Re: Own exec module with bash: permission denied

2011-03-20 Thread Marten Pape
Paul Thornton schrieb: > On 20/03/2011 17:27, Marten Pape wrote: >> Alan DeKok schrieb: >>> >>>The script is owned by "root", and the server is running as user >>> "radiusd". >>> >>>Alan DeKok. >>> - >

Re: Own exec module with bash: permission denied

2011-03-20 Thread Marten Pape
Alan DeKok schrieb: > > The script is owned by "root", and the server is running as user > "radiusd". > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > This is correct, but the script has access rights for everyone (777 = rwx;rwx;rwx). I

Own exec module with bash: permission denied

2011-03-20 Thread Marten Pape
Hello, in my post-auth section I use a self-created exec-module, that is supposed to execute a shell script. This shell script exists and its modifiers are 777. But every time, it should be executed, something like this appears on debug output: # Executing section post-auth from file /etc/freeradi

Re: Call IPPool / SQLIPPool manually

2011-01-01 Thread Marten Pape
Alan DeKok schrieb: > Marten Pape wrote: > >> Ji Bryan, hi all, >> Does anyone know such a dhcp server (couldn't figure out such a feature >> in ISC dhcp server) or a script that transfers this? So I wouldn't have >> to script this on my own. >>

Re: Call IPPool / SQLIPPool manually

2011-01-01 Thread Marten Pape
Alan DeKok schrieb: > Marten Pape wrote: > >> Ji Bryan, hi all, >> Does anyone know such a dhcp server (couldn't figure out such a feature >> in ISC dhcp server) or a script that transfers this? So I wouldn't have >> to script this on my own. >>

Re: Call IPPool / SQLIPPool manually

2010-12-29 Thread Marten Pape
lize this, but I thought I would mention it > anyhow, the accounting start packet contains the ip and mac in it. Some dhcp > servers are smart enough to receive them. > > On Dec 25, 2010, at 13:31, Marten Pape wrote: > > >> Hello, >> I want to use FreeRadius for a set

Call IPPool / SQLIPPool manually

2010-12-25 Thread Marten Pape
configure. Is it possible to execute them manually? I'd like to retrieve the ip as a parameter that can be passed to this external program. The other way round I'd like to tell the module, which IP can be released. Is that possible and how? Thank you and merry christmas! Marten Pape -

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-13 Thread Marten Pape
Hi Esteban, this can be done via EAP-PEAP or EAP-TTLS, but not directly via TLS. Regards, Marten Pape Esteban TALAVERA schrieb: > Hi > > I´ll like to know if there is a way to configurates a Radius server + > Mysql to authenticate Wireless clients via a Cisco AP without > certif

Re: VLAN Assignment of Wifi-Clients

2010-08-31 Thread Marten Pape
Alan DeKok schrieb: > Marten Pape wrote: > >> Now my goal is to tell the NAS to assign every wifi-packet to a certain >> VLAN. I don't need to have a dynamic assignment of VLAN based on >> usernames or something else. One VLAN would be sufficient. >> &

Re: VLAN Assignment of Wifi-Clients

2010-08-31 Thread Marten Pape
Alan DeKok schrieb: > Marten Pape wrote: > >> Now my goal is to tell the NAS to assign every wifi-packet to a certain >> VLAN. I don't need to have a dynamic assignment of VLAN based on >> usernames or something else. One VLAN would be sufficient. >> &

VLAN Assignment of Wifi-Clients

2010-08-30 Thread Marten Pape
Hello! I got to work my freeradius configuration for the following environment: *Freeradius client is a wifi access point, wifi-clients can connect via wpa2-enterprise / eap-peap *i'm still using test certificates *The data-Backend is a mysql-storage with a different table structure that default. T

Re: DCHP-Server only for WLAN-Clients?

2010-08-15 Thread Marten Pape
Marten Pape schrieb: > Alan DeKok schrieb: >> Marten Pape wrote: >> >>> Now the wish with freeradius is: >>> Access points can be used in the same subnet as the other lan-clients, >>> but the clients that come in via WLAN should get an ip-address from

Re: DCHP-Server only for WLAN-Clients?

2010-08-08 Thread Marten Pape
Alan DeKok schrieb: > Marten Pape wrote: > >> Now the wish with freeradius is: >> Access points can be used in the same subnet as the other lan-clients, >> but the clients that come in via WLAN should get an ip-address from >> "address-pool 2" (that is d

DCHP-Server only for WLAN-Clients?

2010-08-08 Thread Marten Pape
f the dhcp-server answers for the whole subnet, regardless how the new client joined the network. If the answer is "no": is there any other possibility to get the functionality I would like to have? Thank you in advance! Marten Pape - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html