Re: Unknown AVPs

2008-09-18 Thread Jeffrey Sewell
Found it! Thanks. That's quite extensive, I'll have to spend some quality time with this new version. Well done! On Sep 17, 2008, at 10:47 PM, Alan DeKok wrote: Jeffrey Sewell wrote: That was the solution: 2.1.0. The dictionary was the culprit. I can't seem to find the 2.1 equivalent

Re: Unknown AVPs

2008-09-17 Thread Jeffrey Sewell
something obvious, but can't see it. On Sep 2, 2008, at 4:37 PM, Alan DeKok wrote: Jeffrey Sewell wrote: Hm... unknown attributes should be printed as Vendor-123-Attr-456. I'm going off the raw tcpdump view, maybe they get translated at a higher level. I'll re-check. Ah, OK. FreeRADIUS

Re: Unknown AVPs

2008-09-17 Thread Jeffrey Sewell
wrote: Jeffrey Sewell wrote: So, for example I have a dictionary entry that says this: ATTRIBUTE Acct-Session-Time 46 integer nonein single ? That's not a FreeRADIUS dictionary file. The none in single portion is... not what we use. And a wireshark dump that says

Re: Unknown AVPs

2008-09-02 Thread Jeffrey Sewell
On Aug 29, 2008, at 11:23 PM, Alan DeKok wrote: Jeffrey Sewell wrote: I've got a FreeRADIUS server that takes in Accounting data that is proxied to it from another server. In the Accounting packets I see AVPs that are tagged Unknown-Attribute. Hm... unknown attributes should be printed

Unknown AVPs

2008-08-29 Thread Jeffrey Sewell
I've got a FreeRADIUS server that takes in Accounting data that is proxied to it from another server. In the Accounting packets I see AVPs that are tagged Unknown-Attribute. I assume that's because either the originating server or the FreeRADIUS server is missing a dictionary file/entry to

Re: CalledStationID

2007-07-30 Thread Jeffrey Sewell
On 7/27/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: You could add CalledStationId field to the radgroupreply table and modify authorize_group_reply_query to check that that field is equal to %{Called-Station-Id}. Ivan Kalik Kalik Informatika ISP I like this idea a lot. I know that I can

Re: CalledStationID

2007-07-30 Thread Jeffrey Sewell
On 7/30/07, Jeffrey Sewell [EMAIL PROTECTED] wrote: On 7/27/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: You could add CalledStationId field to the radgroupreply table and modify authorize_group_reply_query to check that that field is equal to %{Called-Station-Id}. After posting my

Re: CalledStationID

2007-07-30 Thread Jeffrey Sewell
The best thing you can do right now is test current cvs HEAD and report any bugs to us! Hopefully we can get a 2.0 release (or at least another prerelease) out the door soon. Perfect! I can definitely do that. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

CalledStationID

2007-07-27 Thread Jeffrey Sewell
I'm trying to solve a design issue and wonder if anyone has done something similar with hotspots. I would like to send back different values in the VSAs when a user logs in from one calledStationID vs another. For example. User joe logs in from hotspot1. the calledStationID is sent. FreeRADIUS

Re: CalledStationID

2007-07-27 Thread Jeffrey Sewell
, ... DEFAULT Called-Station-Id == hotspot100 reply 1, reply 2, ... Ivan Kalik Kalik Informatika ISP Dana 27/7/2007, Jeffrey Sewell [EMAIL PROTECTED] piše: I'm trying to solve a design issue and wonder if anyone has done

Re: When EAP-AKA can be supported by FreeRADIUS?

2007-02-02 Thread Jeffrey Sewell
(2). How does FreeRADIUS support WiMAX? No idea. What does the server have to do in order to support WiMAX? Please be specific. :) So far (since WiMAX isn't fully defined yet) all it has to do is support EAP-TLS and EAP-TTLS. EAP-AKA is on the list for WiMAX and will probably be a

Re: Change of Authorization

2007-01-27 Thread Jeffrey Sewell
(read there bloated and clunky for creative), but it seems to me that it makes more sense to happen at the AAA/RADIUS side of things. Thanks again, Jeffrey On 1/27/07, Peter Nixon [EMAIL PROTECTED] wrote: On Sat 27 Jan 2007 02:08, Jeffrey Sewell wrote: Apologies if this has been addressed before

Change of Authorization

2007-01-26 Thread Jeffrey Sewell
Apologies if this has been addressed before, but I can't find any references in the Wiki or the archives for the use of rfc 3576 Change of Authorization messages. Does FreeRADIUS have any built in way to trigger and/or send a CoA? How have others dealt with users who have exceeded certain limits

Re: CA Chain

2007-01-25 Thread Jeffrey Sewell
Thank you for your reply. We are (with the exception of some prototype tests) going to be completely EAP-TLS. Your answer brings me back to my original issue--the CA_path does not exist in the eap.conf file. If I add it, it doesn't seem to work (on 1.1.4). Just adding additional certs to the

Re: CA Chain

2007-01-22 Thread Jeffrey Sewell
advice in mind. JS On 1/22/07, Reimer Karlsen-Masur, DFN-CERT [EMAIL PROTECTED] wrote: Jeffrey Sewell wrote: In the eap.conf, tls section, the comments say to use the 'CA_path' variable in the radiusd.conf file to indicate where the trusted CA chain will reside. However, this variable isn't

CA Chain

2007-01-21 Thread Jeffrey Sewell
In the eap.conf, tls section, the comments say to use the 'CA_path' variable in the radiusd.conf file to indicate where the trusted CA chain will reside. However, this variable isn't in the tls section of the radiusd.conf file (it is in the LDAP section, but I'm pretty sure that won't help me) or

CA Dir

2007-01-19 Thread Jeffrey Sewell
In the eap.conf, tls section, the comments say to use the 'CA_path' variable in the radiusd.conf file to indicate where the trusted CA chain will reside. However, this variable isn't in the tls section of the radiusd.conf (it is in the LDAP section, but I'm pretty sure that won't help me) file or

Re: 1.1.4 and rlm_sql_mysql.so

2007-01-10 Thread Jeffrey Sewell
The issue wasn't how are libraries compiled it was from what is this specific library supposed to be compiled. I already knew from the output of ./configure that the mysql libraries weren't found, but since I already had MySQL installed and working I wondered where freeradius was expecting those

1.1.4 and rlm_sql_mysql.so

2007-01-09 Thread Jeffrey Sewell
I'm installing freeRADIUS on a CentOS 4.0 system. When I used the RPM on a different box it worked fine, but the RPM is out of date and I want this new box to be more up-to-date than RPMs will allow. 1.1.4 compiles fine and works w/o MySQL (5.0). However, when I run it with the SQL lines in