Problem with EAP-TLS.

Hi, i'm implementing authentication for 802.1X using Freeradius (version 2.1.6 ) in Fedora10. The supplicant is windows XP wiht Service pack 3. The NAS is Switch cisco and the network is wire. My problem is what the connection works good when the autentication is for user and password, but if

Application to change password

know such an application? or I have to do it myself. Thanks a lot for tour time, MIGUEL. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: white list for nas-ipaddress

= Yes and same result :-( Im stuck here, any help will be greatly appreciated --- Miguel On Tue, Jul 28, 2009 at 2:27 PM, Ivan Kalik t...@kalik.net wrote: Hi, i want to accept all request coming from a specific nas-ip-assdress , i used to configure like this (in users file): DEFAULT

white list for nas-ipaddress

? regards Miguel Miranda - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: white list for nas-ipaddress

authorization On Tue, Jul 28, 2009 at 8:53 PM, Miguel Mirandamiguel.miran...@gmail.com wrote: Hi, i want to accept all request coming from a specific nas-ip-assdress , i used to configure like this (in users file): DEFAULT NAS-IP-Address == 192.168.150.25, Auth-Type := Accept Fall

Re: white list for nas-ipaddress

d.gianna...@gmail.com wrote: Hi Miranda I use the same users file and authorization configuration (with sql) and it is work fine. On Tue, Jul 28, 2009 at 9:28 PM, Miguel Mirandamiguel.miran...@gmail.com wrote: Well, that is not the only one nas i have , the sql module is requiered

Re: SAML support for freeRadius

Hi Stefan and everybody I´m trying to get an architecture of federation-id in which are involved, layer 2 communications, RADIUS (like FreeRadius) and IdP server, but I have some doubts about it. Searching for information I read this thread, and I decided claim for help.I´m really interested

Help needed with freeradius, solaris and trapeze

Hello all, I'm new with Freeradius... I've a machine with solaris 10 installed and with freeradius installed too but I'm taking a lot of problems to use it with my Trapeze infrastructure. Can anyone help? I'm starting with WPA2 - TKIP and I would Like to configure FreeRadius to Authenticate some

accounting Interim-Update's on freeradius

Hello all, I'm a bit confuse here. 1) is it possible for a freeradius setup, runnging on a NAS system, via some authentication module, determine the traffic produced by a

Access-Accept ONLY on every second try

Greetings Listers, On testing a development FreeRadius Server we found out that everything is working, except that the Access-Accept comes only on every second attempt (!) As we can safely discard all network and database problems, I wonder if there is a flag that is being set on the first attempt

RE: Access-Accept ONLY on every second try

Thanks for your reply Alan, I believe I found the problem and I will describe it here as it might help others Looks like for some reason the only access-request that was issued, was being resent endlessly: The block below would be repeated 192 times (I don't know why) each time adding one more

Re: FreeRadius + MySQL Encrypted passwords

or SHA1 for encrypted passwords, but that they are working on it, so perhaps in future versions this will be possible. Thanks, Miguel Angel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius + MySQL Encrypted passwords

Hi, I would like to find out how to configure freeradius so I don't have to save clear text passwords in the users file. I've been following the mail list but I've seen so many ways of configuring crypted passwords, md5, that right now I've got a mess in my head. If someone can help me, to

Re: callingstationid filter and regexp

Bjørn Mork wrote: Miguel [EMAIL PROTECTED] writes: Hi, im trying to configure a check that 1315 username will be allowed to connect only from a particular list of callinstationids, so i added a Calling-Station-Id attribute to the radcheck table, this are my filter's details username: 1315

Re: callingstationid filter and regexp

Bjørn Mork wrote: Miguel [EMAIL PROTECTED] writes: Bjørn Mork wrote: You could either modify your regexp to allow any number ending in the 8 wanted digits, How do i do that?, remberber that the fist group its a pbx, 100 callinstationids, i think i need some regexp example

callingstationid filter and regexp

Hi, im trying to configure a check that 1315 username will be allowed to connect only from a particular list of callinstationids, so i added a Calling-Station-Id attribute to the radcheck table, this are my filter's details username: 1315 list of callingstationids: - from 22662100 to

sql_log question

it into a log file. # sql_log } cant i have both sql account feature and sql_log at the same time? --- Miguel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

what happened to cvsweb

it not working any more, its even an iis server !! --- miguel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

connection pool

Hi, i have configured a connection pool of 200, i think its too much for my application, doing a netstat -an | grep ESTABLISHED it showe mee 200, how can i be sure how many slot of that pool are really used? thanks - List info/subscribe/unsubscribe? See

Question about dialup-admin

I've downloaded dialup-admin. I've changed few values from the admin.conf file, such as mysql username and password, and path to the different directories. I also created the badusers table in the radius in the mysql. I opened a web browser and I can see the accounting is working ok, but I can´t

Postgres and unix sockets

Hi, how can i configure freeradius to use unix sockets instead of tcp when using postgres for backend? thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeBSD anyone?

Dusty Doris wrote: Hi, im running freeradius 1.0.5 + postgres 8.0.3 on a dual xeon, gentoo 2005.1, all is working ok, but i have another server with the same hardware specs that i recently upgraded from gentoo to freebsd 5.3, the server was running apache + postgres and, wow , great

Re: Cisco and No NAS-Port seen (checkrad)

Dusty Doris wrote: radius-server attribute nas-port format X with X being dependant on the type of connections I don't know if this will force it, but perhaps the default type is something that doesn't apply to your type of connection. For PPPoA we use format d, which gives you the

Cisco and No NAS-Port seen (checkrad)

Hi, im having problems implementing simultaneous-use on a cisco AS5400, is the same problem addresses in this thread http://lists.cistron.nl/pipermail/freeradius-users/2005-March/041894.html Ok, i know what the problem is, but how can i instruct the cisco that it must send the NAS-Port

Re: Cisco and No NAS-Port seen (checkrad)

Jonathan De Graeve wrote: Depends on the nas. Which nas? Cisco AS5400 --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: accounting scripts ?

Frank Bonnet wrote: Hello I'm searching for scripts that are able to parse the radacct/xxx.xxx.xxx.xxx/detail-xxx file to perform some simple statistics ? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html what do you mean with parsing?, i got

rlm_exec for diferent users

Hi, how can i run diferent scripts depending on the usergroup of the username? According to the documentation: in radiusd.conf i can define diferent rlm_exec scripts: modules { exec tariff { program = /path/to/program/tariff wait = yes input_pairs = request

Re: Online Status SQL

Hi, I use FreeRadius 1.0.2 and MySQL, and what I do is a select testing AcctStopTime=0 and the date from the AcctStartTime, so I can view todays online. Is not the correct solution, but... Perhaps I should move on to 1.0.5, so I can fix this, no? - List info/subscribe/unsubscribe? See

Hashed passwords in the users file???

Hi, does someone know how to use hashed passwords for the users entries in the users file? I hope someone can help me. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

/local/dialup page will not display for dialupadmin

Hey gus I am new to this and usually I follow evey step to make it work, and do try hard (I have had my had on this for a week now). I have read the readme file the 'How to document and upto the point where I have to get the dialupadmin page displayed on the browser it does not happen :-( well I

Encrypted passwords in the users file

Hi, I've got a SUSE 9.3 with FreeRadius 1.0.2, and at the moment I have my user registered in the users file such as: usernameAuth-Type := Local, User-Password == password Service-Type = Callback Framed, ... I would like to know how to encrypt the

Re: Can I add extra fields to the radius accounting database?

Thanks Nicolas, I've changed %{Tunnel-Type}, I also had another mistake. I changed everything and it works perfect. Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_sqlcounter + PostgreSQL problem

radius ;) and maybe I'm wrong but I think xlat.c/radius_xlat() or xlat.c/decode_attribute function should complain when the module does not exist. I'll try to make a patch or something if someone tell I'm right. Thank you all. Miguel. - List info/subscribe/unsubscribe? See http

Re: rlm_sqlcounter + PostgreSQL problem

the behaviour of the code (so i think its may be a bug). Another question, why does the rlm_sqlcounter comes with sqlcca3 as default sql module? What does it mean? is some kind of error? should I file a bug? Thanks. Miguel Cabrera. - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: rlm_sqlcounter + PostgreSQL problem

Hi, Alan, ¿Radius?, Everyone On 7/7/05, Alan DeKok [EMAIL PROTECTED] wrote: Miguel Cabrera [EMAIL PROTECTED] wrote: Do you mean something like: radiusd -X -xx ? : I've done it, chek the output (specialy the highlighted text) at http://pastebin.com/309030 Hmm... Odd. Another

rlm_sqlcounter + PostgreSQL problem

it out :( I'am runnig in a FC3 with PostgreSQL 7.4.8 and the last stable release of freeRadius. (Version 1.0.4) I'll appreciate any help you can give me. Miguel. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_sqlcounter + PostgreSQL problem

in a FC3 with PostgreSQL 7.4.8 and the last stable release of freeRadius. (Version 1.0.4) I'll appreciate any help you can give me. Miguel. Miguel. No sabia que usaran freeRadius por Curramba. :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Configure IP Pools

Hi Try to put the IP-Pool in check items (not reply items) miguel -Message d'origine- De : [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] De la part de DK Envoyé : vendredi 24 juin 2005 11:45 À : freeradius-users@lists.freeradius.org Objet : Configure IP Pools Hi

ippool

Hi, Has anyone an idea on the best solution to run two freeradius on the same machine. I tried with one installation that uses different conf and log directories but I wonder if all works well with the second instance. For example the radwho has no parameters to indicate which instance

RE: ippool

mailing list' Objet: RE: ippool Hi, why do you actually need two different instances of freeradius? Regards, Edvin Seferovic From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Miguel Sennoun Sent: Donnerstag, 16. Juni 2005 14:33 To: 'FreeRadius users mailing list

RE: syslog

If you search the list archives, you'll see where Alan kindly pointed out to me where to make some modifications so accounting info could be syslog'd as well - I have not had time to do it yet. Argghhh didn't find this but thank you to have tried Miguel Sennoun - List info/subscribe

RE: syslog

Set log_destination = syslog and log { syslog_facility = daemon } I tried, but it seems not write radius logs in syslog Just to be clear - which radius logs are you trying to redirect and did you make sure that syslog is running/configured correctly ? I

RE: syslog

-Message d'origine- De : [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] De la part de Craig Huckabee Envoyé : jeudi 9 juin 2005 16:04 À : FreeRadius users mailing list Objet : Re: syslog Miguel Sennoun wrote: I would like to redirect all radius logs (even

syslog

Dear freeradius users, I wonder if there is a way to treat freeradius logs with the syslog deamon (or syslog-ng). I tried the option l syslog but It appears it doesnt works fine. Is there someone who has succeeded to configure freeradius with syslog? Thank you MS -

RE: sequence

I have a question in relation with this configuration: In the case module file (users) and then sql are activated. Is it possible to go through sql module conditionally following what happened in the file module? In fact my file module can set an Auth-Type = Reject. In this case I would like the

RE: sequence

freeradius will first execute preprocess and files modules... then sql if Autz-Type is set to dosql Hope it helps Anthony with this in Le vendredi 27 mai 2005 à 14:32 +0200, Miguel Sennoun a écrit : I have a question in relation with this configuration: In the case module file

RE: Authorization problem

- De : [EMAIL PROTECTED] [mailto:freeradius-users- [EMAIL PROTECTED] De la part de Alan DeKok Envoyé : mercredi 25 mai 2005 19:52 À : freeradius-users@lists.freeradius.org Objet : Re: Authorization problem Miguel Sennoun [EMAIL PROTECTED] wrote: DEFAULT Auth-Type := Reject, Service-Type

Re: Ntlm problem with peap

ntlm? Thanks Nuno Fernandes On Mon, 2004-08-30 at 19:43, Alan DeKok wrote: Nuno Miguel Pais Fernandes [EMAIL PROTECTED] wrote: I'm having problems using freeradius with peap and ntlm. If you're running on a big endian machine, there's a bug in src/lib/md4.c which breaks MS-CHAP

Re: Ntlm problem with peap

Hi again, On Tue, 2004-08-31 at 15:49, Alan DeKok wrote: Nuno Miguel Pais Fernandes [EMAIL PROTECTED] wrote: Running 1.0.0 on dual intel so little-endian. Aparently challenge or nt-response are being generated wrongly, or it's a bug in ntlm_auth. I've been running it on an x86

snoop2radius: a tool for testing RADIUS servers and a RADIUS sniffer

. Thanks, Miguel snoop2radius.tar.gz Description: application/compressed-tar

TTLS + Cisco AP1100

Cleaning up request 4 ID 14 with timestamp 40d004fc Nothing to do. Sleeping until we see a request. -- Nuno Miguel Pais Fernandes [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part

Re: TTLS + Cisco AP1100

Ooopps.. I do see User1.. but i see [EMAIL PROTECTED] How do i rewrite it to remove realm so there is a match at users file? Thanks Nuno Fernandes On Wed, 2004-06-16 at 09:36, Nuno Miguel Pais Fernandes wrote: Hello, I'm having problems authenticating windows XP clients using EAP-TTLS

Re: TTLS + Cisco AP1100

, Nuno Miguel Pais Fernandes wrote: Ooopps.. I do see User1.. but i see [EMAIL PROTECTED] How do i rewrite it to remove realm so there is a match at users file? Thanks Nuno Fernandes On Wed, 2004-06-16 at 09:36, Nuno Miguel Pais Fernandes wrote: Hello, I'm having problems

attr_rewrite: How to assign ip address in proxy server and attribute conversion

reenviar el atributo en el paquete # al siguiente servidor despues de procesarlo...] post-proxy { rwnasport ... } That's all, I hope it's [Eso es todo, espero que os sirva de ayuda] Miguel Diez Cisneros Telefonica I+D - List

Mailing List suggestion...

List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Just a suggestion... Miguel C. Miguel Marques, Development Services, Computing and Network Services, York University e-mail: miguel at yorku.ca, voice