Re: SSL V3 client certificate error

2013-02-28 Thread Phil Mayers
: Auth: Login OK: [sdholakia2] (from client AllWirelessAP port 0 cli A0-88-B4-0F-C3-D8) *Fri Feb 22 18:36:30 2013 : Error: TLS Alert read:fatal:unknown CA Fri Feb 22 18:36:30 2013 : Error: TLS_accept:failed in SSLv3 read client certificate A Fri Feb 22 18:36:30 2013 : Error: rlm_eap: SSL error error

Re: SSL V3 client certificate error

2013-02-28 Thread Danny Kurniawan
thank you so much .. yes it only have issue intermitenly on some user .. so i have to set our client laptop manually for the root CA? I believe it should be there as we use Global Sign ... -- Best Regards, Danny - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: returning error code of script to module

2013-02-26 Thread Phil Mayers
On 02/26/2013 08:54 AM, Chitrang Srivastava wrote: Hi, Is their a way to return status code of an external script to the module. Let me explain the problem: PEAP-MSCHAPv2 with ldap and fallback is also there i.e. if ldap server is not reachable do local auth. Now mschapv2 authentication with

Re: returning error code of script to module

2013-02-26 Thread Phil Mayers
it to the error output of ntlm_auth What kind of comparision are you doing ? The example above is a case-insensitive regexp. See man unlang - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Compilation error of 2.x.x

2013-02-15 Thread Srinu Bandari
Hi, I am trying to make 2.x.x branch, I see following error.. Can anyone help?? gcc -o .libs/radeapclient .libs/radeapclient.o libeap/.libs/libfreeradius-eap.so /root/Desktop/freeradius-server-2.x.x/src/lib/.libs/libfreeradius-radius.so -lssl -lcrypto -lnsl -lresolv -lpthread -Wl,--rpath -Wl

Re: Compilation error of 2.x.x

2013-02-15 Thread Alan DeKok
Srinu Bandari wrote: I am trying to make 2.x.x branch, I see following error.. Can anyone help?? Whoops. That's an error. The fix is simple: $ git pull Thanks for the testing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radiusd -X error

2013-02-15 Thread David Peterson
Just downloaded the latest code and received this error: Fri Feb 15 15:54:17 2013 : Debug: Module: Instantiating eap-tls Fri Feb 15 15:54:17 2013 : Debug:tls { Fri Feb 15 15:54:17 2013 : Debug: tls = tls-common Fri Feb 15 15:54:17 2013 : Error: type -1220981894 not supported yet

Re: Radiusd -X error

2013-02-15 Thread Alan DeKok
David Peterson wrote: Just downloaded the latest code Which latest code ? and received this error: Fri Feb 15 15:54:17 2013 : Debug: Module: Instantiating eap-tls Fri Feb 15 15:54:17 2013 : Debug:tls { Fri Feb 15 15:54:17 2013 : Debug: tls = tls-common Fri Feb 15

RE: Radiusd -X error

2013-02-15 Thread David Peterson
Subject: Re: Radiusd -X error David Peterson wrote: Just downloaded the latest code Which latest code ? and received this error: Fri Feb 15 15:54:17 2013 : Debug: Module: Instantiating eap-tls Fri Feb 15 15:54:17 2013 : Debug:tls { Fri Feb 15 15:54:17 2013 : Debug: tls

Complie error

2013-02-14 Thread David Peterson
What might I be missing when I get this error: (Version 2.x.x) Making all in rlm_eap_pwd... make[9]: Entering directory `/usr/src/freeradius-server/src/modules/rlm_eap/types/rlm_eap_pwd' make[9]: *** No rule to make target `rlm_eap_pwd.h', needed by `rlm_eap_pwd.c'. Stop. - List info

Re: Complie error

2013-02-14 Thread A . L . M . Buxey
Hi, What might I be missing when I get this error: (Version 2.x.x) Making all in rlm_eap_pwd... make[9]: Entering directory `/usr/src/freeradius-server/src/modules/rlm_eap/types/rlm_eap_pwd' make[9]: *** No rule to make target `rlm_eap_pwd.h', needed

Re: Complie error

2013-02-14 Thread Alan DeKok
David Peterson wrote: What might I be missing when I get this error: (Version 2.x.x) Making all in rlm_eap_pwd... make[9]: Entering directory `/usr/src/freeradius-server/src/modules/rlm_eap/types/rlm_eap_pwd' make[9]: *** No rule to make target `rlm_eap_pwd.h', needed by `rlm_eap_pwd.c

RE: Complie error

2013-02-14 Thread David Peterson
list Subject: Re: Complie error David Peterson wrote: What might I be missing when I get this error: (Version 2.x.x) Making all in rlm_eap_pwd... make[9]: Entering directory `/usr/src/freeradius-server/src/modules/rlm_eap/types/rlm_eap_pwd' make[9]: *** No rule to make target `rlm_eap_pwd.h

RE: Complie error

2013-02-14 Thread David Peterson
14, 2013 12:06 PM To: freeradius-users@lists.freeradius.org Subject: Re: Complie error On 14/02/13 16:57, David Peterson wrote: It looks like it was my flawed git skills hard at work. So now I am fighting libtool. What is the best method for a successful compile and install for Ubuntu where

RE: Complie error

2013-02-14 Thread Phil Mayers
That might be your /etc/ld.so.conf - see the man pages for ld.so and check /usr/local/lib is there or in rpath (ldd radiusd) Alternatively ./configure --prefix /usr David Peterson dav...@wirelessconnections.net wrote: It compiles properly but when I run the daemon it can't find the

Re: Complie error

2013-02-14 Thread A . L . M . Buxey
Hi, It compiles properly but when I run the daemon it can't find the freeradius libs. I get this at the end of compile: PATH=$PATH:/sbin ldconfig -n /usr/local/lib -- Libraries have been installed in: /usr/local/lib

Re: FTP Error when Radius is UP

2013-02-11 Thread George Innocent
Find attached the Output. On 8 February 2013 03:44, a.l.m.bu...@lboro.ac.uk wrote: Hi, But when the Radius is DOWN ; FTP connection is successful and the plotter works too but fails when its UP. then follow the instructions. send radiusd -X output I bleieve that you've got a

FTP Error when Radius is UP

2013-02-07 Thread George Innocent
Hi; I am using Freeradius on Ubuntu; The authentification part works fine but i am facing challenges when i try to ftp nodes on the network. When the Radius server is UP i get ftp error failure connection on the Nodes but with the Radius off the ftp works. FTP configuration on the Nodes

Re: FTP Error when Radius is UP

2013-02-07 Thread Alan DeKok
George Innocent wrote: I am using Freeradius on Ubuntu; The authentification part works fine but i am facing challenges when i try to ftp nodes on the network. When the Radius server is UP i get ftp error failure connection on the Nodes but with the Radius off the ftp works. FTP configuration

Re: FTP Error when Radius is UP

2013-02-07 Thread George Innocent
challenges when i try to ftp nodes on the network. When the Radius server is UP i get ftp error failure connection on the Nodes but with the Radius off the ftp works. FTP configuration on the Nodes are configured well. What could i be missing RADIUS doesn't do FTP. You've shown by your

Re: FTP Error when Radius is UP

2013-02-07 Thread Alan Buxey
Huh? How are the 2 related? What have you done to get onto thus state? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RADIUS authentication using MS-CHAP - no cleartext password configured error

2013-02-06 Thread Deepti kulkarni
I have a windows client trying to set up L2TP tunnel with my linux router. The linux router talks with the RADIUS server. The authentication is failing because the request is using MS-CHAP and my server cannot handle MS-CHAP. I am not sure what is missing from the configuration on the server. I

Re: RADIUS authentication using MS-CHAP - no cleartext password configured error

2013-02-06 Thread Alan DeKok
Deepti kulkarni wrote: I have a windows client trying to set up L2TP tunnel with my linux router. The linux router talks with the RADIUS server. The authentication is failing because the request is using MS-CHAP and my server cannot handle MS-CHAP. I am not sure what is missing from the

Re: PAM error on reboot of the RADIUS client

2013-02-05 Thread Alan DeKok
Deepti kulkarni wrote: Authentication and accounting works fine after I configure the above on the client. As soon as I reboot client, login fails with error - cannot make/remove an entry for the specified session. Cannot login into the client. Unfortunately, this is a PAM problem. I have

Re: PAM error on reboot of the RADIUS client

2013-02-05 Thread Deepti kulkarni
and accounting works fine after I configure the above on the client. As soon as I reboot client, login fails with error - cannot make/remove an entry for the specified session. Cannot login into the client. Unfortunately, this is a PAM problem. I have no idea how to fix this. I suggest

Re: PAM error on reboot of the RADIUS client

2013-02-05 Thread Alan DeKok
Deepti kulkarni wrote: Thanks. PAM doesnt support authorization either right? What radius client do you prefer that can support authentication, authorization and accounting for linux machines? There is nothing else. Alan DeKok - List info/subscribe/unsubscribe? See

Error syntax in sql accounting.

2013-02-04 Thread Hocine M
Hi everybody, I always have an error in radius.log file : Mon Feb 4 16:16:52 2013 : Error: [sql_acct] Couldn't insert SQL accounting START record - Erreur de syntaxe pr?s de '' ? la ligne 1 Mon Feb 4 16:17:01 2013 : Error: [sql_acct] Couldn't insert SQL accounting START record - Erreur de

Re: Error syntax in sql accounting.

2013-02-04 Thread Alan DeKok
Hocine M wrote: Hi everybody, I always have an error in radius.log file : Mon Feb 4 16:16:52 2013 : Error: [sql_acct] Couldn't insert SQL accounting START record - Erreur de syntaxe pr�s de '' � la ligne 1 Don't edit the configuration files and break them. You do understand what

PAM error on reboot of the RADIUS client

2013-02-04 Thread Deepti kulkarni
and secret key to /etc/pam_radius_auth.conf Authentication and accounting works fine after I configure the above on the client. As soon as I reboot client, login fails with error - cannot make/remove an entry for the specified session. Cannot login into the client. Thanks - List info/subscribe

Re: PAM error on reboot of the RADIUS client

2013-02-04 Thread Deepti kulkarni
Authentication and accounting works fine after I configure the above on the client. As soon as I reboot client, login fails with error - cannot make/remove an entry for the specified session. Cannot login into the client. Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Stephan Manske
Am 23.01.2013, 19:53 Uhr, schrieb Stephan Manske gmane-re...@stephan.manske-net.de: Yes, it is a ssl problem, the ca.key and all the certs are incompatible. And no, it is not only a ssl problem, it is a freeradius problem, too: Unless the makefile in certs is provided by openssl, but I

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Stephan Manske
Am 22.01.2013, 22:19 Uhr, schrieb Alan DeKok al...@deployingradius.com: Stephan Manske wrote: [tls] -- verify return:1 -- verify error:num=7:certificate signature failure [tls] TLS 1.0 Alert [length 0002], fatal decrypt_error TLS Alert write:fatal:decrypt error TLS_accept: error in SSLv3

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Alan DeKok
Stephan Manske wrote: Unless the makefile in certs is provided by openssl, but I think this is freeradius stuff, or? The Makefile I pointed to was written by me. It runs OpenSSL scripts to create certificates. It uses sample configurations written by me. It works for *everyone* else. If

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Alan DeKok
Stephan Manske wrote: I think I found the issue: ... makes ca.key dependant to the date of index.txt and serial Both files are updated every time a new client cert is build. IMHO. OK. That's a better explanation than FreeRADIUS is wrong. There's a fix on github, which will be in 2.2.1.

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread A . L . M . Buxey
Hi, IMHO these patch https://github.com/FreeRADIUS/freeradius-server/commit/2d3f119cd8d9e99028f968db1ee108eb6f05db09#raddb/certs/Makefile with +ca.key ca.pem: ca.cnf index.txt serial you stated earlier that you didnt touch freeradius...that all you did was update OpenSSL to the latest

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Stephan Manske
Am 23.01.2013, 21:03 Uhr, schrieb Alan DeKok al...@deployingradius.com: Stephan Manske wrote: Unless the makefile in certs is provided by openssl, but I think this is freeradius stuff, or? It works for *everyone* else. If you didn't use the Makefiles to create the certs, then don't

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread John Dennis
if there already is a cert with the same subject, which there will be unless you edit the client.cnf file. This causes the ca command to fail. It doesn't matter if the cert with the duplicate subject has a different serial number. As for why in different circumstances you've seen openssl emit the error

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Stephan Manske
Am 23.01.2013, 21:13 Uhr, schrieb Alan DeKok al...@deployingradius.com: Stephan Manske wrote: I think I found the issue: ... makes ca.key dependant to the date of index.txt and serial Both files are updated every time a new client cert is build. IMHO. OK. That's a better explanation

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Stephan Manske
Am 23.01.2013, 21:23 Uhr, schrieb a.l.m.bu...@lboro.ac.uk: IMHO these patch https://github.com/FreeRADIUS/freeradius-server/commit/2d3f119cd8d9e99028f968db1ee108eb6f05db09#raddb/certs/Makefile with +ca.key ca.pem: ca.cnf index.txt serial you stated earlier that you didnt touch

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-23 Thread Alan DeKok
Stephan Manske wrote: Does this work with specific make commands only? So you cannot use it in freeradius to be compatible? It only works with GNU Make. Version 3 has a new build system, which requires GNU Make. It could be done there. Alan DeKok. - List info/subscribe/unsubscribe? See

suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-22 Thread Stephan Manske
[eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] eaptls_verify returned 7 [tls] Done initial handshake [tls] TLS 1.0 Handshake [length 03de], Certificate [tls] chain-depth=1, [tls] error=0 [tls] -- User-Name = User Name [tls] -- BUF-Name = Radius CA [tls] -- subject = /C=DE

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-22 Thread Alan DeKok
, shared secrets. [tls] -- verify return:1 -- verify error:num=7:certificate signature failure [tls] TLS 1.0 Alert [length 0002], fatal decrypt_error TLS Alert write:fatal:decrypt error TLS_accept: error in SSLv3 read client certificate B rlm_eap: SSL error error:04067084:rsa

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-22 Thread Stephan Manske
= 0x7d1f9f227f1c92c8e3xx and so on? [tls] -- verify return:1 -- verify error:num=7:certificate signature failure [tls] TLS 1.0 Alert [length 0002], fatal decrypt_error TLS Alert write:fatal:decrypt error TLS_accept: error in SSLv3 read client certificate B rlm_eap: SSL error error:04067084:rsa

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-22 Thread Stephan Manske
Am 22.01.2013, 23:44 Uhr, schrieb Alan DeKok al...@deployingradius.com: Stephan Manske wrote: any hint where I can found more to read about what I should test? Which parameters I have to use with openssl command? See raddb/certs/Makefile, it's all there. OK, and I will try my luck at

Re: suddenly problem with certificates / error in SSLv3 read client certificate B

2013-01-22 Thread Alan DeKok
Stephan Manske wrote: regrettably no. All my certificate clients are affected. And there is at least one, namely my android, which connects every day. And this one has no problems for 3 days after update, and now it has the problem. Well, it's not a FreeRADIUS issue. The error is in the SSL

Starting RADIUS server: gdbm fatal: write error

2013-01-21 Thread pamela pomary
Hello Folks I encountered an error - 'Starting RADIUS server: gdbm fatal: write error' while restarting my radius service this morning. Any help please! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Starting RADIUS server: gdbm fatal: write error

2013-01-21 Thread pamela pomary
I found the solution. Apparently server disk got full. Had to clear some logs to make room for some space. Thank You. On Mon, Jan 21, 2013 at 9:19 AM, pamela pomary ppom...@gmail.com wrote: Hello Folks I encountered an error - 'Starting RADIUS server: gdbm fatal: write error' while

Compilling error

2013-01-11 Thread Черкендов Александр Армаисович
/freeradius-server-2.2.1/src -I/cygdrive/d/fr/freeradius-server-2.2.1/libltdlradeapclient.c -o radeapclient radeapclient.c:40:23: фатальная ошибка: eap_types.h: No such file or directory Компиляция прервана. builtin: recipe for target `radeapclient' failed make[6]: *** [radeapclient] Error 1 File

Re: attribute type error

2013-01-08 Thread Michael Lecuyer
On 1/7/2013 22:48 PM, Yashaswini Sathyanarayana wrote: Hi , By default all standard attribute like user-name, user-password are of type 1 and length 1. But kineto attributes are of type 2 and length 2. So is there a way to make RFC-2865 dictionary that is added in free

Re: attribute type error

2013-01-08 Thread Phil Mayers
On 01/08/2013 03:48 AM, Yashaswini Sathyanarayana wrote: Hi , By default all standard attribute like user-name, user-password are of type 1 and length 1. This is wrong. I don't know what you think you mean, but standard attributes each have a different type, and different lengths.

attribute type error

2013-01-07 Thread Yashaswini Sathyanarayana
Hi, I need to send kineto attributes from seagull to free radius which are of type 2. But the standard attributes like user name are of type 1. Is there a way to make standard attribute in RFC-2865 to type 2?? Please help. Thanks Regards, Yashaswini | Prod Engg | Tech

Re: attribute type error

2013-01-07 Thread Alan DeKok
Yashaswini Sathyanarayana wrote: Hi, I need to send kineto attributes from seagull to free radius which are of type 2. But the standard attributes like user name are of type 1. Is there a way to make standard attribute in RFC-2865 to type 2?? Please help. What does

RE: attribute type error

2013-01-07 Thread Yashaswini Sathyanarayana
Hi , By default all standard attribute like user-name, user-password are of type 1 and length 1. But kineto attributes are of type 2 and length 2. So is there a way to make RFC-2865 dictionary that is added in free radius to type 2. Please help. Thanks Regards,

no response from server for ID 10 socket 3 error

2013-01-04 Thread Tory Galer
I have a radius server (freeradius2). I'm attempting to use the ldap module to connect and use my ldap server users (389-directory server). Prior to making changes to various config files, I was able to get an accept packet when running: radtest testing password 127.0.0.1 0 testing123 I

Re: no response from server for ID 10 socket 3 error

2013-01-04 Thread Alan DeKok
Tory Galer wrote: When I attempt to run: # radtest testuser password ldap-dev-001.brontolabs.local 0 testing123-1 You're sending RADIUS requests to the LDAP server? and then I eventually get: radclient: no response from server for ID 10 socket 3 Yup. I have checked to make sure that

Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-30 Thread Alan Buxey
This fails without fail every Sunday? In that case check what happens... eg if that HUP'ING of the freeradius is a weekly crontab then investigate what else is going on at that time ...eg there appear to be mysql errors - ate you using mysql? If so, its not good having errors with that module

[Resolved]Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-30 Thread EasyHorpak.com
On 30/12/2555 13:47, Fajar A. Nugraha wrote: On Sun, Dec 30, 2012 at 9:41 AM, EasyHorpak.com i...@easyhorpak.com wrote: On 30/12/2555 09:12, EasyHorpak.com wrote: Dear all I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p

freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-29 Thread EasyHorpak.com
Dear all I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY) with the error code Sun Dec 30 06:50:40 2012 : Info: Received HUP signal. Sun Dec 30 06:50:40 2012 : Info: HUP - Re-reading configuration files

Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-29 Thread EasyHorpak.com
On 30/12/2555 09:12, EasyHorpak.com wrote: Dear all I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY) with the error code Sun Dec 30 06:50:40 2012 : Info: Received HUP signal. Sun Dec 30 06:50:40 2012

Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-29 Thread Fajar A. Nugraha
On Sun, Dec 30, 2012 at 9:41 AM, EasyHorpak.com i...@easyhorpak.com wrote: On 30/12/2555 09:12, EasyHorpak.com wrote: Dear all I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY) Sun Dec 30 06:50:40 2012

Re: FreeRadius Running Error

2012-12-05 Thread Alan DeKok
QASIM RAO wrote: sir i have upgraded my free radius version to freeradius-server 2.2 it runs fine.. now i change rlm_sql module of my older version Why? That makes absolutely no sense. when i run make command it gives following errors... You need to understand programming before

RE: FreeRadius Running Error

2012-11-30 Thread QASIM RAO
-server-2.2.0/src -I/usr/src/freeradius-server-2.2.0/libltdl -I/usr/src/freeradius-server-2.2.0/libltdl -I/usr/src/freeradius-server-2.2.0/src/modules/rlm_sql -c rlm_sql.c -fPIC -DPIC -o .libs/rlm_sql.orlm_sql.c:29:22: error: autoconf.h: No such file or directoryrlm_sql.c:45:21: error: radiusd.h

Re: FreeRadius Running Error

2012-11-27 Thread Fajar A. Nugraha
On Tue, Nov 27, 2012 at 1:55 PM, QASIM RAO qasim2...@hotmail.com wrote: Hi, i am facing problem in freeradius i m already using freeradius it was working fine now i re-install radius and now when i start radius with radiusd -X command it is giving following error please help me

Re: FreeRadius Running Error

2012-11-27 Thread Alan DeKok
QASIM RAO wrote: Hi, i am facing problem in freeradius i m already using freeradius it was working fine now i re-install radius and now when i start radius with radiusd -X command it is giving following error please help me in this Starting - reading configuration files

FreeRadius Running Error

2012-11-26 Thread QASIM RAO
Hi,i am facing problem in freeradius i m already using freeradius it was working fine now i re-install radius and now when i start radius with radiusd -X command it is giving following error please help me in this Starting - reading configuration files ...reread_config: reading

EAP-TLS error: RSA_padding_check_PKCS1_type_1:block type is not 01

2012-11-21 Thread Swaraj
, as I was able to run without any issues on x86 with same certificates. Because it has different software. May I know, what is that different software? Tue Nov 20 16:48:05 2012 : Error: TLS Alert write:fatal:decrypt error Tue Nov 20 16:48:05 2012 : Error: TLS_accept: failed in SSLv3 read

Error: [ldap] All ldap connections are in use

2012-11-21 Thread Phil Brown
We have started seeing problems our radius server with the Error Error: [ldap] All ldap connections are in use We have increased the ldap_connections_number from 5 to 20 which has largely resolved the issue. we now receive over 100,000 authentications a day, is there any guide

Re: Error: [ldap] All ldap connections are in use

2012-11-21 Thread Arran Cudbard-Bell
On 21 Nov 2012, at 13:00, Phil Brown phil.br...@port.ac.uk wrote: We have started seeing problems our radius server with the Error Error: [ldap] All ldap connections are in use We have increased the ldap_connections_number from 5 to 20 which has largely resolved the issue. we now

EAP-TLS error: RSA_padding_check_PKCS1_type_1:block type is not 01

2012-11-20 Thread Swaraj
on x86 with same certificates. openssl version is 0.98g (on arm board) openssl version is 1.0.0a-fips (on x86 free radius server 2.1.12) /*ERROR: --- */ rad_recv: Access-Request packet from host 10.0.0.70 port 2050, id=8, length=166 User-Name = testuser NAS-IP-Address = 127.0.0.1

Re: EAP-TLS error: RSA_padding_check_PKCS1_type_1:block type is not 01

2012-11-20 Thread Alan DeKok
for arm boards, as I was able to run without any issues on x86 with same certificates. Because it has different software. Tue Nov 20 16:48:05 2012 : Error: TLS Alert write:fatal:decrypt error Tue Nov 20 16:48:05 2012 : Error: TLS_accept: failed in SSLv3 read certificate verify B Tue Nov

Re: EAP-TLS error: RSA_padding_check_PKCS1_type_1:block type is not 01

2012-11-20 Thread Phil Mayers
On 20/11/12 13:26, Alan DeKok wrote: Swaraj wrote: I'm using Freeradius server2.1.12 on x86 fedora14. My client is using (armel ubuntu 10.04 lucid) IMX53 board. When I try connecting to radius server I am receiving the following errors. The client is broken. It's not doing SSL correctly.

Re: EAP-TLS error: RSA_padding_check_PKCS1_type_1:block type is not 01

2012-11-20 Thread Phil Mayers
On 20/11/12 12:38, Swaraj wrote: Tue Nov 20 16:48:05 2012 : Error: rlm_eap: SSL error error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 That's very odd. It looks like a problem with OpenSSL - maybe endian-ness or something? I created certificates

Re: Freeradius Installaion error

2012-11-12 Thread alan buxey
Hi, i am installing freeradius and configuring with what version and where from? - as some of the output is certainly not standard and other bits look very dated. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius Installaion error

2012-11-12 Thread Alan DeKok
QASIM RAO wrote: i am installing freeradius and configuring with ./configure --disable-libltdl-install --with-system-libtool You don't have a system libtool. Just use configure Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius Installaion error

2012-11-11 Thread QASIM RAO
hi, i am installing freeradius and configuring with ./configure --disable-libltdl-install --with-system-libtool while running make command giving following error gcc: md5.lo: No such file or directorygcc: print.lo: No such file or directorygcc: radius.lo: No such file or directorygcc

Re: ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2012-11-10 Thread alan buxey
Hi, I have just untarred the 2.2.0 tarball, and added just one line the users file: gokul Cleartext-Password:=abcde at the top of the file...or at the bottom? If you add it to the bottom then other things in the file will prevent that user from being seen/used - add your test

Re: ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2012-11-10 Thread Phil Mayers
On 11/10/2012 03:54 AM, Shravan S G wrote: Hi all, I am trying to configure FreeRadius 2.2.0. I am trying to test with the radtest utility. However, when I run radtest, on my radiusd server, I get the following error - ERROR: No authenticate method (Auth-Type) found for the request: Rejecting

Re: ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2012-11-10 Thread Shravan S G
: Hi all, I am trying to configure FreeRadius 2.2.0. I am trying to test with the radtest utility. However, when I run radtest, on my radiusd server, I get the following error - ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user. I know this is some issue

ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2012-11-09 Thread Shravan S G
Hi all, I am trying to configure FreeRadius 2.2.0. I am trying to test with the radtest utility. However, when I run radtest, on my radiusd server, I get the following error - ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user. I know this is some issue

log error

2012-11-05 Thread Miha
Hi, I am looking at this log radius file. What could be causing this? BR; Miha Mon Nov 5 08:35:03 2012 : Error: Discarding duplicate request from client intraswitch port 46634 - ID: 134 due to unfinished request 11902 Mon Nov 5 08:35:03 2012 : Error: Discarding duplicate request from

Re: log error

2012-11-05 Thread Alan DeKok
Miha wrote: I am looking at this log radius file. What could be causing this? Your database is slow. Go fix that. Mon Nov 5 15:03:18 2012 : Error: rlm_sql (sql2): There are no DB handles to use! skipped 0, tried to connect 0 Mon Nov 5 15:03:19 2012 : Error: rlm_sql (sql2

Re: log error

2012-11-05 Thread alan buxey
Hi, I am looking at this log radius file. What could be causing this? slow or dead DB alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: log error

2012-11-05 Thread Arran Cudbard-Bell
All signs point to tumblebeasts in the rlm_sql module. -Arran BR; Miha Mon Nov 5 08:35:03 2012 : Error: Discarding duplicate request from client intraswitch port 46634 - ID: 134 due to unfinished request 11902 Mon Nov 5 08:35:03 2012 : Error: Discarding duplicate request from

Re: log error

2012-11-05 Thread Arran Cudbard-Bell
On 5 Nov 2012, at 14:27, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: All signs point to tumblebeasts in the rlm_sql module. -Arran Apologies didn't mean to top post. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: log error

2012-11-05 Thread Miha
On 11/5/2012 3:30 PM, Arran Cudbard-Bell wrote: On 5 Nov 2012, at 14:27, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: All signs point to tumblebeasts in the rlm_sql module. -Arran Apologies didn't mean to top post. -Arran - List info/subscribe/unsubscribe? See

Re: User-Name (machine\user) is not the same as MS-CHAP Name (user) from EAP-MSCHAPv2 error

2012-11-01 Thread Phil Mayers
) from EAP-MSCHAPv2” error mesages Ok. At the old version freeradius atexactly same configuration clients had not any problem The mschap code has had some changes over the years. This might be one of them. You can find debug log export at below This is an incomplete debug. It doesn't show

mysql Connection error

2012-10-31 Thread QASIM RAO
hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed on localhost so when i give db sever=localhost it connects with db... please help me in this why radius is doing this ??? regards,

Re: mysql Connection error

2012-10-31 Thread Fajar A. Nugraha
On Wed, Oct 31, 2012 at 3:57 PM, QASIM RAO qasim2...@hotmail.com wrote: hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed on localhost so when i give db sever=localhost it connects with

Re: mysql Connection error

2012-10-31 Thread Alan DeKok
QASIM RAO wrote: hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed on localhost so when i give db sever=localhost it connects with db... please help me in this why radius is doing this

Re: mysql Connection error

2012-10-31 Thread Arran Cudbard-Bell
On 31 Oct 2012, at 09:02, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Oct 31, 2012 at 3:57 PM, QASIM RAO qasim2...@hotmail.com wrote: hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed

RE: mysql Connection error

2012-10-31 Thread QASIM RAO
From: al...@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: mysql Connection error QASIM RAO wrote: hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed

RE: mysql Connection error

2012-10-31 Thread QASIM RAO
how can i change localhost to public IP Subject: Re: mysql Connection error From: a.cudba...@freeradius.org Date: Wed, 31 Oct 2012 09:11:04 + To: freeradius-users@lists.freeradius.org On 31 Oct 2012, at 09:02, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Oct 31, 2012 at 3:57

Re: mysql Connection error

2012-10-31 Thread alan buxey
Hi, i want to connect db using ip because no i am testing after this i will connect i to remote db.  How can i tel Db to listen on a public ip  ?? now this is a MySQL question - not a FreeRADIUS question, mysql has its own mailing lists (and its own configuration file and users table

Re: mysql Connection error

2012-10-31 Thread Alan DeKok
QASIM RAO wrote: i want to connect db using ip because no i am testing after this i will connect i to remote db. How can i tel Db to listen on a public ip ?? Go read the MySQL documentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting Start Request error

2012-10-23 Thread alan buxey
Hi, I am facing this problem that radius giving me return code 1. as for as i think this is because Acct-Session-Id is missing in request...  ..did you read the output, think this is the only issue? rlm_acct_unique: WARNING: Attribute NAS-Port was not found in request,

Re: Accounting Start Request error

2012-10-23 Thread Arran Cudbard-Bell
On 23 Oct 2012, at 05:21, QASIM RAO qasim2...@hotmail.com wrote: Hi, I am facing this problem that radius giving me return code 1. as for as i think this is because Acct-Session-Id is missing in request... how can i solve this problem because session id is set by session counter i

Accounting Start Request error

2012-10-22 Thread QASIM RAO
Hi, I am facing this problem that radius giving me return code 1. as for as i think this is because Acct-Session-Id is missing in request... how can i solve this problem because session id is set by session counter i can not set it manually.. i hope you understand my question.

Re: radius Installation error

2012-10-18 Thread Fajar A. Nugraha
On Thu, Oct 18, 2012 at 5:18 PM, QASIM RAO qasim2...@hotmail.com wrote: hi, i am facing a problem in radius installation on red hat 5 this error displays while running make command resolv -lpthread -Wl,-soname -Wl,rlm_eap-1.1.6.so -o .libs/rlm_eap-1.1.6.so /usr/lib/libltdl.so: could

RE: radius Installation error

2012-10-18 Thread QASIM RAO
.. ??? Thanks, Date: Thu, 18 Oct 2012 17:28:55 +0700 Subject: Re: radius Installation error From: l...@fajar.net To: freeradius-users@lists.freeradius.org On Thu, Oct 18, 2012 at 5:18 PM, QASIM RAO qasim2...@hotmail.com wrote: hi, i am facing a problem in radius installation on red

Re: radius Installation error

2012-10-18 Thread Fajar A. Nugraha
On Thu, Oct 18, 2012 at 6:06 PM, QASIM RAO qasim2...@hotmail.com wrote: Sir i use this command while configuring and it works ./configure --disable-libltdl-install --with-system-libtool You should need more flags since ltdl and libtool go together. See the configure flags in my previous mail.

<    1   2   3   4   5   6   7   8   9   10   >