Re: TTLS OSX Airport Connection Dropping

It wouldn't hurt to file a bug at bugreporter.apple.com. What version of firmware does your e4200 have? I have access to a unit that I can test with. - Terry On Mon, Jul 11, 2011 at 5:26 AM, Matt Hopkins thematthopk...@gmail.com wrote: I have a setup with four Linksys E4200 wireless routers

Re: Python module/program

KeyboardInterrupt. You should always do something like: try: some code except TheExceptionClass: some code HTH, - Terry On Wed, Jan 26, 2011 at 2:47 PM, McCann, Brian bmcc...@andmore.com wrote: Hi all. I've got freeradius working using a python library for auth, but something interesting

Re: Problem with iPods/iTouches

reproduce the problem? Send me an E-mail with the logs and packet trace. We can continue discussing off list - but the above information is useful for other FreeRADIUS users. - Terry On Mon, Jan 17, 2011 at 6:22 AM, Rob Yamry rya...@kimberly.k12.wi.uswrote: Does this problem also happen with iOS 4.x

Re: Problem with iPods/iTouches

the relevant pieces)? Thanks, - Terry On Thu, Jan 13, 2011 at 5:38 AM, Rob Yamry rya...@kimberly.k12.wi.uswrote: Hmm. Are you asking for a client cert with PEAP; your original trace has: [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A In SSL Handshake Phase

EAP-TLS authentication allows me to authenticate with invalid certificate.

Hi, I'm running into an issue where FreeRADIUS allows an invalid certificate (one not signed by my configured CA) to successfully authenticate to EAP-TLS. There's a message in the log that clearly indicates that the CA wasn't found (-- verify error:num=20:unable to get local issuer

Re: RE:huntgroups are failing auth - missing Chap Password

Thanks to all who offered assistance. I figured it out. FreeRadius users mailing list freeradius-users@lists.freeradius.org writes: FreeRadius users mailing list [ mailto:freeradius-users@lists.freeradius.org [EMAIL PROTECTED] writes: I must be missing something here, likely due to my limited

Re: RE:huntgroups are failing auth - missing Chap Password

FreeRadius users mailing list freeradius-users@lists.freeradius.org writes: I must be missing something here, likely due to my limited experience with FreeRADIUS. No, all you have to do is to be able to read. With care and understanding. OK, I'll Re-read again. After re-reading the

RE:huntgroups are failing auth - missing Chap Password

is wrong for 1.1.7. Ivan Kalik Kalik Informatika ISP Dana 14/9/2007, Terry Pelley Terry.Pelley at ocdsb.ca piše: FreeRADIUS Version 1.1.7 I am using the FreeRADIUS.net Windows version of the software. at least for the time being. I am trying to set up a very basic single user account for a very

huntgroups are failing auth - missing Chap Password

FreeRADIUS Version 1.1.7 I am using the FreeRADIUS.net Windows version of the software. at least for the time being. I am trying to set up a very basic single user account for a very specific purpose and have created the account as follows. hunttest User-Password == hunttest, Huntgroup-Name ==

[no subject]

I want to be able to specify which Wireless Access Points certain users can gain access from. Is there an attribute that I can set so that a user can only be authenticated if the request comes from a predetermined NAS or group of NASs? thnx. - List info/subscribe/unsubscribe? See

limiting Authentication based on the NAS

Sorry, First posting contained no subject header. This is a repost. I want to be able to specify which Wireless Access Points certain users can gain access from. Is there an attribute that I can set so that a user can only be authenticated if the request comes from a predetermined NAS or group

Question regarding the Expiration attribute

FreeRADIUS Version 1.1.7 on Novell SLES10 The question is simple but I can't seem to find the answer to it so I will apologize in advance. Can some one tell me the format for entering the date in the Expiration attribute? I'm using the users file to authenticate users on a small wireless

Problem upgrading Windows version to Ver.1.1.7

I'm Currently running FreeRADIUS Version 1.1.3-r0.1.2 (Windows version) Knowing that I am long overdue for an upgrade, I backed up all of my configs and ran the 1.1.7 installer. everything seems to go just fine and the service is up and running when the update process completes. However, when I

Is it possible to add custom user attributes?

FreeRADIUS Version 1.1.3-r0.1.2 (Upgrade is Pending) Is there a way to add my own custom attributes to my users other that simply putting a # in front of the line? I would like to be able to add a Corporate asset tag number for my wireless users laptops. Thanks. - List

Re: Is it possible to add custom user attributes?

FreeRadius users mailing list freeradius-users@lists.freeradius.org writes: Terry Pelley wrote: FreeRADIUS Version 1.1.3-r0.1.2 (Upgrade is Pending) Is there a way to add my own custom attributes to my users other that simply putting a # in front of the line? What do you mean

Re: Is it possible to add custom user attributes?

Thanks, I figured it all out. Cheers, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Intel Proset Wireless Client does not process RFC3580 Attributes.

not appear to get processed. I think this is happening because the Proset Client sends the User-Name as anonymous and as there is no anonymous user defined, the attributes do not get applied. How do I get the User-Name to be sent correctly? Thanks in advance. Terry Pelley Network Analyst

Re: Intel Proset Wireless Client does not process RFC3580 Attributes.

Thank you, That worked perfectly. FreeRadius users mailing list freeradius-users@lists.freeradius.org writes: Read instructions in eap.conf. You most likely need to set: use_tunneled_reply = yes in peap section. Ivan Kalik Kalik Informatika ISP Terry Pelley Network Analyst Business

PEAP/MS-CHAPv2 and the Windows XP default wireless client

the \\ComputerName prefix? Thanks in advance, Terry Pelley Network Analyst Business and Learning Technologies Ottawa-Carleton District School Board [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Two Ldaps Authentication

it be an authentication allowed or rejected) it still answered. so it won't fail over to the next ldap server... --- Alan DeKok -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 client unable to authenticate via EAP-TLS

Hello, I have one client that is having a problem authenticating via wireless EAP-TLS. The client is a Windows XP SP2 computer using a an internal Dell wireless card. The client associates with the access point-a Cisco Aironet 1130-but is continually reports an attempting to authenticate message.

Freeradius and 2 ldap servers.

this is...and it may not be important -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius filters for ldap searching

section based on GroupName and I don't know how. -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius and 2 ldap servers

:= `uid=%{User-Name},ou=People,dc=mtaonline,dc=net` Fall-Through = no assuming your ldap instatiations are ldap_primary and ldap_secondary respectively. thanks in advance t- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe

freeradius ldap with two trees

-define the basedn in either huntgroups, or on a default line in the users file so the search comes up with a single user. thanks for your help t- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: freeradius ldap with two trees

! thanks Ben t- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius and LDAP with static ips...

: [EMAIL PROTECTED] cn: Ftp99 Tester homeDirectory: /export/home/ftptest99 dc: People.mtaonline.net radiusFramedIPAddress: 192.168.200.1 radiusFramedIPNetmask: 255.255.255.0 radiusGroupName: dsl8m radiusGroupName: dial -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL

Question about a configuration entry in the eap.conf file.

What will happen if I change the timer value? Thanks Terry Zarelli - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question about a configuration entry in the eap.conf file

an early version(pre 1.0) to authenticate our VPN and iPass accounts for a couple of years now and it works great. Actually we use4 Radius servers for our enterprise. Thanks for the great work. Thanks Terry Zarelli On 3/17/06, Alan DeKok [EMAIL PROTECTED] wrote: Terry Zarelli [EMAIL PROTECTED

Re: Question about a configuration entry in the eap.conf file.

I apologize, it appeared that my first post did not show up on the list. Sorry On 3/17/06, Phil Mayers [EMAIL PROTECTED] wrote: Terry Zarelli wrote: Hello, I have a question about a configuration entry in the eap.conf file.Why did you think posting the same identical question twice, 24 hoursapart

Question about a configuration entry in the eap.conf file

What will happen if I change the timer value? Thanks Terry Zarelli - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius, Ldap, and static IPs for users.

,dc=net Fall-Through = no DEFAULT Auth-Type := Reject Reply-Message = Please call the helpdesk. the ldap user i'm testing this all with looks like this: dn: uid=tfike,ou=People,dc=mtaonline,dc=net cn: Terry gecos: Terry,,Fike gidNumber: 14 homeDirectory: /export/home/tfike

How to implement challenge/response authentication

Hi all,I try to modify rlm_example.c toimplement challenge/response authentication, but i dont' know how to code it, i know i have to modify example_authenitcate function , but when i install it to my freeradius server , it cannot return RLM_MODULE_OK, anyone can help me with that, here is my

Re: Question about Building Freeradius

Sarkis Gabriel wrote: Just wondering when i build the RPM with SPEC file, does it enable --with-experimental- modules? or is there a specific command to make the extra modules? I have compiled the RPMS no problem there but the modules are not included and if i compiled from .tar.gz when i run

First Run: Invalid ELF Header

! Cheers Terry - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius install problem

when you set up the client in the clients.conf did you put all the client info inside {} ? client ip { secret = nosecret shortname = mycomputer } it didn't look that way in the message, but that may have just been for ease of writing... -- Terry J Fike Jr System Administrator MTA Solutions

Re: question about ippools

to set the pools, but where do define them as a per NAS? (ie: pool 1.2.3.0/24 to NAS1 and 1.2.4.0/24 to NAS2) then in the user's info just add Pool-name := poolname right? what is the Group == poolname part for in the DEFAULT?? would that be for the fallthroughs? -- Terry J Fike Jr System

Re: Radrealay and coredumps...

days to do this to ensure the data i was getting off the pdsn would be from the current build without the extra modules -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Re: Radrealay and coredumps...

...all my users authenticate just like normal...even from the pdsn, i get my accounting data just fine...even from the pdsn...*shrug* this just is not making any sense... -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See

Re: Re: Radrealay and coredumps...

...sent just fine. i guess it is time to build me a new radius box... -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Raadrelay and coredumps...

from md4.c) but no errors. is this normal when compiling with --enable-developer? also...any other ideas? -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Re: Raadrelay and coredumps...

a lot of things :( tied into the same ip as radius) -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Re: Raadrelay and coredumps...

Terry J Fike Jr [EMAIL PROTECTED] wrote: I did amake distclean before ./configure each time The *installed* files may be causing problems. even if i'm telling a different prefix each time? (i ask because i have 1.0.2 in /usr/local and 1.0.0 in /opt) as i make new versions i just change

Re: Radrelay and coredumps...

) and VERY stable (pretty much takes a user fubar to break it) you guys have done great work i'll be sad to see it go... -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radrelay and coredumps...

What is gdb? (and what sort of package could i find it in) we don't have it on our boxes so i'll need to find it and install it then get you the info you need. -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http

Re: Radrelay and coredumps...

to dig the info you need out of this file? -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radrelay and coredumps...

|MAP_ANON, -1, 0) = 0x7DA0 munmap(0x7DA0, 8192)= 0 _exit(0) I can send the whole core file and truss file if need be. I'm still a little surprised this works for all but one of my NAS devices... Thanks for your help on this so far :) t- -- Terry J Fike Jr

Re: Restart Radius

if your on unix world in your $prefix/sbin should be a script called rc.radiusd call this like so: /prefix/sbin/rc.radiusd restart that is a quick clean way of restarting radius -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe

Re: Radrelay and coredumps...

be. -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Question about radrelay and file deletion/rotation

up? (In the radius.conf file i'm setting locking=yes for this detail file) Thanks in advance. t- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radrelay and coredumps...

... ... some more stuff that i'm not sure if i need to add or not ... Anyone got any ideas what i might be doing wrong here? Thanks in advance for your help t- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http

Re: Install Solaris9 - ver 1.0.1 and 1.0.2

or directory In file included from x99_rlm.c:54: msg trunkated. on my Sol 9 box, i removed all references to x99 in the makefile and then it compiled just fine. But then, i didn't need that stuff so i was okay with that. -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL

Copying accounting packets

I suppose the question is, will there be a problem running two sets of radrelay (one on all accounting packets, and one on accounting packets from just one NAS)? or is there a better way to do this and I'm just being blind? -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100

Re: Copying accounting packets

requests to seperate logfiles based on source ip and time - 1 to log all requests to a single logfile - 1 to log requests from a particular NAS to a single logfile -- Groeten, Regards, Salutations, Okay, sounds like what i was thinking. Thanks very much! t- -- Terry J Fike Jr System Administrator MTA

Re: Freeradius hangs after a HUP

a clean load each time. BTW, we are/were running this on Sol 8 and now Sol 9. -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

8e6 technologies and radius

, as far as i can see, none of our NAS devices are using the Class attribute (as it doesn't show up in any of the accounting packets from the different NAS devices), but i thought i would check with those who know more than me before i go trying to break things. thanks in advance. Terry -- Terry

Re: 8e6 technologies and radius

in the conf files? (not to say i couldn't be blind and have totally missed it though) -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: recommended appliance

http://www.directdial.com/ca/shoptrendware/item/TW100-BRV-204.html these arent too bad. i have tested to pix and linux vpn. otherwise i would recommend cisco pix. the older 520's are pretty cheap now.. _Terry Kaczmarek, Thaddeus wrote: On Nov 26, 2004 03:48 PM, Omar Armas [EMAIL

Re: difference in columns/names

Terry J Fike Jr [EMAIL PROTECTED] wrote: / Okay, i'm not sure if this is the right place, to ask, but since it is / / more or less radius accounting i thought i'd try here. Does anyone know / / the difference in the data in the columns inputoctets/outputoctets and / / inputoctets64/outputoctets64

Re: difference in columns/names

The Acct_Output_Octets_64 isn't a standard RADIUS attribute. It's a Redback attribute. (see dictionary.redback) I suggest asking Redback what it means, and why it's zero. Alan DeKok. Okay, will do. Thank you very much! t- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100

AP Orinoco 2500

normally) thanks in advance t- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Memory Leak for Accounting using Oracle

problems with sockets but that is a different thing. Also, the system is using much less memory and cpu on 1.0.0 than it was on 0.8.3. And supposedly it gets even better on 10g. -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe

Re: pap module instantiation fails on sol8 but not on redhat?

, sql.conf, users, radiusd.conf) one at a time and see where it dies. I'll keep everyone informed as i find out more info. -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pap module instantiation fails on sol8 but not on redhat?

, make install from previous, but this time it is working...only change i've made on the box was to re-link in all lib directories (which i did to get radius libraries linked in) (did this before re-install and old 1.0.0 still crashed) so... *shrug* -- Terry J Fike Jr System Administrator MTA

pap module instantiation fails on sol8 but not on redhat?

- -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeRadius on RedHat ES3

that could supposedly do authentication via an radius server...) what sort of install did you do on ES3? -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius + Oracle

/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Barbulescu Mihai Network Engineer RoEduNet Bucharest NOC -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TTLS wirless clients cannot communicate

and appreciated. Thank you -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html