Re: EAP-SIM on freeradius-server-2.1.12

2012-02-16 Thread Thor Spruyt
Hi GNUbie, You don't need the special patch for testing EAP-SIM. Just get 3 different triplets for your SIM and create a static users file entry with them, contrary to what -X says, you should put the triplets attrs as reply attrs, not check attrs. Regards, Thor. - Original Message - F

Re: Postgresql undefined symbol PQinitSSL

2011-09-28 Thread Thor Spruyt
ject: Re: Postgresql undefined symbol PQinitSSL Thor Spruyt wrote: > Any ideas on what could be the problem here or any solution or tips on where > to look further? FreeRADIUS is built with Postgresql && SSL. So it assumes that Postgresql can do SSL, too. The simple fix is to go

Postgresql undefined symbol PQinitSSL

2011-09-28 Thread Thor Spruyt
Hi, I have the same problem with both 2.1.11 and 2.1.12-pre ... I'm on CentOS 4.6 with following RPMs: $ rpm -qa | grep devel glibc-devel-2.3.4-2.39 krb5-devel-1.3.4-60.el4_7.2 mysql-devel-5.0.54-1.el4.centos openssl-devel-0.9.7a-43.17.el4_8.5 kernel-smp-devel-2.6.9-67.0.4.EL e2fsprogs-devel-1.3

Re: Authentication based on users and NAS

2011-04-12 Thread Thor Spruyt
Hi, If you're going to use LDAP, then just add the Called-Station-Id to your search filter and add one or multiple attributes to match against in your LDAP entries. Regards, Thor. - Original Message - From: "Sergio Belkin" To: "FreeRadius users mailing list" Sent: Tuesday, April 12,

Re: How to add RADIUS users under OU=People

2011-04-12 Thread Thor Spruyt
Hi, Read http://wiki.freeradius.org/Rlm_ldap You might want to play with basedn and filter. Regards, Thor. - Original Message - From: "pradyumna dash" To: freeradius-users@lists.freeradius.org Sent: Tuesday, April 12, 2011 4:34:52 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stoc

Re: ldap and file authentication

2011-04-12 Thread Thor Spruyt
Hi, Read http://wiki.freeradius.org/Fail-over Regards, Thor. - Original Message - From: "Marco Kalmbach" To: freeradius-users@lists.freeradius.org Sent: Tuesday, April 12, 2011 3:24:35 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: ldap and file authenti

freeradius-users@lists.freeradius.org

2011-04-12 Thread Thor Spruyt
Hi, Read http://wiki.freeradius.org/Rlm_sql section "Instances" Regards, Thor. - Original Message - From: "c schwarz" To: freeradius-users@lists.freeradius.org Sent: Tuesday, April 12, 2011 1:36:17 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: Dif

Re: MAC Address and Username Binding on FreeRADIUS

2011-04-12 Thread Thor Spruyt
Hi, You could use a huntgroup for the MAC addresses and then define what to do for that huntgroup. Thor. - Original Message - From: "syharash" To: freeradius-users@lists.freeradius.org Sent: Tuesday, April 12, 2011 12:11:51 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm /

Re:

2009-09-27 Thread Thor Spruyt
>- Oorspronkelijk bericht - >Van : wessam seleem [mailto:wessam.sel...@gmail.com] >Verzonden : zondag , september 27, 2009 02:34 PM >Aan : 'FreeRadius users mailing list' >Onderwerp : Re: > >Dear Thor and Ivan, > Thanks for your support. I would like to notice that I have the >sam

Re: Mimic lower_user in FR2

2009-09-25 Thread Thor Spruyt
>- Oorspronkelijk bericht - >Van : Alexander Clouter [mailto:a...@digriz.org.uk] >Verzonden : donderdag , september 24, 2009 05:24 PM >Aan : freeradius-users@lists.freeradius.org >Onderwerp : Re: Mimic lower_user in FR2 > >Thor Spruyt wrote: >> >> Since

Re:

2009-09-24 Thread Thor Spruyt
Hi, I tried to get this working also and I found that if you let the ldap module *not* check the password_header, then the password incl. the header is put in the User-Password attribute. If you then use auto_header = yes for the pap module, it should figure out automatically to do crypt... unl

Mimic lower_user in FR2

2009-09-24 Thread Thor Spruyt
Hi, Since lower_user doesn't exist anymore in FR2, I was thinking of doing the following in FR2 to mimic the behaviour, which seems to be working correctly: In "hints" file: DEFAULT User-Name !~ /^$/ User-Name := `%{exec:/opt/tolower %{User-Name}}`, Fall-Through = Yes DEFAULT S

Re: Pre-release of 2.1.7

2009-09-09 Thread Thor Spruyt
Hi, I changed Client-IP-Address in my configuration to Packet-Src-IP-Address in the understanding that Client-IP-Address is deprecated, not sure if this is really the case however. Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Pack

Re: Pre-release of 2.1.7

2009-09-09 Thread Thor Spruyt
Just wondering... i have an empty users file, and i use rlm_sql only to fetch the Cleartext-Password in the authorize section, like this: SELECT 1,username,'Cleartext-Password',password,':=' FROM account WHERE username='thor' I then get this message in the debugging output: WARNING: Please upda

Re: Pre-release of 2.1.7

2009-09-09 Thread Thor Spruyt
>- Oorspronkelijk bericht - >Van : Arran Cudbard-Bell [mailto:a.cudbard-b...@sussex.ac.uk] >Verzonden : woensdag , september 9, 2009 01:31 PM > >*clarifies* I'm sad whenever I see someone using Windows.*, why can't they use >an OS that doesn't suck. > >- -Arran > Maybe they *can*, but t

Re: Pre-release of 2.1.7

2009-09-09 Thread Thor Spruyt
Hi, Found a small glitch with rlm_attr_filter... When I don't have a Fall-Through configured, it behaves correctly, meaning it doesn't continue. When I have "Fall-Through = Yes" configured, it behaves correctly, meaning it continues. But when I have "Fall-Through = No" configured, it still cont

Re: Pre-release of 2.1.7

2009-09-08 Thread Thor Spruyt
Hi, Compiles and runs smoothly on Centos 4.6 32-bit... Using postgresql backends and exec module for both auth and acct packets home_server "status_check = none" ok, need this ;-) I've been away from FR evolution for a while... I must say I'm really surprised what's possible now with 2.1.7 compa

freeradius-server-2.1.4 make fails

2009-04-10 Thread Thor Spruyt
`/home/thor/freeradius-server-2.1.4/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/home/thor/freeradius-server-2.1.4' make: *** [all] Error 2 Any idea what's going wrong? Regards, Thor Spruyt - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: I will be out of the office

2007-05-30 Thread Thor Spruyt
Hugh Messenger wrote: >> I will be out of the office from Wednesday May 30 until Monday >> June 4. > > What a coincidence! I'll be out of the office during those dates as > well ... hunting down and killing everyone who writes broken > autoresponders. > > Sorry, I know I shouldn't increase list po

Re: O'Reillys Radius Book - Worth buying

2007-04-16 Thread Thor Spruyt
Alan DeKok wrote: > If you're familiar with RADIUS, it will contain little useful > information. I can confirm this. I was pretty disappointed about the value of the book when I bought it 3 years ago. I doesn't go indepth into anything. Thor. - List info/subscribe/unsubscribe? See http://www.

Re: online users

2007-04-14 Thread Thor Spruyt
Mordor Networks wrote: > hi Graham > yes sir i know but my question is how to do that im all new to all > this.. thank you Connect to your mysql database and type "show tables;", then you'll see a list of tables in your database. It's probably the "radacct" table you need to query for session inf

Re: two database

2007-04-10 Thread Thor Spruyt
http://wiki.freeradius.org/Rlm_sql - Original Message - From: Nirmal To: FreeRadius users mailing list Sent: Monday, April 09, 2007 1:53 PM Subject: Re: two database can i use two sql database in sql.conf for free radius version 0.9 ? currently i m using freeradius 0.9 +

Re: freeradius unistalling

2007-03-23 Thread Thor Spruyt
There is no "uninstall" and "make clean" just cleans the source tree. Use rpmbuild to make an rpm. - Original Message - From: elmalhi abdelghani To: FreeRadius users mailing list Sent: Friday, March 23, 2007 3:48 PM Subject: Re : freeradius unistalling hi, but i found always my director

Re: EAP-TTLS outer identity & accounting

2007-03-19 Thread Thor Spruyt
Sam Schultz wrote: > P.S. A link to a list of known-good access points, or personal > recommendations on access points would also be appreciated. > We will be replacing a few 3com APs soon because they don't > play well with...well...ANYTHING. One (3com OfficeConnect) > doesn't even

1.1.5 double free or corruption

2007-03-09 Thread Thor Spruyt
f7c000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1000) = 0xf7c000 close(5)= 0 open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = 5 writev(5, [{"*** glibc detected *** ", 23}, {"double free or corruption (fastt&quo

Re: Return values for rlm_exec scripts

2007-01-11 Thread Thor Spruyt
Garry Glendown wrote: Thor Spruyt wrote: Session-Timeout := `%{exec:/bin/echo 200}` I use exec_program_wait, try having a look at that. ... which doesn't return a value if I'm not mistaken ... !? It can return several Attribute-Value pairs. Read the documentation, search

Re: Return values for rlm_exec scripts

2007-01-10 Thread Thor Spruyt
a look at that. -- Thor Spruyt M: +32 475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

chap requests and users file

2006-12-17 Thread Thor Spruyt
method to let both PAP and CHAP succeed, it's up to the user to decide what to use. -- Thor Spruyt M: +32 475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: logging to normal radius.log and syslog

2006-11-16 Thread Thor Spruyt
tail -F radius.log | logger - Original Message - From: "Michael Messner" <[EMAIL PROTECTED]> To: Sent: Thursday, November 16, 2006 3:10 PM Subject: logging to normal radius.log and syslog hey @all, for testing we write the complete debugging messages to syslog into a special file

Re: working rlm_perl example ?

2006-09-20 Thread Thor Spruyt
ing. Done."); } # # Some functions that can be called from other functions # sub test_call { # Some code goes here } sub log_request_attributes { # This shouldn't be done in production environments! # This is only meant for debugging! for (keys %RAD_REQUEST) { &radiusd::ra

not so quiet anymore...

2006-07-23 Thread Thor Spruyt
;-) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: (no subject)

2006-07-13 Thread Thor Spruyt
How about adding a dictionary will all 256 numbers? - Original Message - From: Robert Dukes To: FreeRadius users mailing list Sent: Thursday, July 13, 2006 9:26 PM Subject: Re: (no subject) Sorry, Ok I use Alvarion Su radios that has radius accounting option. but the radios send some VS

Re: File ATTRS

2006-03-23 Thread Thor Spruyt
José Berenguer wrote: > Hello! In the file attrs I have: > domain.es > Reply-Message = "RADIUS OK" > > but it doesn't return me the message. Try adding a colon before the equals sign. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E:

Re: perl scripts

2006-03-15 Thread Thor Spruyt
Add this in your script and then run radiusd in debugging mode:    for (keys %RAD_REQUEST) {  &radiusd::radlog(1, "RAD_REQUEST: $_ = $RAD_REQUEST{$_}"); }   --Groeten, Regards, Salutations,   Thor SpruytM: +32 (0)475 67 22 65E: [EMAIL PROTECTED]W: www.thor-spruyt.com   www.salesguide.bewww.te

Re: perl scripts

2006-03-11 Thread Thor Spruyt
SEND PLAIN TEXT!!! You can change the SQL queries in the sql configuration file. If you really want to use a perl script, then go have rlm_exec and rlm_perl at your disposal... read the docs. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor

Re: perl scripts

2006-03-10 Thread Thor Spruyt
First of all: READ http://www.freeradius.org/list/users.html => please send PLAIN TEST mails! For your question: read the docs about rlm_exec and rlm_perl -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide

Re: CVS down

2006-03-10 Thread Thor Spruyt
be require a login like with the bugs module. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

CVS down

2006-03-09 Thread Thor Spruyt
http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/ -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: New accounting database each month

2006-02-02 Thread Thor Spruyt
s required for >> backup/database size. Run a script each month that takes all records from the month before, do whatever with them and remove them from the database. I thought databases are especially friendly for stuff like that... -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 6

Re: Wiki is now live

2005-12-12 Thread Thor Spruyt
ist info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html Yet another thing to maintain... something that nobody has time for :( -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.tel

Re: Removing attributes from a reply

2005-10-11 Thread Thor Spruyt
l need the latest CVS version -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Removing attributes from a reply

2005-10-10 Thread Thor Spruyt
Joe Maimon wrote: > I need to remove an A/V from the reply list, but only if another A/V > is already there. > This needs to be done post-proxy stage for my needs. rlm_attr_filter can do it -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W:

Re: working rlm_perl example

2005-10-03 Thread Thor Spruyt
[EMAIL PROTECTED] wrote: > It seems that I missed the user file entry and the > Auth-Type Perl { > perl > } > > entry in the radiusd.conf file. That shouldn't be necessary, just calling the module in the authorize section should be sufficient. -- Groeten, Regards, Salu

Re: working rlm_perl example

2005-10-02 Thread Thor Spruyt
[EMAIL PROTECTED] wrote: > I have tried the example.pl and it still gives me a access-reject > message. Please provide your rlm_perl configuration and debug output of radiusd -X -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spru

Re: Postgresql+freeradius configuration

2005-09-26 Thread Thor Spruyt
dy to process requests. Try using 127.0.0.1 instead of localhost -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: cannot return access accept from proxy to client

2005-09-21 Thread Thor Spruyt
un in debug mode to see what queries are done. Check why they are failing and correct the queries. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscrib

Re: FreeRadius Proxying and Message-Authenticator

2005-09-15 Thread Thor Spruyt
I just wanted to give Alan some credit, so that the FreeRadius project will continue to evolve like it has before. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscr

Re: rlm_perl / rlm_python

2005-09-09 Thread Thor Spruyt
#x27;ll do it. Go for rlm_perl -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: not to return the detault attributes in reject?

2005-09-09 Thread Thor Spruyt
User, >>> Idle-Timeout=1800, >>> Session-Timeout=86000, -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Script to process authentications & accounting

2005-09-06 Thread Thor Spruyt
[EMAIL PROTECTED] wrote: > Is there any information about using a script with freeradius to > process authentications? rlm_exec rlm_perl (not stable) rlm_python (not stable) -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spru

Re: Cannot start freeradius

2005-09-02 Thread Thor Spruyt
e freeradius from source? Provide the output. Provide the complete output, also that what comes before the error. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with passwd module

2005-09-02 Thread Thor Spruyt
æt like the risk of restarting the server so >> foten. >> >> Any hints? Consider a seperate backend in which to store user credentials and let samba as well as freeradius auth against that backend. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PR

Re: rlm_perl support for pre/post-proxy in next release?

2005-09-02 Thread Thor Spruyt
Boian Jordanov wrote: > On Fri, Sep 02, 2005 at 01:16:31AM +0200, Thor Spruyt wrote: >> I'm wondering if rlm_perl will support pre/post-proxy functions in >> the next release? >> > > This is allready in CVS. You can checkout release 1.19 of rlm_perl and > use

rlm_perl support for pre/post-proxy in next release?

2005-09-01 Thread Thor Spruyt
Hi, I'm wondering if rlm_perl will support pre/post-proxy functions in the next release? Also, is there any chance to get bug 275 into next release? http://bugs.freeradius.org/show_bug.cgi?id=275 Or does it have to be discussed further on the list? -- Groeten, Regards, Salutations, Thor S

Re: Windows Client Authentification bevore Domain logon

2005-09-01 Thread Thor Spruyt
Please use correct terminology. It's "AUTHENTICATION", not "authentification"! To authenticate => authentication To authorize => authorization To account => accounting To identify => identification -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (

Re: TTLS-PAP only option for LDAP backend?

2005-08-30 Thread Thor Spruyt
l > software as suggested in this tutorial. > > http://vuksan.com/linux/dot1x/wpa-client-config.html#Windows_XP > > Is there a simpler way to accomplish the same thing? No -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor

Re: how to run sql query on radius startup

2005-08-30 Thread Thor Spruyt
7;t found anything like this. Any suggestions ? > I know I can run a query via psql from radius startup script, but I'd > prefer another solution if such exists. What exactly would you want to do? Maybe it serves a general purpose :) -- Groeten, Regards, Salutations, Thor Spruyt M

Re: (no subject)

2005-08-29 Thread Thor Spruyt
n etc/raddb/experimental.conf rlm_exec is stable, so your freeradius will support it already. The configuration is in etc/raddb/radiusd.conf You can use any executable script (which *can* be a perl script). Look in CVS, there's a lot of information added about rlm_exec! -- Groeten, Regards, Salutations

Re: wlse leap patches

2005-08-29 Thread Thor Spruyt
How about submitting them to bugs.freeradius.org? -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - Original Message - From: M.McNeil To: FreeRadius users mailing list Sent: Monday

Re: wlse leap patches

2005-08-29 Thread Thor Spruyt
Marc-Henri Boisis-delavaud wrote: > Hello > Were Can I found patches for cisco wlse work ? > Marc Huh... my best guess would be cisco.com :) -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.teleneth

rlm_attr_filter for proxied accounting packets

2005-08-27 Thread Thor Spruyt
r_filter.c to also accept accounting packets in the attr_filter_preproxy function, just let me know. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MySQL radacct not updated

2005-08-26 Thread Thor Spruyt
eck that what you expect also happens (in this case traffic arriving at your server). -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: not to return the detault attributes in reject?

2005-08-26 Thread Thor Spruyt
kevin wrote: > Still not sure how to handle with rlm_exec. > Can anybody give me more details? Maybe another solution.. in users file TART with: DEFAULT Auth-Type := Reject Fall-Through = Yes > > kevin > > Thor Spruyt wrote: > >> kevin wrote: >>

Re: freeradius proxy question

2005-08-24 Thread Thor Spruyt
[EMAIL PROTECTED] wrote: People might be able to do more if they had configs and debug output (-X) -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See

Re: not to return reply-attributes in reject?

2005-08-24 Thread Thor Spruyt
ggested Exec-Program-Wait = "reject.sh" > before. But, it didn't work for me. rlm_exec -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscri

Re: MySQL radacct not updated

2005-08-24 Thread Thor Spruyt
&q=tcpdump+howto&lr # tcpdump -s 0 -i eth0 -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MySQL radacct not updated (Thor Spruyt)

2005-08-24 Thread Thor Spruyt
server. Do a tcpdump on your radius server to verify that accounting packets are actually coming in! -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_exec and retriving RAD_REQUEST attribute values

2005-08-24 Thread Thor Spruyt
exec at http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/scripts/exec-program-wa it?rev=1.4&content-type=text/x-cvsweb-markup -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be

Re: Replaying data with tcpdump/netcat

2005-08-24 Thread Thor Spruyt
Alan DeKok wrote: >> with "tcpdump -s 1500 -w raw.txt port 1813 and udp". "-s 0" instead of "-s 1500" would be better, radius packets are not restricted to 1500 bytes. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMA

Re: Problem with PEAP and LDAP

2005-08-24 Thread Thor Spruyt
Carlos Martínez-Troncoso Cera wrote: > Hello. > > We are trying to use FreeRadius with PEAP and LDAP. You might consider TTLS with PAP instead of PEAP with MS-CHAP-V2 -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-s

Re: MySQL radacct not updated

2005-08-24 Thread Thor Spruyt
the correct radius server! -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MySQL radacct not updated

2005-08-23 Thread Thor Spruyt
they logout and then > login again the counter is reset back to its origional value. This > means > that user names and passwords last forever. Check that accounting packets sent by the NAS are actually received on your radius server. -- Groeten, Regards, Salutations, Thor Spruyt M:

Re: best place for logic - users file or custom module?

2005-08-23 Thread Thor Spruyt
fine ... but I suspect > something inefficent is happening with Radiator. rlm_perl is persistent -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: best place for logic - users file or custom module?

2005-08-23 Thread Thor Spruyt
hould be working fine already. There's a sample script included in the source distribution in src/module/rlm_perl/ The configuration of the module sits in etc/raddb/experimental.conf for now. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W

Re: Database field lengths for radacct and radpostauth

2005-08-22 Thread Thor Spruyt
Alan DeKok wrote: > The RFC's say that the passwords cannot be longer than 127 > characters. Submitted bug 270 to correct. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be -

Re: Acct-Session-Id too long

2005-08-22 Thread Thor Spruyt
> should I change column size from char32 to reasonable value ? Yes. Check the maximum characters that your NAS will ever send. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info

Database field lengths for radacct and radpostauth

2005-08-20 Thread Thor Spruyt
I've reported bug 266 with a patch for postgresql http://bugs.freeradius.org/show_bug.cgi?id=266 You don't know the maximum length of the username and password of your roaming partners, but you need to store those as well into the database. -- Groeten, Regards, Salutations, Thor Spr

Bug #256 should go into 1.0.5

2005-08-19 Thread Thor Spruyt
http://bugs.freeradius.org/show_bug.cgi?id=256 It's a really big mistake and only a 1-line change! -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe

Re: 802.1x and LDAP

2005-08-19 Thread Thor Spruyt
+802.1x+ldap+howto -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FR suddenly doesn't respond any more and eats all cpu

2005-08-19 Thread Thor Spruyt
esql database backends. When I stopped one server for maintenance, the radiusd process on the other server suddenly went to constantly using 100% CPU. When starting radiusd while 1 database is already down, this doesn't happen. Looks to me that it's not LDAP or Postgresql related :) -- Groete

Re: eap-ttls + PAP using Crypt-Password obtained by ldap

2005-08-11 Thread Thor Spruyt
Thor Spruyt wrote: > Florian Prester wrote: >> The Crypted-Password is working and it is available as >> Crypt-Password. (Tested with ntradping). >> I added "DEFAULTAuth-Type := pap" at the end of the >> users-file, without it wants to use lda

Re: eap-ttls + PAP using Crypt-Password obtained by ldap

2005-08-11 Thread Thor Spruyt
h-Type := pap See http://vuksan.com/linux/dot1x/802-1x-LDAP.html -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Using RADIUS for content filtering.

2005-07-29 Thread Thor Spruyt
This is completely NAS-specific, so read your NAS documentation to know what attributes and values to return. P.S.: try sending plain-text mail next time :) -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be

Re: Authentication Responses during error conditions

2005-07-28 Thread Thor Spruyt
then the NAS should switch to the other radius server. Maybe your NAS can also do round-robin for load-balancing. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/u

Re: Authentication Responses during error conditions

2005-07-28 Thread Thor Spruyt
Doug Hardie wrote: > I am a bit confused now. I understood that if a module returns > RLM_MODULE_FAIL that radiusd would not return an authorization > reject. However, it appears that it still does. Have a look at doc/configurable-failover -- Groeten, Regards, Salutations, Thor Spru

Re: session-time with incorrect calculations

2005-07-26 Thread Thor Spruyt
our NAS features/configuration. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: IPTABLES - continued

2005-07-22 Thread Thor Spruyt
g for some example > IPTABLES (fedora core) entries that would enable UDP access to > FreeRadius. http://www.google.be/search?hl=nl&q=iptables+sample&meta= -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.sal

Re: Postgres problem

2005-07-21 Thread Thor Spruyt
Try connecting to the postgresql database with the same user/pass and from the same host as freeradius. Check access rights to the database. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be

Re: rlm_sql_mysql make error for 1.0.4 and snapshot-20050718

2005-07-19 Thread Thor Spruyt
Paul Hampson wrote: > On Mon, Jul 18, 2005 at 05:22:51PM +0200, Thor Spruyt wrote: >> Hi, >> `/home/thor/freeradius-1.0.4/src/modules/rlm_sql/drivers/rlm_sql_mysql' >> gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS >> -DOPENSSL_NO_KRB5 -Wal l -D_GN

rlm_sql_mysql make error for 1.0.4 and snapshot-20050718

2005-07-18 Thread Thor Spruyt
ql/drivers/rlm_sql _mysql' gmake[9]: *** [common] Error 2 gmake[9]: Leaving directory `/home/thor/freeradius-snapshot-20050718/src/modules/rlm_sql/drivers' gmake[8]: *** [dynamic] Error 2 gmake[8]: Leaving directory `/home/thor/freeradius-snapshot-20050718/src/modules/rlm_sql/drivers&#x

Re: mrtg

2005-06-09 Thread Thor Spruyt
atabase from which this info can be retrieved. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

error at end of make install

2005-06-03 Thread Thor Spruyt
/src' gmake[2]: *** [install] Error 2 gmake[2]: Leaving directory `/home/thor/freeradius-1.0.3/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/home/thor/freeradius-1.0.3' make: *** [install] Error 2 -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E:

Re: rlm_perl and perl modules

2005-04-19 Thread Thor Spruyt
ions and see if that works. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius with postgresql (Login incorrect)

2005-04-14 Thread Thor Spruyt
Title: Freeradius with postgresql (Login incorrect) Please send mail in PLAIN TEXT! I don't know where YOU see an error message, but I don't see any. I would suggest turning SQL traces on (see postgresql.conf)   --Groeten, Regards, Salutations,   Thor SpruytM: +32 (0)475 67 22 65E: [EMAIL PROT

Re: dictionary file - rfc compilant or not - Authen::Radius?

2005-04-12 Thread Thor Spruyt
valid dictionary if you plan to send Radius requests with other attributes than just User-Name/Password. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscrib

Re: Fail_over

2005-04-01 Thread Thor Spruyt
Rangel, Luciano wrote: > "Rangel, Luciano" <[EMAIL PROTECTED]> wrote: >> What should I do to configure fail-over in my freeradius ? Read doc/configurable_failover and try. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTE

Re: Integrating with freeradius and postgresql.

2005-04-01 Thread Thor Spruyt
Integrating with freeradius and postgresql.Sure. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - Original Message - From: Brian Gao To: 'freeradius-users@lists.freeradiu

Re: Freeradius documentation

2005-03-30 Thread Thor Spruyt
Helder Lima wrote: > Thanks for response. > And how about freeradius configuration and function description? www.freeradius.org doc directory comments in config files source code -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spru

Re: FreeRadius logging lots of duplicates?

2005-03-05 Thread Thor Spruyt
on the NAS you should be able to configure how many times the NAS has to retry to send the packet and at which interval. The settings you should choose depend greatly on the connection between your NAS and your server. -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EM

Re: questions about the clients.conf file

2005-02-25 Thread Thor Spruyt
Q1: split the internet in half: 0.0.0.0/1 and 128.0.0.0/1 Q2: read sql docs and configuration files - Original Message - From: Lists To: freeradius-users@lists.freeradius.org Sent: Friday, February 25, 2005 5:34 PM Subject: questions about the clients.conf file Hi, I have two questions a

  1   2   3   4   >