Re: new query verification in sql.conf

gt; >>> Somebody can help me? >>> >>> Sorry for my english >>> >>> Thanks >>> >>> Jean >>> - >>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >>> >>> >>> >> >> >> >> > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Pierluigi Di Lorenzo ePrometeus s.r.l - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: problems with vpn

l blocks packets udp on 1812 try pinging or connetting to another service and see what is wrong -- Pierluigi Di Lorenzo ePrometeus s.r.l - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

sql_counter

Hi all, somebody knows how to pass external variables to sql_counter modules? and especially CallingStationId? I'd like to pass macaddress of pc making the request. Thank's in advance, ciao! -- Pierluigi Di Lorenzo ePrometeus s.r.l - List info/subscribe/unsubscribe? See http://www.free

sql_counter

Hi all, somebody knows how to pass external variables to sql_counter modules? and especially CallingStationId? I'd like to pass macaddress of pc makes the request. Thank's in advance, ciao! -- Pierluigi Di Lorenzo ePrometeus s.r.l - List info/subscribe/unsubscribe? See http://www.free

max-daily-session

ables with CallingStationId, something like: query = "SELECT (SUM(AcctSessionTime) + ((WORKSTATIONID = $CallingStationId) * 82800) FROM radacct WHERE UserName='%{%k}' AND AcctStartTime > FROM_UNIXTIME('%b')" Any idea? Thank's in advance. -- Pierluigi Di

Re: Adding own attribute to reply.

> > The key for all was to use an id < 255. Well, it seemed to works, but it doesn't. Now I have in my users file an entry like this: stive Auth-Type := Local, User-Password == "testing" Framed-IP-Address = 172.16.3.33, Framed-IP-Netmask = 255.255.255.0, MS-Primary-DN

Re: Adding own attribute to reply.

> Kostas Kalevras <[EMAIL PROTECTED]> wrote: >> Create a vendor specific attribute. The easiest way is to add >> another attribute in the dictionary.freeradius. The key for all was to use an id < 255. Maybe a FAQ ? :) > Please don't. That's the *FreeRADIUS* dictionary, not a site-local > dict

Adding own attribute to reply.

Hi all, for a custom application I need to add some personal attribute in the reply I get from radius server, but can't find anywhere info on how to do that. I've then create an attribute in dictionary, using an identifier marked as free ( # Range: 1800-2999 Free ) in this way: ATTRIBUTE M

Found out why. It is a bug. (was Re: Atrribute rewriting, probable bug ?)

sual stuff for checking the attribute type, and modify the value accordly. ... or I'm yet missing something ? Pigi ___ FRULLANI Pierluigi Frullani| Tel. +3902-29003554 & System & Network Engineer | Fax. +3902-29003580 FRULLANI Fruma

Atrribute rewriting, probable bug ?

f id 4 to 127.0.0.1:32809 Framed-IP-Address = 172.16.3.33 Framed-IP-Netmask = 255.255.255.0 MS-Primary-DNS-Server = 130.1.1.1 Framed-Compression = Van-Jacobson-TCP-IP Framed-Protocol = PPP Here the MS-Primary-DNS-Server seems to have the correct rewr

Behavior for rlm_ldap module

Hi all. Reading through the C code of rlm_ldap I've noticed that the behavior for this module, when it got a nosuchobject or a ambiguous reply is to not reject the request, but pass it over for some other modules, either in authorize then in authenticate. This could be ok when you have a distribu

rlm_eap_tls: Received unexpected tunneled data after successful handshake

ndshake [length 03b2], Certificate Info: chain-depth=1, Info: error=0 Info: --> User-Name = testuser Info: --> BUF-Name = Pierluigi Info: --> subject = /C=IT/ST=Italy/L=Milano/O=R-IT.SPA/OU=Security Office/CN=Pierluigi/[EMAIL PROTECTED] Info: --> issuer = /C=IT/ST=Italy/L=Milano/O=R-IT.SPA/

Re: Freeradius/Cisco and EAP?

> I'm trying to get EAP/TLS working, and not having a lot of luck. Anyone > have any pointers? Here's what I've got so far: > > Installed freeradius-0.9.3.tar.gz > Figured out how to get it to compile the EAP TLS libs In 0.9.3 there is a bug that would not let eap/tls works. Download a fresh c

Re: Patch for PEAP MSCHAPV2. Is it ok ? (Alan DeKok)

Re: Patch for PEAP MSCHAPV2. Is it ok ? (Alan DeKok) > "Pierluigi Frullani" <[EMAIL PROTECTED]> wrote: >> After a very long hunt, I've discovered a bug in rlm_mschap module, in >> freeradius snapshot 20040130. > > That's good, but why didn't y

Patch for PEAP MSCHAPV2. Is it ok ?

Hi all, I' ve finally found out which is the problem in PEAP authentication when using mschapv2. After a very long hunt, I've discovered a bug in rlm_mschap module, in freeradius snapshot 20040130. The problem was a ( probably ) typo error when processing mschapv2 authentication. In fact at line