Re: Re: Re: Logging eap protocols

Sorry for my previous email;) I was meaning: %{control:Auth-Type} In my configuration, I use two different auth-type, one for PAP, one for MS-CHAP. Regards, Vincent Vincent Magnin [EMAIL PROTECTED] a écrit : Bonjour, Avez-vous essayé d'utiliser %{Auth-Type} ? Salutations, Vincent

Re: Re: Logging eap protocols

Bonjour, Avez-vous essayé d'utiliser %{Auth-Type} ? Salutations, Vincent Magnin Richard Timsit [EMAIL PROTECTED] a écrit : Alan DeKok a écrit : You can use %{EAP-Type} to log the EAP type. It would best be done as part of a post-auth section. Ok, this works perfectly, thanks a lot

Re: Filtering RADIUS request to only allow EAP-TTLS in a proxying-only server?

Hello Peter, Try to look at attr_filter section and configure it as you wishes: In your radiusd.conf: attr_filter attr_filter.post-proxy { attrsfile = ${some path}/attrs.post-proxy } This file may contains similar information: DEFAULT User-Name =* ANY, Reply-Message =*

Re: Rule for don't log specific user session.

Hello Rafael, It should be possible in Freeradius 2 and using unlang language: if (User-Name != test-user) { sql_log } Regards, Vincent M. Rafael Medici [EMAIL PROTECTED] a écrit : Hello, Is there a way to don't log nothing for a specific user, creating a rule in sql_log? You will

Re: Re: Freeradius2 and proxing

Alan DeKok [EMAIL PROTECTED] a écrit : Does exist a better way to use the DEFAULT realm? Nope. I've added a patch with the same behavior. Thank you, Vincent Magnin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Re: Freeradius2 and proxing

to handle the DEFAULT realm. Regards, Vincent Magnin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius2 and proxing

= DEFAULT rlm_realm: Preparing to proxy authentication request to realm DEFAULT Does exist a better way to use the DEFAULT realm? Regards, Vincent Magnin Vincent Magnin [EMAIL PROTECTED] a écrit : In freeradius 1, if I need to proxy requests whose realm are remote, I put the following

Re: EAP/TTLS on LDAP with freeradius 2.0.1

/unsubscribe? See http://www.freeradius.org/list/users.html -- Vincent Magnin[EMAIL PROTECTED] Ingénieur Réseau Télécom +41 21 692 22 48 UNIL, Centre

Freeradius2 and proxing

PROTECTED] rlm_realm: Found realm extern.realm.com rlm_realm: Proxying request from user anonymous to realm extern.realm.com rlm_realm: Adding Realm = extern.realm.com rlm_realm: Preparing to proxy accounting request to realm extern.realm.com Regards, Vincent Magnin - List info

inner/outer Tunnel attributes of TTLS/MS-CHAPv2

Hello All, I've an issue with passing attributes from EAP TTLS MS-CHAPv2 to outer: My /etc/raddb/users contains: DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1 User-Name := `%{User-Name}`, Fall-Through = yes And my eap ttls module contains: copy_request_to_tunnel = yes

Re: Re: inner/outer Tunnel attributes of TTLS/MS-CHAPv2

Hello Alan, You have right, this version is too old and do not support this feature (I've checked src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c). This version is the one supplied with Redhat Enterprise 4. I'll compile 1.1.7 from source. Regards, Vincent Magnin Alan DeKok [EMAIL PROTECTED