Re: Goodbye SNMP, hello statistics.

2008-06-24 Thread Kevin Bonner
that weren't available in SNMP. For more information, see: > > share/dictionary.freeradius The changes sound great! I'd cutover to this if I were still at the company that used FR and SNMP monitoring stuff... Kevin Bonner signature.asc Description: This is a digi

Re: Could not link driver rlm_sql_mysql.so

2008-02-15 Thread Kevin Bonner
On Friday 15 February 2008 05:20:21 [EMAIL PROTECTED] wrote: > if you run the configure stage through some sanity checking, you get to > see all the good stuffeg > > ./configure --with-blah-blah | grep WARN > > alan I prefer the following so you can go over all the output, not just the WARN

Re: pap "Cleartext-Password", sql etc...

2008-01-30 Thread Kevin Bonner
utput? Is the operator correct? Does it do the same thing when you move the SQL entry to the users file and make the same attribute name changes? Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: IP Pool defined, but radius does not hand out an IP address.

2008-01-24 Thread Kevin Bonner
On Thursday 24 January 2008 13:10:09 Alan DeKok wrote: > And with all of the information you posted, you didn't include the > most important, which is requested in the FAQ, README, INSTALL, "man" > page, and daily on this list: radiusd -X. > > Is there some other place in the documentation wher

Re: Blank spaces after username - problem with accounting -MySqldatabase.

2008-01-22 Thread Kevin Bonner
On Tuesday 22 January 2008 13:20:27 Marinko Tarlac wrote: > Alan DeKok wrote: > > a) the user has typed the user name with spaces > > Yes. User has typed user name with space but why radius didn't ignore them? FreeRADIUS doesn't mangle usernames by default. > I repeat, user names and all other

Re: FreeRadius V2.0.0 Simultaneous-Use Problems

2008-01-21 Thread Kevin Bonner
hema, that SQL query should be changed to 'acctstoptime IS NULL'. Try this from your SQL command line and see if it gives the desired results for both connected and disconnected users. Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SNMP error

2008-01-10 Thread Kevin Bonner
2c -c testsnmp -m > /etc/raddb/RADIUS-AUTH-SERVER-MIB.txt localhost radius " > same command is working fine on the old machine. > > i searched for that on google but found nothing . > > any one can help ?? What does debug mode (-X) show? Are there any errors in your snmp

Re: Restricting user by realm

2007-11-08 Thread Kevin Bonner
with the := operator. lisa Cleartext-Password := "xxx", Realm == "jellico.com" ... Or if you want to reject from a specific realm, just use this before your real user entry: lisa Realm == "realmY", Auth-Type := Reject Kevin Bonner signature.asc Descriptio

Re: Cisco NAS Password problem

2007-10-25 Thread Kevin Bonner
as the secret configured in your nas SQL table. Freeradius only reads the nas table on startup, so if you make changes to that table, you must restart the daemon for those changes to take effect. Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: aaa accounting command

2007-10-23 Thread Kevin Bonner
.org/msg34103.html > Does anyone have an alternative to accomplish this if it's not possible > with Radius. TACACS+ Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Acct-Status-Type attribute

2007-10-03 Thread Kevin Bonner
ing, that is probably where the Access-Request packets are coming from. Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Sending Cisco AV Pairs per realm

2007-09-17 Thread Kevin Bonner
IUS reply. That's because you cannot list reply attributes in the hints file, but you can add a Hint that can be checked in the users file. Here is a short example that should work for you using the hints file: #hints DEFAULT User-Name =~ "@dsl.realm" Hint = "DSL"

Re: How do I Instruct Freeradius to connect to postgreSQL Database on a port other than 5432?

2007-09-12 Thread Kevin Bonner
radiusd -X > ... > Module: Loaded SQL > sql: driver = "rlm_sql_postgresql" > sql: server = "localhost" > sql: port = "" > sql: login = "postgres" The debug output shows what variable to use. I've snipped the output to make it a li

Re: error on start freeradius + jradius

2007-08-09 Thread Kevin Bonner
ost the actual 1.1.7 build output with errors? I have no idea what the jradius patch is, but does the build work without that patch? Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: authentication problem with mysql integration

2007-08-07 Thread Kevin Bonner
On Tuesday 07 August 2007 12:08:07 ram wrote: > rad_verify: Received Access-Reject packet from client x.x.x.x port 1812 > with invalid signature (err=2)! (Shared secret is incorrect.) ... > WARNING: Unprintable characters in the password. ? Double-check the > shared secret on the server and the

Re: NAS restart without proper client logout on radius (mysql)

2007-07-16 Thread Kevin Bonner
nected. You can also use checkrad to confirm the session is active. Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: figuration doubt

2007-07-16 Thread Kevin Bonner
rnet from my HotSpot users? Session-Timeout is a reply item, so it can go into the user or group reply item tables. Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuration doubt

2007-07-16 Thread Kevin Bonner
On Monday 16 July 2007 08:05:15 Alan DeKok wrote: > Osvaldohp wrote: > > This is my users file: > > mike Auth-Type = System, User-Password == mike" > > Session-Timeout := 3600, > > > > What i am doing wrong? > > You're telling the server to look in /etc/passwd for the users > password,

Re: error on start freeradius + jradius

2007-07-13 Thread Kevin Bonner
ouble free or corruption > (fasttop): 0x800fae98 *** What part of Alan's message was unclear? 1.1.5 has a bug that has been beaten to death on the users list. 1.1.6 doesn't. Use 1.1.6 or later, then try your tests again. Kevin Bonner signature.asc Description: This is a digitally signed message part. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: "Clear text password not available"

2007-06-25 Thread Kevin Bonner
Framed-Compression = Van-Jacobsen-TCP-IP Since you're using such an old version of freeradius, you cannot use Cleartext-Password here as it was available in 1.1.5 (I think) and later versions. You can use User-Password, but you should upgrade to a newer version. Kevin Bonner pgpwSTaV

Re: "Clear text password not available"

2007-06-25 Thread Kevin Bonner
are probably error messages in the output which may assist you in resolving your problem. Kevin Bonner pgpuOvqj7Bku9.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Simultaneous-Use problem.

2007-06-25 Thread Kevin Bonner
ks fine, but the 'session' section never gets > processed. Why? > > josh. Because Simultaneous-Use is in the wrong place. Make it a check item and the session section should be processed. Kevin Bonner pgpvI8CdFN5pf.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Attribute "User-Password" is required for authentication

2007-06-18 Thread Kevin Bonner
On Monday 18 June 2007 16:31:37 Cody Jarrett wrote: > I found a few topics on this issue but nothing quite informative enough. > I'm trying to get freeradius auth working with pam and peap. When I test > my config with radtest, I get Access-accept. When I use a windows XP > supplicant with a 3com a

Re: sql question

2007-06-08 Thread Kevin Bonner
On Friday 08 June 2007 13:24:20 [EMAIL PROTECTED] wrote: > radgroupreply: > >| 27 | dialup| Framed-IP-Address | 255.255.255.254 | == | > >| 28 | dialup| Framed-Compression | Van-Jacobson-TCP-IP | == | > >| 29 | dialup| Framed-IP-Netmask | 255.255.255.255 | == | > >| 30 | dialu

Re: Wiki

2007-05-25 Thread Kevin Bonner
On Friday 25 May 2007 04:11:24 Arran Cudbard-Bell wrote: > Now which bloody wiki are you using, so I can look up the formatting > rules :) http://wiki.freeradius.org/Special:Version says MediaWiki: 1.8.2. -Kevin pgpd5qhwcXFFw.pgp Description: PGP signature - List info/subscribe/unsubscribe? Se

Re: Server IP changed and "FreeRADIUS+MySQL" does not work

2007-05-15 Thread Kevin Bonner
les, you must either restart the MySQL service or run "FLUSH PRIVILEGES". Kevin Bonner pgpVPKsiK9TTw.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Proxying by Nas-Ip-Address (was Proxy.conf regex )

2007-05-07 Thread Kevin Bonner
.com" > > And to huntgroups file > test NAS-IP-Address == 255.255.255.255 > > Without success. All logins are tested locally. > > Any clue? > Thank you Read what several others have posted to this thread. Proxy-To-Realm is a _check_ item. Make Proxy-To-Realm a

Re: Crypt passwords doesn't work

2007-04-19 Thread Kevin Bonner
password is not encrypted. > > Even if you know what the encryption they use is it would be a big help > thanks. Win2k3? Never used it before. Active Directory? Ditto. =-) Maybe [1] or [2] will help push you in the right direction. Kevin Bonner [1] http:

Re: Crypt passwords doesn't work

2007-04-18 Thread Kevin Bonner
> I almost ignored your message, as I don't parse HTML well. =) On Wednesday 18 April 2007 18:06:28 Sebastian Firpo wrote: > Thank you Kevin, but it didn't work now my entire users file is: > > sebas   Crypt-Password := "(!lGOOlHaBWoQ" >     Service-Type = Administrative-U

Re: Crypt passwords doesn't work

2007-04-18 Thread Kevin Bonner
iled to validate the user. > Delaying request 0 for 1 seconds > > users file > > sebas Auth-Type := Local, Crypt-Password == "(!lGOOlHaBWoQ" > Service-Type = Administrative-User, > Cisco-AVPair = "shell:priv-lvl=15" > > Thanks very

Re: Segmentation fault for SNMP query

2007-04-17 Thread Kevin Bonner
On Monday 16 April 2007 07:52:43 Alan DeKok wrote: > Kevin Bonner wrote: > > Try http://bugs.freeradius.org/show_bug.cgi?id=150 > > > > I doubt that patch will still apply cleanly due to the many recent > > changes. I'll see if I can test the CVS head later to

Re: SNMP with 1.1.6 and Net-SNMP 5.3

2007-04-16 Thread Kevin Bonner
On Monday 16 April 2007 03:53:52 Stefan Winter wrote: > Thanks for the tip. Looking up the net-snmp.spec file of openSUSE 10.2, it > appears that ucd-snmp compat should be there... the compile > switches --enable-local-smux and --enable-ucd-snmp-compatibility are there. > > Any other hints? Otherwi

Re: SNMP with 1.1.6 and Net-SNMP 5.3

2007-04-13 Thread Kevin Bonner
fan Winter I receive the same broken pipe error when the smuxpeer pass and smux_password aren't the same, though there is probably a more complex cause. Are there any non-standard characters in either config file? Is Net-SNMP configured with ucd-snmp compatibility? Kevin Bonner pgpu99VoRvAtE.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Segmentation fault for SNMP query

2007-04-12 Thread Kevin Bonner
On Thursday 12 April 2007 10:32:18 Kevin Bonner wrote: > On Thursday 12 April 2007 04:40:47 Milan Holub wrote: > > Radius itself seems to react on radius packets; only snmp is ignored > > after the snmp-write query. Completely same behaviour is observed when > > doing reload

Re: Segmentation fault for SNMP query

2007-04-12 Thread Kevin Bonner
. Try http://bugs.freeradius.org/show_bug.cgi?id=150 I doubt that patch will still apply cleanly due to the many recent changes. I'll see if I can test the CVS head later today and submit a newer patch. Kevin Bonner pgpktEd5UzlPw.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Version 2.0 is a lot closer to reality...

2007-04-10 Thread Kevin Bonner
mall extension to listen sections > to allow type snmp . Arran, http://wiki.freeradius.org/SNMP_HOWTO That page should give some base info on setting up SNMP support. Kevin Bonner pgp4G1jfBRBqQ.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reject user without realm

2007-04-09 Thread Kevin Bonner
alm if it is defined. Since the hints file matched at line 36 here, I assume you actually configured provider1.com instead of domain1.com in your hints file. Is this assumption correct? If not, what is in your hints file at line 36? Kevin Bonner pgpAUsH7FbwDX.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Cisco Configuration

2007-04-04 Thread Kevin Bonner
at should have some cisco-related info is the mailing list archives. Kevin Bonner [1] http://wiki.freeradius.org/Cisco pgpE4JK3pnVC6.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius Checkrad Redback

2007-04-03 Thread Kevin Bonner
. > > Thinks! I agree that verifying a session via telnet is not a scaleable solution. Lucent probably has SNMP MIBS for the Redback, which should have a way to confirm active sessions. Kevin Bonner pgpMuUVY0TsK7.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: chap rlm_sql authentication problem

2007-03-30 Thread Kevin Bonner
e-User == > -- If this is correct, your request will not match unless you send this particular Service-Type. Looking at the request above, I don't see this attribute being sent in the access-request. Kevin Bonner pgpFB6Yq6

Re: SNMP support for radius problem

2007-03-29 Thread Kevin Bonner
On Thursday 29 March 2007 12:47:38 satish patel wrote: > Thanks for help > > i got it and now my freeradius working with snmpd and it is working fine > now can u tell me what i monitor through snmpd means can i check how much > users login currently and how much failed and what stat i can check thr

Re: SNMP support for radius problem

2007-03-28 Thread Kevin Bonner
re the public community has permission to view that OID tree. I did test my local SNMP config and receive the same results when I restrict the public community from accessing that OID. Kevin Bonner pgpgF2PbALtDG.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: use realms to access different mysql tables

2007-03-27 Thread Kevin Bonner
xample of this is below. In each sql definition you can define the different queries necessary to handle a particular realm. realm3 shows how to allow multiple realms to use the same db/SQL queries, so you can easily merge the databases over time and update the users file to reflect the db

Re: Accounting is not working. Please help.

2007-03-26 Thread Kevin Bonner
On Monday 26 March 2007 18:18:55 alex wrote: > > > without problem. But the accounting is not working, the mysql tables ... > > Did you run in debug mode (-X)? If so, did the output show anything > > strange when processing an accounting packet? ... > rad_recv: Access-Request packet from host 19

Re: Accounting is not working. Please help.

2007-03-26 Thread Kevin Bonner
On Monday 26 March 2007 16:30:35 alex wrote: > Hey guys, i just follow this guide. > http://www.frontios.com/freeradius.html > and everything looks ok, the users are already working and login without > problem. But the accounting is not working, the mysql tables are empty, i > checked when i user a

Re: disconnect users from radius

2007-02-28 Thread Kevin Bonner
, you should refer to the vendor documentation for your device. Kevin Bonner [1] http://wiki.freeradius.org/Disconnect_Messages pgpR7RBkMIfgo.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius says client is unknown.

2007-02-27 Thread Kevin Bonner
nks for any help, > Onur. Sounds like a permissions issue to me. Check the user/group that is configured in radiusd.conf, then verify that the user can read the certificates and config files. Kevin Bonner pgphLZ52A7c3r.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: check active threads

2007-02-20 Thread Kevin Bonner
On Tuesday 20 February 2007 03:10, Tomas Hoger wrote: > > Freshly added to the Wiki FAQ as this has been covered countless times on > > the users list. > > Kevin, it may be better to add a bit more info to wiki, since combining > SysV and BSD flags of ps is usually not permitted and -H flag is not

Re: attr_rewrite

2007-02-19 Thread Kevin Bonner
me, as needed. A hints file example that should do what you want: DEFAULT User-Name =~ "[EMAIL PROTECTED]" User-Name := "somedomain.com" Then just define somedomain.com in your users file (or DB) and process it like a normal request. Kevin Bonner pgpE4ALVzj8VL.pgp

Re: check active threads

2007-02-19 Thread Kevin Bonner
g/FAQ#I_see_only_one_radiusd_in_the_process_list.__What_is_wrong.3F Freshly added to the Wiki FAQ as this has been covered countless times on the users list. Kevin Bonner pgpGUxgtGLaKb.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Setting a realm in the User-Name based on Client-IP-Address

2007-01-24 Thread Kevin Bonner
riginal request. == hints == DEFAULT User-Name !~ "@", Client-IP-Address == A.B.C.D User-Name := "[EMAIL PROTECTED]" == hints == Kevin Bonner pgpt7dICXx56J.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS will no longer start!

2007-01-24 Thread Kevin Bonner
nastype = other } == clients.conf == [EMAIL PROTECTED] raddb.dial]# /usr/sbin/radiusd -X ... read_config_files: reading clients /etc/raddb/radiusd.conf[327]: Missing client name To fix the issue, find the broken client entry and either comment it out or restore it with the correct c

Re: Best practices for redundant servers

2007-01-19 Thread Kevin Bonner
On Friday 19 January 2007 14:02, Peter Nixon wrote: > On Fri 19 Jan 2007 18:56, Graham Beneke wrote: > > Would it be possible for someone to dump all the man pages into the wiki? > > Please feel free to do it.. It is a wiki after all :-) Agreed. I've added a few things here and there, but that's

Re: freeradius-1.1.3 + snmp...

2007-01-12 Thread Kevin Bonner
test this, but it should not be preventing you from getting FreeRADIUS+SNMP working. Kevin Bonner pgpu0kOhbwSoi.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius-1.1.3 + snmp...

2007-01-12 Thread Kevin Bonner
happening ? When i configured the radiusd.conf without snmp > everything works perfect. Does freeradius exit without error or do you press Ctrl-C to kill it? Kevin Bonner pgp7UST2LqcE9.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MySql and calling-station-id help please

2007-01-12 Thread Kevin Bonner
Group1 | Calling-Station-Id | := | 123456 > Group2 | Calling-Station-Id | := | 345677 The operator is incorrect. := sets the attribute to that value. See the Operators page in the wiki or "man 5 users" for more info on operator behavior. Kevin Bonner pgpXt3Nxpciy7.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 0.9.3 > 1.1.0 sql errors

2007-01-06 Thread Kevin Bonner
On Friday 05 January 2007 18:36, Long wrote: > why doesn't 0.9.3 yield errors when the operator is wrong? > > - Andrew Software should get better over time. 0.9.3 was released over 3 years ago, so there have been many improvements to the code since then. -Kevin pgpXEfnwfLl7m.pgp Description:

Re: 0.9.3 > 1.1.0 sql errors

2007-01-05 Thread Kevin Bonner
On Friday 05 January 2007 16:40, Andrew Long wrote: > >> Invalid operator for item Suffix: reverting to '==' > >> Invalid operator for item Suffix: reverting to '==' > >> Invalid operator for item Suffix: reverting to '==' > (HINTS) > DEFAULT Suffix = ".ppp", Strip-User-Name = Yes > DEFAULT Suffix

Re: 0.9.3 > 1.1.0 sql errors

2007-01-05 Thread Kevin Bonner
On Friday 05 January 2007 12:01, Andrew Long wrote: > > Use "+=" for the operators. See doc/rlm_sql for reasons why. > > Still, after updating instances of '=' to '+=', we get: > > Processing the authorize section of radiusd.conf > modcall: entering group authorize for request 0 > Invalid oper

Re: 0.9.3 > 1.1.0 sql errors

2007-01-04 Thread Kevin Bonner
with the same integer value in the 1.1.0 dictionaries and use that newer name. If the Administrative Service-Type is not found, then it was silently ignored in 0.9.3 and finally reports an error in 1.1.0. Switching it from Administrative to Administrative-User should be all you need to do

Re: 0.9.3 > 1.1.0 sql errors

2007-01-04 Thread Kevin Bonner
tive Service-Type. Replacing it in your tables should work. Do you plan to use the latest version of FreeRADIUS (1.1.3) after resolving these issues? Kevin Bonner pgpgIPCYDfoYx.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: NAS support for disconnect methods

2006-12-28 Thread Kevin Bonner
the session would still be disconnected. We also have Cisco NAS devices, but you've already discovered what is needed for PoD support. Kevin Bonner pgpvpOTjkCrRE.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Repost: Properly using the := and = operators?

2006-12-27 Thread Kevin Bonner
y/all Framed-IP-Address attributes in the reply with the one listed above. Kevin Bonner pgpZEmTlPCNN1.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: problem with mysql accounting

2006-12-21 Thread Kevin Bonner
1064 received When you run in debug mode, do you see the full query when the config options are printed? If not, there might be an escaping problem in your sql.conf file. > freeradius 1.1 What freeradius version is that? 1.1.3 is the latest release. Kevin Bonner pgppSBvWYbfco.pgp Descr

Re: Chap support

2006-12-15 Thread Kevin Bonner
On Friday 15 December 2006 09:23, Sinan Ulker wrote: > how can I add chap support to the free radius? See my response from yesterday in the thread "Chap authentication". Kevin Bonner pgplu7BK8HXnl.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.f

Re: Chap authentication

2006-12-14 Thread Kevin Bonner
cretpass"' ) | radclient your.radius.server:1812 auth your_secret Kevin Bonner [1] http://deployingradius.com/documents/protocols/compatibility.html pgp0Gybsec5BK.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Unable to authenticate freeradius using PostgreSQL

2006-11-29 Thread Kevin Bonner
On Wednesday 29 November 2006 10:36, Ross McOwat wrote: > All sorted! > > I copied a fresh-install postgresql.conf file from another server, and > bingo, all is working fine. Must have made a mistake while editing this > file - note to self, make copies of the file BEFORE editing it! > > Thanks fo

Re: Unable to authenticate freeradius using PostgreSQL

2006-11-29 Thread Kevin Bonner
omething as simple as that. It doesn't matter how the table columns are arranged, as long as your query asks for them in the correct order. Kevin Bonner pgpQu8YGcSSMw.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Unable to authenticate freeradius using PostgreSQL

2006-11-28 Thread Kevin Bonner
cket id: 4 > modcall[authorize]: module "sql" returns fail for request 0 My guess is that you have an empty SQL query which is causing this to fail. Are any queries blank in your rlm_sql section of the debug output? Can you post the config dump in debug mode, or perhaps just the

Re: Unable to authenticate freeradius using PostgreSQL

2006-11-28 Thread Kevin Bonner
ag, right? If not, do so and you'll see why it's dying in the rlm_sql module. Kevin Bonner pgpV4GLF2ttyH.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rewriting usernames

2006-11-16 Thread Kevin Bonner
On Thursday 16 November 2006 04:56, Christopher Carver wrote: > Quoting Kevin Bonner <[EMAIL PROTECTED]>: > > Not a crazy question at all. We used a hints file entry like: ... > It seems as though the users file can only manipulate reply A/V pairs. Correct. The hints file

Re: rewriting usernames

2006-11-14 Thread Kevin Bonner
> Chris Carver Not a crazy question at all. We used a hints file entry like: DEFAULT Called-Station-Id =~ "^(012)?3456789$" User-Name := "[EMAIL PROTECTED]" After that, it's pretty easy. Just make sure the some-isp.com realm is in proxy.conf and it should ac

Re: limiting sessions

2006-11-09 Thread Kevin Bonner
#x27;ve mangled the table structure to suit local needs. > This is my current thought on this, but I'm not sure why it would > still authorize the request, unless it's not necessary that users be > part of group. It isn't necessary. The cleartext password needed

Re: limiting sessions

2006-11-09 Thread Kevin Bonner
hey matching attributes in the Access-Request packet you sent? Kevin Bonner pgp2Wjcu4U6Qm.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: static IP's with rlm_perl

2006-10-20 Thread Kevin Bonner
perl functions are processed, then it's possible the operator being used is allowing that attribute to be overwritten. Framed-IP-Address is not in the default FreeRADIUS config, so you've most likely added it somewhere and that is causing your problem. Kevin Bonner pgpydH6rbysTz.pg

Re: SNMP with Freeradius - Again

2006-10-20 Thread Kevin Bonner
(sql) > Segmentation fault > > In all cases the configurations was the same, except pointed above SNMP/SMUX support should not affect the rlm_sql module in any way. See doc/bugs for steps to debug the segfault issue and identify where the program is actually failing. Kevin Bonn

Re: Privelege Level with Different Manufacturers

2006-10-19 Thread Kevin Bonner
-Type = Shell-User, cisco-avpair = "shell:priv-lvl=15" user1Huntgroup-Name == "nortel", Auth-Type := System ... Nortel specific attributes ... -- end users -- Kevin Bonner pgp1ngFwwofv4.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SNMP with Freeradius - Again

2006-10-19 Thread Kevin Bonner
re your local SNMP daemon with the proper smuxpeer entry? Can you post your debug mode output? Kevin Bonner pgpVVr0PKPGLO.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SNMP with Freeradius

2006-10-17 Thread Kevin Bonner
On Tuesday 17 October 2006 06:12, Velikanov wrote: > /* #undef WITH_SNMP */ This means the snmp libraries weren't found. For RHEL 3.3, install the net-snmp-devel RPM and build FreeRADIUS again, or check your build output for errors. Kevin Bonner pgp0IwdD8LIQa.pgp Description: PGP s

Re: NAS Documentation

2006-10-16 Thread Kevin Bonner
I read the mailing list... please send there in the future. On Sunday 15 October 2006 03:04, affora deeb wrote: > do u know about IAS windows server 2003 configuration with NORTEL NAS Nope, don't have a clue. I try to avoid any windows that can't stand against a harsh external environment. May

Re: NAS Documentation

2006-10-13 Thread Kevin Bonner
ide (auth admins for console access, provide route/tunnel/ip pool configs, etc.)? Please provide a better description of what you are trying to do so that we can make helpful suggestions. Kevin Bonner pgpHtQCfXXOml.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://ww

Re: syslog - 1.1.2

2006-10-05 Thread Kevin Bonner
believe it was added to the 1.1.X branch, so the CVS head and nightly snapshots are the only way to use the syslog logging method. Wait for 2.0 or try one of the other suggestions in my previous email. Kevin Bonner pgpXoL9P4idqL.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: syslog - 1.1.2

2006-10-04 Thread Kevin Bonner
r program starts before freeradius. Other options would be to look at the cvs head changes that added the extra logging options and backport those to your local copy, or run a nightly snapshot. Kevin Bonner pgpTYTxnfV0Wo.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Conditionally adding reply pair

2006-09-19 Thread Kevin Bonner
huntgroup after these lines, you may want to add the following after all users file entries related to the NetSensory huntrgroup. DEFAULT Huntgroup-Name == "NetSensory", Auth-Type := Reject Kevin Bonner pgpmNIVww.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Write access to the wiki

2006-09-18 Thread Kevin Bonner
seem to find the register link that is referred to. There should be a "Log In" link in the top right corner of the page. At the login page, you can create a new account. Kevin Bonner pgpAJgnhX1YYJ.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: VSA in Local User Profile

2006-09-15 Thread Kevin Bonner
Your operators aren't correct. See http://wiki.freeradius.org/index.php/Operators Kevin Bonner pgpVHnCrY8jzW.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: VSA in Local User Profile

2006-09-15 Thread Kevin Bonner
restriction? $ grep Account-Info share/dictionary* share/dictionary.cisco:ATTRIBUTECisco-Account-Info250string In the default dictionary files, I see no Account-Info attribute. Did you add this to your local dictionary file? When you run freeradius in debug mode, do you see an e

Re: Attribute Operators

2006-09-15 Thread Kevin Bonner
On Friday 15 September 2006 03:04, Peter Nixon wrote: > Thanks. I was meaning to fix that this morning. It was midnight when I > copied that data in there and I couldn't be bothered at the time to figure > out how to cancel the wiki formating :-) I've added the link that I use for MediaWiki format

Re: Attribute Operators

2006-09-14 Thread Kevin Bonner
On Thursday 14 September 2006 17:47, Peter Nixon wrote: > On Thu 14 Sep 2006 19:09, Cliff Hayes wrote: > > Hello everyone, > > > > Does anyone know of a good reference site for the attribute operators > > (:=, ==, +=) that shows what each means? > > http://wiki.freeradius.org/index.php/Operators T

Re: Freeradius and SNMP

2006-08-31 Thread Kevin Bonner
On Wednesday 30 August 2006 11:09, Michael Schwartzkopff wrote: > Hi, > > thanks to that explanation. But my question was: Why I do get no answer if > I do > snmpwalk (...) localhost enterprises.3317 > > while walking mib-2.67 gives results? > > Michael. The ent.3317 OID is only used to establish

Re: Freeradius and SNMP

2006-08-29 Thread Kevin Bonner
DUCT-RADIUSD-MIB, and using that file you can obtain a full object name for the enterprises.3317.1.3.1 OID. It's only use right now is for the SMUX connection, but may also be needed if/when AgentX support is added. Kevin Bonner [1] http://www.iana.org/assignments/enterprise-numbers pg

Re: More documentation on Auth-Type

2006-08-07 Thread Kevin Bonner
On Friday 04 August 2006 17:21, Alan DeKok wrote: > Kevin Bonner <[EMAIL PROTECTED]> wrote: > > One thing I didn't see mentioned on the auth type page is the > > heavily used "Auth-Type := Local". Was that consciously omitted, or > > are you still add

Re: monitoring freeradius with snmp

2006-08-04 Thread Kevin Bonner
thServIdent.0 = STRING: FreeRADIUS Version 1.1.2, for host , built on Jul 6 2006 at 12:59:53 Kevin Bonner pgpzU6PQm5KJc.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: More documentation on Auth-Type

2006-08-04 Thread Kevin Bonner
is pretty handy as well. One thing I didn't see mentioned on the auth type page is the heavily used "Auth-Type := Local". Was that consciously omitted, or are you still adding content to that page? Kevin Bonner pgpEs9yaTuU58.pgp Description: PGP signature - List inf

Re: SNMP traps

2006-07-31 Thread Kevin Bonner
well as any relevant config lines and debug mode output. Kevin Bonner pgpsBpQN8WQua.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Username in MySQL with regexp

2006-07-11 Thread Kevin Bonner
L users file. Start simple, then try to get the more complex configuration working. If you already have the regexp line written for your users file, please post it so we can recommend the best way to accomplish the same checks and replies in MySQL. Kevin Bonner pgpa3lB8xHEv8.pgp Description:

Re: error: Failed dependencies: libeap-1.1.2.so is needed by freeradius-1.1.2-0.i386

2006-06-30 Thread Kevin Bonner
ing the system libtool and GNU ld configure options, so those options were removed. Kevin Bonner pgpdRNRLhzZub.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Bug with multiple IPs?

2006-06-15 Thread Kevin Bonner
ntry in radiusd.conf. I currently have one radius server setup with the second option, as the version it's running didn't have the udpfromto portion enabled (yeah yeah... time to rebuild). Kevin Bonner pgpiMqgnKxBII.pgp Description: PGP signature - List info/subscribe/unsubscribe?

Re: error: Failed dependencies: libeap-1.1.2.so is needed by freeradius-1.1.2-0.i386

2006-06-13 Thread Kevin Bonner
find any, post the output so that we can see what is happening. Kevin Bonner pgpWbY50IrbHJ.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Logging

2006-06-12 Thread Kevin Bonner
) will print out the config options and their values. Kevin Bonner pgpg8YNqoAfXm.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

  1   2   >