rlm_python and post-auth manipulation.

2009-10-21 Thread phil lemelin
Good day Freeradius users, I am trying to use the rlm_python module to do additional actions after an user has been authenticated. To learn, I'm using the radiusd_test.py which is in the python path. I haven't found an indication that says it is impossible to do, correct me if I'm wrong

Re: rlm_python and post-auth manipulation.

2009-10-21 Thread phil lemelin
Gents, so long as you are using FR 2.1.x then you shouldnt need to do that - just simply edit experimental.conf to make sure the python stuff is active and then edit radiusd.conf to make sure that experimental.conf is included (you did compile FR with experimental modules enabled?) then

Re: rlm_python and post-auth manipulation.

2009-10-21 Thread phil lemelin
Alan, Thank you for you time. I downloaded, compiled and installed the 2.1.7 version. I replaced my /usr/local/raddb folder by the 2.1.7 raddb folder and used that to make sure my config didnt conflict. I only modified radiusd.conf to add experimental.conf and added python in the post-auth

Re: rlm_python and post-auth manipulation.

2009-10-21 Thread phil lemelin
cannot work. The key for me here was to update to 2.1.7 Thank you. On Wed, Oct 21, 2009 at 3:37 PM, phil lemelin phil.leme...@gmail.comwrote: Alan, Thank you for you time. I downloaded, compiled and installed the 2.1.7 version. I replaced my /usr/local/raddb folder by the 2.1.7 raddb folder

Re: Poll: Bug reporting system

2009-04-14 Thread phil lemelin
Personnaly, I like the simplicity of TRAC. Easy to install, easy to maintain et does the job quite well. The integration with subversion makes it very interesting. It seems it also supports GIT. If it works like subversion, the integration is very intersting since you can link code with tickets.

Re: EAP/TLS -- FreeRadius -- 802.1x

2009-03-27 Thread phil lemelin
Looks like I can't get enough radius. I started testing with different users today and noticed something I can't explain. Let's say my user is : phil Let's say the pass is : unpassword If I enter the following password : punpassword I get the following in radiusd -X : [pap] login attempt with

Re: Trouble with PPTP FreeRadius

2009-03-27 Thread phil lemelin
FreeRadius debug log of failed connection: Ready to process requests. rad_recv: Access-Request packet from host 172.26.69.8 port 1479, id=77, length=146 User-Name = test26 NAS-Port = 8057 Service-Type = Framed-User Framed-Protocol = PPP

Re: 802.1X - FreeRadius question

2009-03-27 Thread phil lemelin
wpa_supplicant for open solaris. Dunno if I would work. I know nothing about it. http://opensolaris.org/os/community/laptop/wireless/wpa/ On Fri, Mar 27, 2009 at 7:23 PM, John Tabasz (jtabasz) jtab...@cisco.comwrote: Hi, Has anyone one the list ever figured out how to run 802.1X with Sparc

Re: Error binding to port for 0.0.0.0 port 1812

2009-03-26 Thread phil lemelin
I think of CentOS 5.2, but do I really need to download 7 iso images to put it into work? Download the DVD version if you have a dvd drive ? Did you do : freeradius stop killall freeradius ps -fe | grep -i radius kill -s 9 `ps -fe | grep -i radius` updatedb `locate radiusd | grep bin | grep

Re: Problems starting radius daemon

2009-03-26 Thread phil lemelin
You should post the output off radiusd -X. 2009/3/26 Sanz Malagón, Jorge jsan...@indra.es Hi every body, My name is Jorge Sanz, from Spain, and this is my first mail in this list. I’m working with a Freeradius installed over OpenSUSE 11.0. It was working properly until I tryed to

Re: EAP/TLS -- FreeRadius -- 802.1x

2009-03-26 Thread phil lemelin
Following on my adventure with freeradius, I decided to enable mysql and use EAP-TTLS. Having my passwords in SQL, I now want to encrypt them ( MD5 ) and use them to authenticate my user. After reading the protocols compatibility matrix ,I saw that with EAP-TTLS, with tunneled PAP, I should be

Re: EAP/TLS -- FreeRadius -- 802.1x

2009-03-26 Thread phil lemelin
1- What do I set the attribute field to in the radcheck table to use MD5 passwords ? Crypt-Password In which scenario should MD5-Password be used ? 3- Is there a good reference to setup the mysql database to use authentication ? Frankly, the ammount of questions and conflicting

Re: EAP/TLS -- FreeRadius -- 802.1x

2009-03-26 Thread phil lemelin
Okay. Generating my password with : htpasswd -nd plemelin ( crypt ) and setting the attribute to crypt-password in mysql did the trick. Generating the password with : htpasswd -nm plemelin ( md5 ) and setting the attribute to MD5-password doesnt work. I think i did enough radius for the

Re: rlm_sql_getvpdata: database query error

2009-03-26 Thread phil lemelin
On Thu, Mar 26, 2009 at 3:30 PM, t...@kalik.net wrote: radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheckAttribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '0021709d3d47' AND usergroup.GroupName =

Re: EAP/TLS -- FreeRadius -- 802.1x

2009-03-25 Thread phil lemelin
Good morning freeradius users, Using the documents Alan linked here, I managed to configure everything to use EAP-TTLS. I have a question, which might not be related to freeradius directly, but more to EAP-TTLS. Why is the username sent in clear over the network ? - List

Re: EAP/TLS -- FreeRadius -- 802.1x

2009-03-24 Thread phil lemelin
Thank you for your pointers Alan, I now have a port based authentication using wpa_supplicant, freeradius and a dell switch. Next step would be to use something more secure than the default MD5 i'm using. I'll keep reading. Thank you again. On Wed, Mar 18, 2009 at 12:35 PM, phil lemelin

Re: ldap+freeradius

2009-03-24 Thread phil lemelin
From your log. [pap] Passwords don't match -- Philippe-Alexandre Lemelin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

EAP/TLS -- FreeRadius -- 802.1x

2009-03-18 Thread phil lemelin
Good morning FreeRadius users. I'm going forward with my attempt to configure freeradius and 802.1x to try to secure part of a wired network. I have been reading about FreeRadius, 802.1x, EAP/TLS and XSupplicant. I came accross a link that doesnt work in the freeradius wiki about exactly those

Re: EAP/TLS -- FreeRadius -- 802.1x

2009-03-18 Thread phil lemelin
I have been reading about FreeRadius, 802.1x, EAP/TLS and XSupplicant. I came accross a link that doesnt work in the freeradius wiki about exactly those subject but I found something on the linux documentation project ( http://tldp.org/HOWTO/html_single/8021X-HOWTO/ ) which seems to cover

Re: FreeRadius with Postgresql

2009-03-17 Thread phil lemelin
Please link me to a resources on how to make FreeRadius to work with postgreSQL on Ubuntu 8.04 LTS? You configure raddb/sql.conf. And create the database with scripts in raddb/sql/postgresql/. Then uncomment sql where you need it (authorize, accounting, session, ...) in