RE: Hints file and Strip-User-Name

2008-06-03 Thread Paul Khavkine
a 3/6/2008, "Paul Khavkine" <[EMAIL PROTECTED]> piše: > > >files is there in authentication { } section. > >authenticate { ># ># PAP authentication, when a back-end database listed ># in the 'authorize' section supplies a passwor

RE: Hints file and Strip-User-Name

2008-06-03 Thread Paul Khavkine
files is there in authentication { } section. authenticate { # # PAP authentication, when a back-end database listed # in the 'authorize' section supplies a password. The # password can be clear-text, or encrypted. Auth-Type PAP { pap

Hints file and Strip-User-Name

2008-06-03 Thread Paul Khavkine
Hi. I'm trying to match a suffix in the username using the hints file and strip the suffix. I have the following configured: raddb/hints: DEFAULT Suffix == ".d", Strip-User-Name = Yes Hint = "Dynamic" raddb/users: DEFAULT Hint == "Dynamic" Framed-IP-Address

Matching Realm names only.

2008-03-31 Thread Paul Khavkine
Hi. I'm setting up a LAC for L2TP tunneling users to a remote LNS. On the LAC side I want it to obtain the tunneling parameters only based on the realm. What would be the simplest way to setup FreeRADIUS to only match the realm and return tunneling attributes. If the realm is not configured, th

Check items in rlm_files

2007-08-23 Thread Paul Khavkine
Hi. Is it possible to access check items from the users file that were added to the request by previous modules ? I have rlm_ldap adding some items in authz section that I want to check later on in the users file. Or is there a way to map attributes from LDAP to the request pairs instead ? T

Global address pool

2006-12-07 Thread Paul Khavkine
Hi folks. I'm looking into ways to implement a "global address pool" for multiple NASes and multiple RADIUS servers. I see that there's 2 possible ways of doing it with FreeRADIUS. 1) use rlm_ippool 2) use rlm_sqlippool I'm leaning towards rlm_sqlippool since it can be used to "lease" an a

RE: Server logs say users authenticate, but they don't (Now with more details!)

2006-11-03 Thread Paul Khavkine
Title: RE: Server logs say users authenticate, but they don't (Now with more details!) Is the server multihomed ? It often happends that the server will recieve a request on one IP address and send out a reply using a different address with a multihomed system. If your system has multiple I

radiusd crashing on FreeBSD 6.0

2006-06-12 Thread Paul Khavkine
Hi Guys. I have radiusd 1.1.2 from the latest FreeBSD port crashing strangly during a stress test. I'm not sure where exactly it occurs because no core dump is produced. Even when ran inside gdb, i can't get any backtrace info at all: srv03# gdb /usr/local/sbin/radiusd GNU gdb 6.1.1 [FreeB

Building on Solaris 10

2006-02-07 Thread Paul Khavkine
Hi guys. When building FreeRADIUS on Solaris, which compiler should i use ? Has anyone built FR with the Sun compiler ? Thanx Paul signature.asc Description: This is a digitally signed message part - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2006-01-16 Thread Paul Khavkine
On Fri, 2006-01-13 at 23:26 -0500, Dusty Doris wrote: > On Fri, 13 Jan 2006, Alan DeKok wrote: > > > "Paul Khavkine" <[EMAIL PROTECTED]> wrote: > >> Any clues ? bug in OpenLDAP library maybe ? > > > > Looks that way to me. > > > > Wh

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2006-01-13 Thread Paul Khavkine
Paul On Thu, 2006-01-12 at 15:57 -0500, Paul Khavkine wrote: > On Tue, 2006-01-10 at 18:42 -0500, Alan DeKok wrote: > > "Paul Khavkine" <[EMAIL PROTECTED]> wrote: > > > The server is running as root, core dumps are allowed in the config, it > > > crashes

Re: Compiling FR 1.1.0

2006-01-13 Thread Paul Khavkine
On Fri, 2006-01-13 at 17:11 +0800, Rohaizam Abu Bakar wrote: > > Tested with FBSD 4.11 error with rlm_attr_rewrite... After remove the > folder... then error with rlm_otp > > ### > Making all in cardops ... > gmake[6]: Entering directory > `/var/src/freeradi

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2006-01-12 Thread Paul Khavkine
On Tue, 2006-01-10 at 18:42 -0500, Alan DeKok wrote: > "Paul Khavkine" <[EMAIL PROTECTED]> wrote: > > The server is running as root, core dumps are allowed in the config, it > > crashes with either signal 6 or signal 11 when running with -x or -xx, > > doe

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2006-01-10 Thread Paul Khavkine
On Fri, 2005-12-30 at 15:09 -0500, Alan DeKok wrote: > "Paul Khavkine" <[EMAIL PROTECTED]> wrote: > > So anyone have an idea how can i fugure out where the server is crasing > > or how to force it to produce a core dump ? > > Run it in debugging mode

RE: FreeRADIUS 1.0.5 rlm_ldap crashing

2005-12-30 Thread Paul Khavkine
So anyone have an idea how can i fugure out where the server is crasing or how to force it to produce a core dump ? Thanx Paul On Thu, 2005-12-29 at 20:27 -0500, Paul Khavkine wrote: > > -Original Message- > From: freeradius-users-bounces > [EMAIL PROTECTED] on behalf of

RE: FreeRADIUS 1.0.5 rlm_ldap crashing

2005-12-29 Thread Paul Khavkine
Title: RE: FreeRADIUS 1.0.5 rlm_ldap crashing -Original Message- From: [EMAIL PROTECTED] on behalf of Alan DeKok Sent: Thu 12/29/2005 7:06 PM To: FreeRadius users mailing list Subject: Re: FreeRADIUS 1.0.5 rlm_ldap crashing "Paul Khavkine" <[EMAIL PROTECTED]> wro

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2005-12-29 Thread Paul Khavkine
_get_conn: Checking Id: 2 rlm_ldap: ldap_release_conn: Release Id: 1 rlm_ldap: ldap_get_conn: Checking Id: 3 User-Name = "[EMAIL PROTECTED]"radiusd in free(): error: chunk is already free rlm_ldap: ldap_get_conn: Checking Id: 4 Abort Crashed at about same place. Thanx Paul On Thu, 2005-12

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2005-12-29 Thread Paul Khavkine
On Thu, 2005-12-29 at 16:56 -0500, Alan DeKok wrote: > "Paul Khavkine" <[EMAIL PROTECTED]> wrote: > > rlm_ldap: setting TLS CACert File > > to /usr/local/radiusd/current/etc/raddb/certs/cacert.pem > > rlm_ldap: setting TLS CACert File > > to /usr/local

FreeRADIUS 1.0.5 rlm_ldap crashing

2005-12-29 Thread Paul Khavkine
Hi Guys. I'm doing a stress test on 1.0.5 running on FreeBSD 5.4-RELEASE and when start_tls is enabled radiusd crashed somwhere in the rlm_ldap module. I can't seem to make it produce a core file to properly inspect it. The server is running as root and core dumps are enabled in the config fil

FR and Pgsql

2005-11-16 Thread Paul Khavkine
Hi Folks. I'm setting up FreeRADIUS with Postgres for accounting and there's one thing i can't seem to figure out. When a Start record gets written to radacct table, AcctStopTime is not being set to anything. The field is empty. Since AcctStopTime is of type "timestamp with time zone" it does no

FreeRadius crashing

2005-08-24 Thread Paul Khavkine
Hi Guys. I have FreeRadius 1.0.4 all of a sudden crash end exit. I have enabled core dumps but cannot find the core file anywhere. Where's the core file supposed to be written ? Thanx Paul - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Huntgroup trouble

2004-06-10 Thread Paul Khavkine
unix module loaded somewhere to process > those UNIX groups. > > --Mike > > On Thu, 2004-06-10 at 08:34, Paul Khavkine wrote: > > Hi folks. > > > > > > I'm trying to get Huntgroups to work with matching a NAS-IP-Address and > > a unix group. &g

Huntgroup trouble

2004-06-10 Thread Paul Khavkine
Hi folks. I'm trying to get Huntgroups to work with matching a NAS-IP-Address and a unix group. Here's raddb/huntgroups adslNAS-IP-Address == 10.0.0.1 Group = adslpppoe, Group = adsldedic, Group = employees, Group = adsl raddb/users: DEFAULT Hunt

PEAP with MSCHAPv2

2004-05-20 Thread Paul Khavkine
Hi folks. After some mucking around we got FreeRADIUS to work with PEAP. Now, everywhere i have seen examples for PEAP config, they all state in the users: Auth-Type := Local, User-Password == "mypass" When i tried that, the server would not recognize an EAP session and would allways giv

Win XP Client using PEAP

2004-05-12 Thread Paul Khavkine
Hi folks. I'm trying to authenticate WinXP clients using a Vivato Wi-Fi switch using EAP-PEAP. The server configuration seems to be same as i have seen from people that say they have PEAP working with Win XP. Any clues weither it is the server misconfiguration or the AP that is not working. Th

PEAP with winXP client

2004-05-12 Thread Paul Khavkine
Hi folks. I'm trying to authenticate WinXP clients using a Vivato Wi-Fi switch using EAP-PEAP. The server configuration seems to be same as i have seen from people that say they have PEAP working with Win XP. Any clues weither it is the server misconfiguration or the AP that is not working. Th

PEAP with WinXP client

2004-04-27 Thread Paul Khavkine
Hi guys. Could anyone send me a working config for FreeRADIUS servrer authenticating WinXP clients with EAP-PEAP/EAP-MSCHAPv2. Thanx Paul - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html