extended attributes?

2013-07-15 Thread Daniel Pocock
Can anybody comment on which client code should be used for long extended attributes? I see that the freeradius-client project predates RFC 6929. Is there any module in the server project that provides a good example of using these long values from requests? - List info/subscribe/unsubscribe

Fwd: radiusclient-ng in Debian

2013-07-15 Thread Daniel Pocock
repository but it appears that the client code is not in github Also, is anybody aware of C++ wrappers for this code or a C++ alternative? Original Message Subject:radiusclient-ng in Debian Date: Mon, 15 Jul 2013 14:41:54 +0200 From: Daniel Pocock To: Debian Bug

maintaining reSIProcate compatibility with FreeRADIUS

2013-07-11 Thread Daniel Pocock
/html/rfc5389#section-10.2 This all leaves me feeling that STUN/TURN may need it's now module in FreeRADIUS. Regards, Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MS-CHAP-V2 allow_retry on ldap authentification

2012-10-23 Thread Daniel Ekman
Thanks for replying and sorry if I'm being vague, I'll try and be more specific. On Tue, Oct 23, 2012 at 10:59 AM, Phil Mayers wrote: > On 10/22/2012 09:13 AM, Daniel Ekman wrote: >> >> Hi list, >> >> I have a fairly large user base doing WPA2-enterprise f

MS-CHAP-V2 allow_retry on ldap authentification

2012-10-22 Thread Daniel Ekman
p.conf but that only broke things like I read somewhere it would. Thanks for reading :) Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Using ldap_xlat in unlang with Chars not allowed in an ldap search

2012-10-01 Thread Daniel Finger
Am 20.09.2012 18:28, schrieb Phil Mayers: > If you edit rlm_ldap.c around line 1231, and change: >if (!radius_xlat(url, sizeof(url), fmt, request, func)) > ...to: >if (!radius_xlat(url, sizeof(url), fmt, request, ldap_escape_func)) > ...this should work. I'll submit a one-liner. I just up

RE: Chap Authentication Error

2012-09-16 Thread Daniel Niasoff
he CHAP hash Thanks for your response Daniel -Original Message- From: freeradius-users-bounces+daniel=intelliworkspace@lists.freeradius.org [mailto:freeradius-users-bounces+daniel=intelliworkspace@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 14 September 2012 20:55 To: Free

Chap Authentication Error

2012-09-14 Thread Daniel Niasoff
2:32 2012 : Info: [chap] chap user f3207...@surf4sure.net authenticated successfully Now where do I go from here? Thanks Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Using ldap_xlat in unlang with Chars not allowed in an ldap search

2012-08-29 Thread Daniel Finger
ccounts,dc=NI-NGN,dc=DE?cn?sub?(&(CommonName=%{TLS-Client-Cert-Common-Name})(allowedSSID=%{Aruba-Essid-Name})) -> ldap:///cn=UserAccounts,dc=DE?cn?sub?(&(CommonName=Testuser(10) Daniel)(allowedSSID=ssid-data)) |Debug: [ldap_WLAN_auth] ldap_get_conn: Checking Id: 0 |Debug: [ldap_W

Re: Not sending all trusted CA Certificates in EAP-TLS Server Hello

2012-01-04 Thread Daniel Finger
, schrieb Alan DeKok: >> Is it possible to change the behaviour that only the certs in the >> certificate_file are used? > > Use CA_path instead of CA_file. That might help. It does indeed help. Thanks! -- Regards Daniel Finger smime.p7s Description: S/MIME Kryptograf

Not sending all trusted CA Certificates in EAP-TLS Server Hello

2012-01-04 Thread Daniel Finger
? This should be enough for the clients to verify the server certificate. -- Regards Daniel Finger smime.p7s Description: S/MIME Kryptografische Unterschrift - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
.. a few. I'll try other ways, first, change the DB engine. Tomorrow i'll write about. Thanks. Sds, --- Daniel Menezes - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
INNODB for these tables. > > https://github.com/alandekok/freeradius-server/blob/master/raddb/sql/mysql/s chema.sql Hmm, I get it now. I'll change the engine and report the results. Thanks. Sds, --- Daniel Menezes - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Hi Alan, > If you know better than the RADIUS experts, why are you asking > questions on this list? I don't know better than anyone, I'm simply asking to understand where I'm lost. Sorry if you feel bad with my questions .. Sds, --- Daniel Menezes - List info/subsc

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
ow any slow query .. It's much time? I've tested whith mtop[1] too, no slow queries. Thanks! Sds, --- Daniel Menezes Links: [1] http://mtop.sourceforge.net/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Fajar, I had radutmp and SQL commented out in account {}. I don't know why, a possible mistake. After mark radutmp and restart freeradius I don't see new errors in log. In the NAS (MikroTik) statistics sometimes have a few resends and timeouts, it's normal? Sds, ---

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Daniel Menezes
problems, but it was very useful. Maybe I really need some customization to the backend, I'll think about it. Thank you. Sds, --- Daniel Menezes -Mensagem original- De: freeradius-users-bounces+listas=dmnzs.com...@lists.freeradius.org [mailto:freeradius-users

FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Daniel Menezes
backend, tables indexes and other things. I've used the backend script 'mysqltuner.pl' to adjust the performance. It's better now, but the warnings and erros persists. Can anyone help me on this? Thanks in advance. Sds, --- Daniel Menezes - List info/subscribe/u

RE: Radius Access-Challenge and Apache

2011-09-07 Thread Daniel Abels
Hi, I have done this ... But I still don't have any luck (please see my last message.) Could the problem be related to the version of radius auth for apache in the Debian repos perhaps? Daniel > -Original Message- > From: freeradius-users-bounces+daniel.abels=leica- >

RE: Radius Access-Challenge and Apache

2011-09-04 Thread Daniel Abels
mod_auth_radius-2.0.c(1256): RADIUS Authentication for user=dra password= OK. Cookie expiry in 5 minutes\n [Tue Aug 30 09:25:18 2011] [debug] mod_auth_radius-2.0.c(1258): Adding cookie 393dda94ff105f4d6dad2c1a509a3a344e5c210a\n [Tue Aug 30 09:25:18 2011] [debug] mod_deflate.c(615): [client 10.10.240.240] Zlib: Compressed 130 to 108 : URL /test/index.html Any ideas? Thanks again, Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radius Access-Challenge and Apache

2011-08-28 Thread Daniel Abels
User-Password = "testing" NAS-IP-Address = 127.0.1.1 NAS-Port = 10 rad_recv: Access-Challenge packet from host 127.0.0.1 port 1812, id=150, length=50 Reply-Message = "Please Enter Code" State = 0x6368616c6c656e6765 Any assistance on thi

Re: Config for TLS, TTLS and PEAP and subject validation

2011-08-12 Thread Daniel Bertolo
very much. This works great. Regards, Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Config for TLS, TTLS and PEAP and subject validation

2011-08-11 Thread Daniel Bertolo
ests and EAP-TTLS or PEAP requests? And if so, can I use a different server section for EAP-TLS? Thanks for help. Best regards, Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: radutmp - key change

2011-08-08 Thread Daniel Hurran
Fixed! I had: key = %{Calling-Station-Id} instead of: username = %{Calling-Station-Id} in: /etc/freeradius/modules/radutmp Many thanks. -Original Message- From: freeradius-users-bounces+daniel.hurran=bglobalmetering@lists.freeradius.org [mailto:freeradius-users-

RE: radutmp - key change

2011-08-08 Thread Daniel Hurran
Hi Alan, Whatever I change it to, it still prints out at debug, username = "%{User-Name}". -Original Message- From: freeradius-users-bounces+daniel.hurran=bglobalmetering@lists.freeradius.org [mailto:freeradius-users-bounces+daniel.hurran=bglobalmetering@lists.freeradius.org]

radutmp - key change

2011-08-08 Thread Daniel Hurran
Hi all, I am trying to change the key in the radutmp module from username to calling-station-id. I have made the change in the radutmp file, but I try freeradius -X the debug says that username = "%{User-Name}". I was expecting username= %{Calling-Station-Id}. Is this correct? Whatever I put i

Re: Freeradius-Users Digest, Vol 73, Issue 8

2011-05-11 Thread Daniel Davidson
: Tue, 3 May 2011 20:56:12 +0100 From: Alexander Clouter Subject: Re: ldap server connection timeout To:freeradius-users@lists.freeradius.org Message-ID: Daniel Davidson wrote: > > My new wireless network tested great, but now that I have rolled it out > to the entire building, I

Re: Error: User-Name is not the same as MS-CHAP name

2011-05-07 Thread Daniel Deptuła
We use FR 2.1.10. Any idea how to fix this ? Try to uncomment the ntdomain line in the authorize section of site configuration. This will split the realm (computer name) and login. Maybe you'll also need to set the with_ntdomain_hack = yes in mschap module configuration. Daniel - L

Re: ldap server connection timeout

2011-05-03 Thread Daniel Davidson
Dan On 05/03/2011 05:00 AM, freeradius-users-requ...@lists.freeradius.org wrote: Daniel Davidson wrote: > My new wireless network tested great, but now that I have rolled it out > to the entire building, I get error messages like: > > Mon May 2 15:15:06 2011 : Error: rlm_

ldap server connection timeout

2011-05-02 Thread Daniel Davidson
My new wireless network tested great, but now that I have rolled it out to the entire building, I get error messages like: Mon May 2 15:15:06 2011 : Error: rlm_ldap: ldap_search() failed: Timed out while waiting for server to respond. Please increase the timeout. And when these trigger, near

Re: EAP-TLS + Symbian = weird behaviour

2011-04-10 Thread Daniel Deptuła
W dniu 2011-04-10 14:25, Zeus V Panchenko pisze: Daniel Deptuła (daniel.dept...@gmail.com) [11.04.10 14:16] wrote: ... the same device works fine (getting authorized well) via one AP in my LAN and remote VPN, but receiving ... Have you installed the CA certificate on the phones?? You can check

Re: EAP-TLS + Symbian = weird behaviour

2011-04-10 Thread Daniel Deptuła
this behaviour? Have you installed the CA certificate on the phones?? You can check it propably somewhere in Menu-> Settings -> Phone -> Phone management -> Security -> Certificates management. For example in Nokia 5800 there are only VeriSign's CA certs installed by defau

Re: EAP TTLS: Getting the EMSK key?

2011-01-25 Thread Daniel
export both of them (for security reasons as you said). Thanks again, Daniel. -- View this message in context: http://freeradius.1045715.n5.nabble.com/EAP-TTLS-Getting-the-EMSK-key-tp3354606p3356264.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe

Re: EAP TTLS: Getting the EMSK key?

2011-01-24 Thread Daniel
Alan DeKok-2 wrote: > > Daniel wrote: >> I am new to radius and am using it in for a wimax based EAP TLS/TTLS >> network. >> Right now, I have freeradius 1.1.7 already installed and working. > > > It won't really work for WiMAX. You'll need

EAP TTLS: Getting the EMSK key‏

2011-01-24 Thread Daniel
key, but for some reason I cannot retrieve the EMSK key. What do I need to do? Would upgrading to a newer version of freeradius help? Thanks, Daniel. -- View this message in context: http://freeradius.1045715.n5.nabble.com/EAP-TTLS-Getting-the-EMSK-key-tp3354606p3354606.html Sent from the

Re: SQL query error; rejecting user

2010-10-12 Thread Daniel Sandulescu
nces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Daniel Sandulescu Sent: Tuesday, October 12, 2010 10:46 AM To: FreeRadius users mailing list Subject: Re: SQL query error; rejecting user If I want to upload schema.sql same bug as here: http://www.mail-archive.com/freeradius-us

Re: SQL query error; rejecting user

2010-10-12 Thread Daniel Sandulescu
If I want to upload schema.sql same bug as here: http://www.mail-archive.com/freeradius-users@ lists.freeradius.org/msg61853.html - Original Message - From: "Alan Buxey" To: "FreeRadius users mailing list" Sent: Tuesday, October 12, 2010 11:20 AM Subject: Re: SQL query error; rejec

Re: SQL query error; rejecting user

2010-10-12 Thread Daniel Sandulescu
Here it is installed : radiusd: Loading Virtual Servers server { # from file /usr/local/etc/raddb/radiusd.conf And this is the error : rad_recv: Access-Request packet from host 127.0.0.1 port 57115, id=255, length=115 Service-Type = Framed-User Framed-Protocol = PPP

Re: SQL query error; rejecting user

2010-10-11 Thread Daniel Sandulescu
So I did, I deleted everything in / etc / raddb and I configuration, again depending on the requirements there. My question was, if I can see where misuse. Sincerely, Daniel - Original Message - From: "Alan DeKok" To: "FreeRadius users mailing list" Sent: Mond

Re: SQL query error; rejecting user

2010-10-11 Thread Daniel Sandulescu
up request 0 ID 244 with timestamp +13 Ready to process requests. - Original Message - From: "Alan DeKok" To: "FreeRadius users mailing list" Sent: Monday, October 11, 2010 4:44 PM Subject: Re: SQL query error; rejecting user Daniel Sandulescu wrote: I upgrad

Re: SQL query error; rejecting user

2010-10-11 Thread Daniel Sandulescu
ot;Alan DeKok" To: "FreeRadius users mailing list" Sent: Monday, October 11, 2010 3:21 PM Subject: Re: SQL query error; rejecting user Daniel Sandulescu wrote: Hello! I got a erroarea following logging and do not know where to look. Can someone ajunte me? It means you've ed

SQL query error; rejecting user

2010-10-11 Thread Daniel Sandulescu
Hello! I got a erroarea following logging and do not know where to look. Can someone ajunte me? rad_recv: Access-Request packet from host 127.0.0.1:42096, id=227, length=116 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "phlander" CHAP-Challenge = 0x

Re: Clear text password not available

2010-10-09 Thread Daniel Sandulescu
-IP-Address', '=', '192.168.0.100'); So we created user. - Original Message - From: "Alan DeKok" To: "FreeRadius users mailing list" Sent: Saturday, October 09, 2010 10:59 AM Subject: Re: Clear text password not available Daniel Sandulescu wrote: Hi !

Clear text password not available

2010-10-09 Thread Daniel Sandulescu
Hi ! Login incorrect (rlm_chap: Clear text password not available): [phlander/] Does anyone know where to change? Tks!- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

auth: Failed to validate the user.

2010-10-08 Thread Daniel Sandulescu
Hello! I got a following and do not know where erroare mistake. cylon2:/etc/freeradius# radtest test-user test-pass 192.168.1.1 10 danieladmin Sending Access-Request of id 198 to 192.168.1.1 port 1812 User-Name = "test-user" User-Password = "test-pass" NAS-IP-Address = 192

Re: radutmp only show one user

2010-10-06 Thread Daniel Soto
  modcall[preacct]: module "suffix" returns noop for request 1     acct_users: Matched entry DEFAULT at line 7   modcall[preacct]: module "files" returns ok for request 1 modcall: leaving group preacct (returns ok) for request 1   Processing the accounting section of radiu

radutmp only show one user

2010-10-05 Thread Daniel Soto
hi, mi name is Daniel. my problem is about simultaneous-use,  i need use this attribute, but when i try use it, only the last user logged apply this attribute. i think the problem is radutmp, when i execute the radwho command i only can see the last user logged. is possible a

Re: still not working (newbie for radius)

2010-09-19 Thread Daniel Woodruffe
I think it tells you in your debug what the problem is Gahn: Found Auth-Type = Local WARNING: Please update your configuration, and remove 'Auth-Type = Local' --- On Sun, 19/9/10, gahn wrote: From: gahn Subject: still not working (newbie for radius) To: freeradius-users@lists.freeradius.org

Re: nas-port 0

2010-09-08 Thread Daniel Soto
hi, i hope someone can help me to understand this case. from a nas cisco 1841 i send by pppoe a request to a freeradius Version 1.1.3. the response ever is NAS-Port=0 -- rad_recv: Accounting-Request packet from host xx:1646, id=114, length=168     Acct-Se

Re: Screwy RHEL problem

2010-08-23 Thread Daniel Davidson
Nevermind, selinux was biting me in the rear again. Dan On Mon, 2010-08-23 at 15:33 -0500, Daniel Davidson wrote: > I am migrating our system to freeradius2, I have a test environment that > works well on my fedora system that I am moving to a new server. > > I can authenticate wit

Screwy RHEL problem

2010-08-23 Thread Daniel Davidson
I am migrating our system to freeradius2, I have a test environment that works well on my fedora system that I am moving to a new server. I can authenticate with the server perfectly if I start the server using radiusd -X, however if I then cancel that and run it with the RHEL startup script it do

Re: Freeradius with LDAP backend for pptpd (via MS-CHAP)

2010-07-09 Thread Daniel Gomes
Em 09-07-2010 17:12, Alan DeKok escreveu: Daniel Gomes wrote: we are currently and successfully using it to authenticate other services).\ Using PAP passwords. Actually these application are probably just binding with the user's credentials, but that&

Re: Freeradius with LDAP backend for pptpd (via MS-CHAP)

2010-07-09 Thread Daniel Gomes
Em 09-07-2010 13:59, Alan DeKok escreveu: Daniel Gomes wrote: Well, as I mentioned (a couple of times now), the LDAP server was indeed returning a password to FreeRADIUS, since radtest was always working fine. No, it wasn't returning a password to FreeRADIUS. Go *read* the

Re: Freeradius with LDAP backend for pptpd (via MS-CHAP)

2010-07-09 Thread Daniel Gomes
ot; (as I also mentioned it, we are currently and successfully using it to authenticate other services). The problem was really related to MS-CHAP, and now that I changed to PAP, it all seems to be working fine... Em 09-07-2010 13:35, Alan DeKok escreveu: Daniel Gomes wrote: Wrong guess

Re: Freeradius with LDAP backend for pptpd (via MS-CHAP)

2010-07-09 Thread Daniel Gomes
Wrong guess, i'ts OpenLDAP :) Em 09-07-2010 13:04, Alan DeKok escreveu: Daniel Gomes wrote: From the logs, and as I wrote on my initial cry for help, I could see that the password wasn't being found, I just couldn't puzzle out why... And yes, the users do have passwords on LDA

Re: Freeradius with LDAP backend for pptpd (via MS-CHAP)

2010-07-09 Thread Daniel Gomes
ago) that I had the client (ie. Windows) configured to try MS-CHAP and not PAP... @ nf-vale: nice detailed description on how to fix it, but I ended up using peter's solution, as it seemed easier. @ana dekok (inline comments): Em 09-07-2010 11:23, Alan DeKok escreveu: Daniel Gomes

Freeradius with LDAP backend for pptpd (via MS-CHAP)

2010-07-08 Thread Daniel Gomes
ces are on the same machine, so there's not even the need for safe connections. So long as it works, I really don't care about any particular configuration! Thanks in advance, Daniel Gomes - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems authenticating with a Cisco ASA 5510

2010-06-15 Thread Daniel Davidson
? Dan On Mon, 2010-06-14 at 15:05 -0500, Daniel Davidson wrote: > We have had a radius server running for years that we use to > authenticate our wireless users over wpa. It works flawlessly and > connections are authenticated as shown by the log below. > > Mon Jun 14 14:57

Problems authenticating with a Cisco ASA 5510

2010-06-14 Thread Daniel Davidson
We have had a radius server running for years that we use to authenticate our wireless users over wpa. It works flawlessly and connections are authenticated as shown by the log below. Mon Jun 14 14:57:40 2010 : Auth: Login OK: [miyagi72/] (from client 1s port 109133 cli d830.629b.3ae9) Above is

Re: supplicant winxp+freeradius+ldap

2010-05-03 Thread Daniel Soto
as I have read, http://deployingradius.com/documents/protocols/compatibility.html , isn´t possible authenticate users with peap (mschapv2) in ldap. when we use EAP to authenticate in ldap, only EAP-TTLS (PAP) works. - Mensaje original - De: "Daniel Soto&qu

Re: supplicant winxp+freeradius+ldap

2010-05-02 Thread Daniel Soto
sorry, didn´t include the log, Starting - reading configuration files ... reread_config:  reading radiusd.conf Config:   including file: /etc/raddb/proxy.conf Config:   including file: /etc/raddb/clients.conf Config:   including file: /etc/raddb/snmp.conf Config:   including file: /etc/r

Re: supplicant winxp+freeradius+ldap

2010-05-02 Thread Daniel Soto
thanks i´ll try. - Mensaje original - De: "John Dennis" Para: "FreeRadius users mailing list" CC: "Daniel Soto" Enviados: Viernes, 30 de Abril 2010 13:55:36 Asunto: Re: supplicant winxp+freeradius+ldap On 04/30/2010 02:50 AM, Daniel Soto wr

supplicant winxp+freeradius+ldap

2010-04-30 Thread Daniel Soto
hi. i think that this problem is very similar to many people but i can´t find the solution. i´m trying authenticate users of windows with is own supplicant, when i try authenticate in local users no problem, however  the problem is when i try it with openldap. i received a messag

Re: how send more parameters?

2009-07-21 Thread Daniel Aparecido Martins Rosa
Use NTRadPing http://packetlife.net/armory/ntradping/ 2009/7/21 Ivan Kalik > > need send to check values like calling-station-id ?? > > > > i use auth into ldap and account into mysql and works.. now need send > more > > parameters like calling-stations-id or session-time.. how can i do that >

Re: Store message "Multiple logins" in MySQL.

2009-07-15 Thread Daniel Aparecido Martins Rosa
tiple logins" in Database would be perfect, I suggested that the Kalik. Thank you. Daniel Aparecido Martins Rosa 2009/7/15 Alan DeKok > Daniel Aparecido Martins Rosa wrote: > > Hi All! > > I need to register in a database when occurs simultaneous use. Currently > &

Store message "Multiple logins" in MySQL.

2009-07-14 Thread Daniel Aparecido Martins Rosa
Hi All! I need to register in a database when occurs simultaneous use. Currently I stored by postauth_query through the variable '% (reply: Packet-Type)', but the message is generic, ranging from Access-Reject or Access-Accept. When a connection occurs simultaneously, The freeradius stores the me

freeRadius 1.1.6 ldap inner and outer identity

2009-05-24 Thread Daniel Daza Muñoz
ot;En el principio Dios creo * desde la línea de comandos" Daniel Daza Muñoz Responsable de programación. Área de Comunicaciones. Servicio de Informática y Comunicaciones. UNIVERSIDAD DE SEVILLA. Campus de Reina Mercedes. Edificio Rojo. Despacho 3.26 Avenida de Reina Mercedes, s/n 41012 Sevilla

Re: need help & advice getting started with freeradius

2009-04-06 Thread daniel knox
Mon, Apr 6, 2009 at 5:05 PM, Alan DeKok wrote: > daniel knox wrote: > > Basically I had to use radius 1.7 something as it was in the repos. > > Source code *does* exist for newer versions. > > > I have NTPassword in my ldap directory so i could use PEAP, howeve

Re: need help & advice getting started with freeradius

2009-04-06 Thread daniel knox
sting. On Sun, Apr 5, 2009 at 10:24 PM, Alexander Clouter wrote: > daniel knox wrote: > > > > Lol just actually read some stuff on WPA and learnt abit more about EAP. > I > > realise now that TTLS does not require client certificates like I > previously > > thoug

Re: need help & advice getting started with freeradius

2009-04-05 Thread daniel knox
the ability to access this. Although this may not be to difficult to distribute to them I would have to look into these possible issues. On Sun, Apr 5, 2009 at 9:35 PM, daniel knox wrote: > Okie, I've spent some of this weekend looking into this and some of the > files included in

Re: need help & advice getting started with freeradius

2009-04-05 Thread daniel knox
Okie, I've spent some of this weekend looking into this and some of the files included in freeradius (havnt had a chance to play around testing it though). Am I right in guessing once i've configured the ldap group membership filter, i include the unlang statement: if (Ldap-Group == whatever) {

need help & advice getting started with freeradius

2009-04-04 Thread daniel knox
Hello everyone, this is my first time getting started with freeradius. I implement ICT at a local school and I would like to improve our wireless from a WPA pre-share key to a radius based system. We have an openldap server already with all our users and groups and use them to authticate them int

Re: Problem with only some users. Monowall - Freeradius

2009-02-03 Thread Daniel Bojczuk
hanks, sorry about my english. Daniel 2009/2/3 SDamron Looks like some kind of problem with your database. It clears when > you auth against the radtest, but when you try to use a user in the > database, it fails. > > On Tue, Feb 3, 2009 at 6:45 PM, Daniel Bojczuk wrote: > >

Problem with only some users. Monowall - Freeradius

2009-02-03 Thread Daniel Bojczuk
NING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. Sending Access-Reject of id 166 to 123.123.123.123 port 63026 Reply-Message = "\r\nYou are already logged in 2 times - access denied\r\n\n" Finished request 6. Going to the next request Waking up in 4.9 seconds. ___

radiusd crash after startup

2008-11-07 Thread Daniel Kaminski
: rlm_sql_mysql: Starting connect to MySQL server for #4 no error entry or anything else. can anyone help me? thanks daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Dynamic VLANs based on AD group membership

2008-07-08 Thread Daniel Baumann
Follow-up question (sorry I'm new this): I'm currently authenticating users with FreeRadius against an AD database (PEAP-MS-CHAPv2). Would I still have to use the ldap module to get a user's AD group membership? Thanks, Daniel -Original Message- From: [EMAIL PROTECTED] g

Dynamic VLANs based on AD group membership

2008-07-08 Thread Daniel Baumann
k to the switch? Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Logs in radacct

2008-06-03 Thread Daniel Davidson
For some ready my accounting information isnt being written at all, even though I cannot find a difference in the config file with another radius server I am running. I have included what I believe to be the appropriate parts or radiuxsd -x below. Seems like the %{Client-IP-Address} directories a

Help with FreeRadius + Switch + Mac Based Auth - question

2008-06-03 Thread Daniel Machado Grilo
e State Initialize So My real (resumed) question: Do I need to have supplicants even so i want to authenticate with the mac-address, or could it be that this switch doesn't support this, and the normal behaviour should be that the switch asks RADIUS to have access showi

Re: ldap group membership required

2008-01-09 Thread Daniel Durgin
Thank you for the quick reply. I beat my head against it again, and again. Then noticed the clients file. I got it working. Alan DeKok wrote: Daniel Durgin wrote: I have search the archives and google, and there seems to be lots of confusion on the subject: Requiring membership to and LDAP

ldap group membership required

2008-01-08 Thread Daniel Durgin
Hello, I have search the archives and google, and there seems to be lots of confusion on the subject: Requiring membership to and LDAP group to authenticate. I can seem to get it to work. Notice the misspelling og the member: dn: cn=radius_wifi,ou=Groups,dc=fu,dc=bar cn: min_radius_wifi obj

Using the attribute expiration with sql module

2007-08-10 Thread Daniel Bojczuk
Hi, I need to use the attribute Expiration in the SQL tables. It is working fine on this way: +-+---++-++ |username | attribute | op |value| id | +-+---++-++ |daniel | User-Password | == |daniel

Re: Using two tables (postgreSql) to validate users

2007-07-02 Thread Daniel Bojczuk
Let me see if I understood. Shold I stop using the rlm_slq and start using rlm_perl with my own authentication script (using the freeradius' variables and functions, I read something about it)?? Thanks Daniel 2007/7/2, Krzysztof Olêdzki <[EMAIL PROTECTED]>: On 2007-06-30 17:24, Dan

Using two tables (postgreSql) to validate users

2007-06-30 Thread Daniel Bojczuk
user once again. Is it possible? Thanks, Daniel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems using freeradius+postgresql

2007-06-30 Thread Daniel Bojczuk
Yes!!! You're right Freeradius doesn't have permission to select the tables. Now it's working fine. Thanks Daniel 2007/6/29, Pshem Kowalczyk <[EMAIL PROTECTED]>: Hi, You haven't pasted the whole log, but judging from the following lines: Postgresql check_error: PG

Problems using freeradius+postgresql

2007-06-29 Thread Daniel Bojczuk
uest 0 When I saw the "??" int the queries i changed te query in postgresql.conf putting al the query on the same line (deleting the "/")... but it doesn't work. I'm new on using freeradius, I don't know what I can do. Thank you.. Daniel Bojczuk - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

AW: server crashes with eap/tls after crl update

2007-04-20 Thread Fiederling, Daniel
lt. That would imply that radiusd crashes before it writes the first debug message. bye Daniel -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von inverse Gesendet: Freitag, 20. April 2007 10:36 An: FreeRadius users mailing list Betreff: Re: server

server crashes with eap/tls after crl update

2007-04-19 Thread Fiederling, Daniel
MySQL server for #1 Thu Apr 19 19:07:24 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Thu Apr 19 19:07:24 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Thu Apr 19 19:07:24 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Thu Apr 19 19:0

Re: PAM Radius Authentication

2007-04-19 Thread daniel
backend) but it is a pain to continually have to add users to /etc/passwd. This can all be administered througha set of PHP scripts. Thanks, Daniel Davis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PAM Radius Authentication

2007-04-18 Thread daniel
run a script every night to add new users to the system, unfortunately I have a lot of users and they need to be available immediately. Thanks for all your help so far. -Daniel Davis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PAM Radius Authentication

2007-04-17 Thread daniel
Has anyone had any luck compiling pam_radius_auth on ubuntu? On Mon, 16 Apr 2007 15:13:49 +0200, Alan DeKok <[EMAIL PROTECTED]> wrote: > daniel wrote: >> I am trying to set up unix authentication using radius. >> Does the pam module support the maximum session times. >

Re: PAM Radius Authentication

2007-04-16 Thread daniel
, Daniel Davis On Mon, 16 Apr 2007 11:15:59 +0200, Alan DeKok <[EMAIL PROTECTED]> wrote: > daniel wrote: >> Apr 15 22:03:51 bill sshd[7861]: PAM unable to >> dlopen(/lib/security/pam_radius_auth.so) >> Apr 15 22:03:51 bill sshd[7861]: PAM [dlerror: >> /lib/security/pam

  1   2   3   >