Re: freeraduis LDAP error

2012-05-04 Thread alan buxey
Hi, > when i removed "Auth-Type := PAP" lineradius not checking > password , even when wrong password is used user get the > authenticated. you then have a hardcoded Accept somewhere in your config alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeraduis LDAP error

2012-05-04 Thread dhanushka ranasinghe
uthentication. > >>  # Executing group from file /etc/freeradius/sites-enabled/default >> Thu May  3 11:50:26 2012 : Info: +- entering group PAP {...} >> Thu May  3 11:50:26 2012 : Info: [pap] ERROR: You set 'Auth-Type = >> PAP' for a request that does not contain a Us

Re: freeraduis LDAP error

2012-05-04 Thread Alan DeKok
access via ubuntu machine > (WPAsupplicant) ... Which doesn't do PAP authentication. > # Executing group from file /etc/freeradius/sites-enabled/default > Thu May 3 11:50:26 2012 : Info: +- entering group PAP {...} > Thu May 3 11:50:26 2012 : Info: [pap] ERROR: You set 

Re: freeraduis LDAP error

2012-05-04 Thread dhanushka ranasinghe
2, id=167, length=38 3) # Executing group from file /etc/freeradius/sites-enabled/default Thu May 3 11:50:26 2012 : Info: +- entering group PAP {...} Thu May 3 11:50:26 2012 : Info: [pap] ERROR: You set 'Auth-Type = PAP' for a request that does not contain a User-Password attribute! Thu Ma

Re: freeraduis LDAP error

2012-05-03 Thread Fajar A. Nugraha
On Fri, May 4, 2012 at 1:15 PM, dhanushka ranasinghe wrote: > Hi.. > > when i removed  "Auth-Type := PAP"   line    radius not checking > password , even when wrong password is used user get the > authenticated. What does the debug log say? My guess is you have Auth-Type := Accept somewhere. --

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
Hi.. when i removed "Auth-Type := PAP" lineradius not checking password , even when wrong password is used user get the authenticated. Thank You Dhanushka On 4 May 2012 11:31, Fajar A. Nugraha wrote: > On Fri, May 4, 2012 at 12:33 PM, dhanushka ranasinghe > wrote: >> Hi.. >> >> Seems l

Re: freeraduis LDAP error

2012-05-03 Thread Fajar A. Nugraha
On Fri, May 4, 2012 at 12:33 PM, dhanushka ranasinghe wrote: > Hi.. > > Seems like radius caching session thats why its got connected , as > i mention my LDAP uses SHA as password encrypted method , is there any > way to sort this issue and what configuration need to use in order to > fix this

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
: > ahh yes my LDAP server stors password in SHA > > Thank you > Dhanushka > > On 4 May 2012 09:40, dhanushka ranasinghe wrote: >> Hi... >> >> for some reason i got via the error message , but radius server >> authenticate the users even though  they ente

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
ahh yes my LDAP server stors password in SHA Thank you Dhanushka On 4 May 2012 09:40, dhanushka ranasinghe wrote: > Hi... > > for some reason i got via the error message , but radius server > authenticate the users even though  they entered wrong password, is > there any

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
Hi... for some reason i got via the error message , but radius server authenticate the users even though they entered wrong password, is there any reason for that Thank You Dhanushka On 4 May 2012 06:34, Fajar A. Nugraha wrote: > On Fri, May 4, 2012 at 7:56 AM, dhanushka ranasinghe >

Re: freeraduis LDAP error

2012-05-03 Thread Fajar A. Nugraha
On Fri, May 4, 2012 at 7:56 AM, dhanushka ranasinghe wrote: > Hi...guys,, > > in user file i have the following configuration as well, > > DEFAULT Ldap-Group == "cn=employees,ou=group,dc=ldap,dc=home,dc=com", > Auth-Type := PAP If your LDAP server does NOT store passwords as clear text, that lin

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
wrote: > dhanushka ranasinghe wrote: >> im getting this error when radius  authenticating  with LDAP, is there >> any way to sort the issue > >  Yes. > >  Don't edit the configuration and break the server. > >>  # Executing group from file /etc/freera

Re: freeraduis LDAP error

2012-05-03 Thread Alan DeKok
dhanushka ranasinghe wrote: > im getting this error when radius authenticating with LDAP, is there > any way to sort the issue Yes. Don't edit the configuration and break the server. > # Executing group from file /etc/freeradius/sites-enabled/default > Thu May 3 11:

RE: freeraduis LDAP error

2012-05-03 Thread Sallee, Stephen (Jake)
To: FreeRadius users mailing list Subject: freeraduis LDAP error hi guys im getting this error when radius authenticating with LDAP, is there any way to sort the issue # Executing group from file /etc/freeradius/sites-enabled/default Thu May 3 11:50:26 2012 : Info: +- entering group PAP

freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
hi guys im getting this error when radius authenticating with LDAP, is there any way to sort the issue # Executing group from file /etc/freeradius/sites-enabled/default Thu May 3 11:50:26 2012 : Info: +- entering group PAP {...} Thu May 3 11:50:26 2012 : Info: [pap] ERROR: You set '

Re: Building 2.1.12 on Debian Squeeze: Clean Error

2012-04-22 Thread Alan DeKok
Matthew Newton wrote: > The fix is in 282c2dfb3d64, or just use v2.1.x. Unfortunately that does > introduce another bug - you need to install the freeradius-mysql package or > pull dhcp_sqlippool out of the config, due to it pulling in a mysql file at > line 18, added in aeee8bb6b840f12c. I'll

Re: Building 2.1.12 on Debian Squeeze: Clean Error

2012-04-22 Thread Matthew Newton
On Sun, Apr 22, 2012 at 10:39:42AM +0200, Alan DeKok wrote: > Eric Geier wrote: > > I enter "fakeroot dpkg-buildpackage -b -uc" and get the following clean > > error: > > You edited the source and broke it. Most likely, in this case. I can't reproduce th

Re: Building 2.1.12 on Debian Squeeze: Clean Error

2012-04-22 Thread Alan DeKok
t;fakeroot dpkg-buildpackage -b -uc" and get the following clean > error: You edited the source and broke it. It works fine using the standard source. > I've looked through the output and dependencies but no help. > > Then I thought to try ./configure, make, and make i

Building 2.1.12 on Debian Squeeze: Clean Error

2012-04-21 Thread Eric Geier
ot; and get the following clean error: *** Making clean in rlm_sql_mysql. make[11]: Entering directory `/home/egeier/Desktop/freeradius-server-2.1.12/src/modules/rlm_sql/drivers/r lm_sql_mysql' make[11]: *** No rule to make target `clean'. Stop. make[11]: Leaving direct

Re: DHCP Parse error

2012-03-29 Thread Alan DeKok
Peter Balsianok wrote: > I try to use the DHCP functionality of the Freeradius server. Server is > unable to parse somethink. > Could you please help me, thx. Read raddb/dictionary. You need to enable the DHCP dictionary. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradi

DHCP Parse error

2012-03-29 Thread Peter Balsianok
er WARNING: Server dhcp is empty, and will do nothing! radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 max_pps = 0 } listen { type = "acct" ipaddr = * port = 0 max_pps

Re: On FreeBSd: syslog-ng: I/O error occurred while writing; fd='xx', error='No buffer space available (yy)'

2012-03-22 Thread Traiano Welcome
Um. Ignore this. Wrong list :-( On 22/03/2012 09:51, "Traiano Welcome" wrote: >Hi List > >I've been seeing the following in the messages log of my freebsd syslog >server for quite some time now: > >--- >Mar 20 12:19:12 syslog2 syslog-ng[35313]: I/O error occ

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-19 Thread Rathod Subhashchandra
, March 15, 2012 2:51 PM To: 'FreeRadius users mailing list' Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Run freeradius in debug mode (-X). Look for eap module debug messages. Look for wimax module debug messages. Try to understand. Rathod Subhashcha

Re: SQL_LOG Interim Update missing "partial" config error? huh?

2012-03-15 Thread Phil Mayers
On 03/15/2012 09:11 PM, Aidan Rowe wrote: Any possible updates on this? It seems at some point the man pages changed from using INSERTs and UPDATEs to only using INSERTS. I'm guessing here, but I suspect the problem with doing UPDATEs is that they noop if the row isn't present. This can happe

Re: SQL_LOG Interim Update missing "partial" config error? huh?

2012-03-15 Thread Aidan Rowe
Any possible updates on this? It seems at some point the man pages changed from using INSERTs and UPDATEs to only using INSERTS. On 14/03/2012, at 3:52 PM, Aidan Rowe wrote: > Hi Chrstiaan, > > It's because there is no SQL statement configured for Interim-Update by > default, you need to cre

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
To: 'FreeRadius users mailing list' Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Run freeradius in debug mode (-X). Look for eap module debug messages. Look for wimax module debug messages. Try to understand. Rathod Subhashchandra wrote: > Dear Iliya, >

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread David Peterson
-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of Alan DeKok Sent: Thursday, March 15, 2012 7:49 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Rathod Subhashchandra wrote

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Alan DeKok
Read the debug output to see why. And ask your NAS vendor why their equipment is broken. They need to supply a *useful* error message. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Iliya Peregoudov
M To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed There is no WiMAX-MSK attribute in Access-Accept. You need to call rlm_wimax module from post-auth section of default virtual server: # raddb/sites-enabled/default

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
s? Thanks ! Rathod. -Original Message- From: Iliya Peregoudov [mailto:iperegu...@cboss.ru] Sent: Thursday, March 15, 2012 11:41 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed There is no WiMAX-MSK at

Re[2]: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Толик Шавловский
-Original Message- > From: Fajar A. Nugraha [mailto:l...@fajar.net] > Sent: Thursday, March 15, 2012 11:00 AM > To: rat...@tataelxsi.co.in; FreeRadius users mailing list > Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed > > On Thu, Mar 15, 20

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-14 Thread Iliya Peregoudov
exchange is through. When AAA server responds with Access-Accept, ASN-GW throws error saying "Validation of the Attributes in the Received packet failed" Wireshark logs @ ASN-GW I could not attach wireshark pcap logs due to size constraint. I have took print screen of only ACC

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-14 Thread Fajar A. Nugraha
On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra wrote: > Wireshark logs @ ASN-GW > > > > > > I could not attach wireshark pcap logs due to size constraint. I have took > print screen of only ACCESS-ACCEPT message copied to MS word. While that information might be interesting for ASN supp

Re: SQL_LOG Interim Update missing "partial" config error? huh?

2012-03-13 Thread Aidan Rowe
Hi Chrstiaan, It's because there is no SQL statement configured for Interim-Update by default, you need to create a query to be associated with it in modules/sql_log. A poor example: Interim-Update = "UPDATE ${acct_table} \ SET FramedIPAddress = '%{Framed-IP-Address}', \ AcctSessionTi

SQL_LOG Interim Update missing "partial" config error? huh?

2012-03-13 Thread Christiaan Rademan
Greetings Everyone, I am using FreeRadius + mySQL + SQLIPPOOL. FreeRADIUS Version 2.1.11. The start and stop accounting records work fine. My issue is I keep getting the following in the logs: Tue Mar 13 22:18:33 2012 : Info: [sql_log] Couldn't find an entry Interim-Update in the config sectio

[SOLVED] RE: Centos 6 Compile error

2012-03-13 Thread David Peterson
Sent: Tuesday, March 13, 2012 8:01 AM To: FreeRadius users mailing list Subject: RE: Centos 6 Compile error I am checking out the master, should I be using something earlier? David -Original Message- From: Fajar A. Nugraha [mailto:l...@fajar.net] Sent: Tuesday, March 13, 2012 7:21 AM To

RE: Centos 6 Compile error

2012-03-13 Thread Brian Julin
David Peterson Wrote: > Sent: Tuesday, March 13, 2012 7:12 AM > To: FreeRadius users mailing list > Subject: Centos 6 Compile error > > Has anyone seen this error? I am not sure what might be missing: RHEL variants don't include EC support in OpenSSL due to some lice

Re: Centos 6 Compile error

2012-03-13 Thread Fajar A. Nugraha
On Tue, Mar 13, 2012 at 7:01 PM, David Peterson wrote: > I am checking out the master, should I be using something earlier? Depends on what you need, actually. If you're interested in helping bug-hunting, or try out 3.0-only new features, then it's the right source. But as Alan mentioned, the re

RE: Centos 6 Compile error

2012-03-13 Thread David Peterson
I am checking out the master, should I be using something earlier? David -Original Message- From: Fajar A. Nugraha [mailto:l...@fajar.net] Sent: Tuesday, March 13, 2012 7:21 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Centos 6 Compile error On

Re: Centos 6 Compile error

2012-03-13 Thread Fajar A. Nugraha
On Tue, Mar 13, 2012 at 6:12 PM, David Peterson wrote: > Has anyone seen this error?  I am not sure what might be missing: > > In file included from rlm_eap_pwd.h:37, >                 from rlm_eap_pwd.c:39: > eap_pwd.h:42:24: error: openssl/ec.h: No such file or directory You

Re: Centos 6 Compile error

2012-03-13 Thread Alan Buxey
Hi, > Has anyone seen this error? I am not sure what might be missing: ECC support in OpenSSL - Redhat and their derivitives dont have it. you will need to not have EAP-PWD present and it will then compile not sure when/if Redhat will have ECC supportsome policy decision. rm -rf

Centos 6 Compile error

2012-03-13 Thread David Peterson
Has anyone seen this error? I am not sure what might be missing: In file included from rlm_eap_pwd.h:37, from rlm_eap_pwd.c:39: eap_pwd.h:42:24: error: openssl/ec.h: No such file or directory In file included from rlm_eap_pwd.h:37, from rlm_eap_pwd.c:39

Re: Error

2012-03-06 Thread Alan DeKok
David Peterson wrote: > Has anyone run across this: > > Couldn't open dictionary "/usr/local/share/freeradius/dictionary": Too many > open files You edited the dictionaries and broke them. You have a circular loop in loading the dictionaries. So the loading process is infinite, and never fi

RE: Error

2012-03-06 Thread Danner, Mearl
: Error Has anyone run across this: Couldn't open dictionary "/usr/local/share/freeradius/dictionary": Too many open files | David Peterson | Senior Engineer | Wireless Connections | | Office: 419.660.6100 ext 2287 | Cell: 419.706.7355| Fax: 419.668.4077 | www.wirelessconnections.net

Error

2012-03-06 Thread David Peterson
Has anyone run across this: Couldn't open dictionary "/usr/local/share/freeradius/dictionary": Too many open files | David Peterson | Senior Engineer | Wireless Connections | | Office: 419.660.6100 ext 2287 | Cell: 419.706.7355| Fax: 419.668.4077 | www.wirelessconnections.net | | 166 Milan Ave |

Re: Authentification failure error sql and Daloradius

2012-03-06 Thread Fajar A. Nugraha
On Tue, Mar 6, 2012 at 7:27 PM, Javier Ruiz Escalante wrote: > > > Hello, > > After installing Daloradius I get the following error, could somebody give > me a clue of how to solve it? Befoe everything was working... Did you read daloradius documentation, just in case it had

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Gennaro Leo
Hi, I began by saying that I am a newbie so you could expect some errors by me. Fortunately I solved immediately. Thank you anyway. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Alan DeKok
Gennaro Leo wrote: > I added the Attribute-Name "Unsupported-Attribute" in the dictionary Did I say to do that? > and modified the send-coa subsection as you suggested. Anyway in the > dictionary the 401 code is not accepted (max 255). Can I modify this > limit? You need to follow instructio

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Gennaro Leo
Gennaro Leo wrote: >> How can I configure the freeradius to set error-cause-attributes (e.g. >> 401 - Unsupported Attribute) when sending a CoA-Nak after receiving an >> Accounting Request? > $ man unlang > > update reply { > Error-Cause = Unsupported-Attrib

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Alan DeKok
Gennaro Leo wrote: > How can I configure the freeradius to set error-cause-attributes (e.g. > 401 - Unsupported Attribute) when sending a CoA-Nak after receiving an > Accounting Request? $ man unlang update reply { Error-Cause = Unsupported-Attribute } This should go

error-cause-attribute in CoA-Nak

2012-02-14 Thread Gennaro Leo
Hi all, I'm a really newbie of freeradius server and I need your help. How can I configure the freeradius to set error-cause-attributes (e.g. 401 - Unsupported Attribute) when sending a CoA-Nak after receiving an Accounting Request? Thanks Gennaro - List info/subscribe/unsubscribe? See

Re: Doubt about Dropping Conflicting Error.

2012-02-02 Thread Alan DeKok
Rodrigo Yoshioka wrote: > Does anyone have explanations about this error?? I couldn´t find > something understandable about it on the internet. There are TONS of references to it on this list. > Error: Dropping conflicting packet from client PPPoE_FTTH:41882 - ID: 66 > due t

Doubt about Dropping Conflicting Error.

2012-02-01 Thread Rodrigo Yoshioka
Hi folks, Does anyone have explanations about this error?? I couldn´t find something understandable about it on the internet.  Error: Dropping conflicting packet from client PPPoE_FTTH:41882 - ID: 66 due to unfinished request 457370 My radius server gives me this error frequently. Thanks

Re: eapol_test giving up and win-like error?

2012-01-23 Thread NdK
Il 23/01/2012 11:02, Phil Mayers ha scritto: > Mschap v1 doesn't validate the reply from server to client, which is what is > failing with eapol_test. Therefore you're not testing the same path. So radtest isn't actually equivalent to eapol_test. It's just another step for testing. > Try using a

RE: eapol_test giving up and win-like error?

2012-01-23 Thread Sergio NNX
I mentioned exactly that last week but he disregarded it! > Subject: Re: eapol_test giving up and win-like error? > From: p.may...@imperial.ac.uk > Date: Mon, 23 Jan 2012 10:12:08 + > To: freeradius-users@lists.freeradius.org > > Phil Mayers wrote: > > >Msc

Re: eapol_test giving up and win-like error?

2012-01-23 Thread Phil Mayers
Phil Mayers wrote: >Mschap v1 doesn't validate the reply from server to client, which is >what is failing with eapol_test. Therefore you're not testing the same >path. > >Try using a local i.e. non samba user to test. I am sure the problem is >with your samba daemon. >-- >Sent from my phone. Ple

Re: eapol_test giving up and win-like error?

2012-01-23 Thread Phil Mayers
Mschap v1 doesn't validate the reply from server to client, which is what is failing with eapol_test. Therefore you're not testing the same path. Try using a local i.e. non samba user to test. I am sure the problem is with your samba daemon. -- Sent from my phone. Please excuse brevity and typo

Re: eapol_test giving up and win-like error?

2012-01-23 Thread NdK
Il 20/01/2012 11:55, Phil Mayers ha scritto: > If that's really all you've changed, there must be something wrong with > Samba; it's getting the final crypto blob wrong, and the client is > dropping the packets. You'll need to investigate and fix this. Just tested with radtest (have had to use sin

Re: eapol_test giving up and win-like error?

2012-01-20 Thread Phil Mayers
On 01/20/2012 10:30 AM, NdK wrote: Il 19/01/2012 13:01, Phil Mayers ha scritto: I'm not sure what the problem is then. From your original post, the authentication is failing at the *client*, in the inner EAP section. This normally means the final MSCHAP response is invalid, which only happens i

Re: eapol_test giving up and win-like error?

2012-01-20 Thread NdK
Il 19/01/2012 13:01, Phil Mayers ha scritto: > I'm not sure what the problem is then. From your original post, the > authentication is failing at the *client*, in the inner EAP section. > This normally means the final MSCHAP response is invalid, which only > happens if some crypto has gone wrong s

Re: 'Logout for NAS CP port 76, but no Login record' && 'Login entry for NAS CP port 76 wrong order' Error

2012-01-20 Thread Fajar A. Nugraha
writing the log to MySQL. > > There is one client running VMware Workstaion inside wiondow2003. And a > virtual Debian is running in VM. Debian's network is bridged on host.I am > receiving the error log: It shouldn't matter whether it's a VM or not. What matters is th

'Logout for NAS CP port 76, but no Login record' && 'Login entry for NAS CP port 76 wrong order' Error

2012-01-20 Thread Zlyzwy
iving the error log: == Jan 20 11:15:07 radiusd[55144]:rlm_radutmp: Logout for NAS CP port 76, but no Login record Jan 20 11:15:07 radiusd[55144]: rlm_radutmp: Logout for NAS CP port 76, but no Login record Jan 20 11:14:06 radiusd[55144]: rlm_radutmp: Login entry fo

Re: eapol_test giving up and win-like error?

2012-01-19 Thread Phil Mayers
On 19/01/12 11:07, NdK wrote: Il 19/01/2012 10:03, Phil Mayers ha scritto: EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit MPPE keys OK: 0 mismatch: 1 FAILURE These (plus the timeout one) are the lines printed after FR have already cloded session. Yes. Hmm. I see f

Re: eapol_test giving up and win-like error?

2012-01-19 Thread NdK
Il 19/01/2012 10:03, Phil Mayers ha scritto: >> EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit >> MPPE keys OK: 0 mismatch: 1 >> FAILURE These (plus the timeout one) are the lines printed after FR have already cloded session. > Hmm. I see from your original email that Samb

Re: eapol_test giving up and win-like error?

2012-01-19 Thread Phil Mayers
EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit MPPE keys OK: 0 mismatch: 1 FAILURE Hmm. I see from your original email that Samba & ntlm_auth are succeeding. There are a couple of buggy version of Samba out there that return invalid response values, and generate these

Re: eapol_test giving up and win-like error?

2012-01-18 Thread NdK
up after >> about 10 seconds. > > Then read the error messages from eapol_test. Why does it stop? It > should say. That's eapol_test output. I changed my AD pass to 'testing123' just for the time needed to test, so the values are the real ones. I can't see

Re: Strange error in eapol_test

2012-01-18 Thread Phil Mayers
On 17/01/12 16:24, Rui Ribeiro wrote: Hi list, Still setting up a freeradius for eduroam -- internally it is working fine EAP, TTLS and al, however when proxying/connecting to the eduroam, everything seems ok in freeradius logs, however, eapol_test finishes with an error (WARNING: PMK mismatch

Re: eapol_test giving up and win-like error?

2012-01-18 Thread Alan DeKok
NdK wrote: > I think I'm near to correctly configure my server... but I incur in a > situation that IIUC should be related to win clients only: I get ... > message and *eapol_test* (run from a *linux* machine!) gives up after > about 10 seconds. Then read the error message

eapol_test giving up and win-like error?

2012-01-18 Thread NdK
Hi all. I think I'm near to correctly configure my server... but I incur in a situation that IIUC should be related to win clients only: I get -8<-- WARNING: !! WARNING: !! EAP session for state 0x6ac8f8c260c3e171 did not finish!

Re: Changing MTU value for EAP Session error

2012-01-10 Thread Alan DeKok
Sallee, Stephen (Jake) wrote: > I have read on the list and the FR wiki that decreasing the MTU value > for the tunnel can help alleviate the pesky EAP session did not finish > problem. I would like to try this as I am getting the same issue on IOS > and Android based phones using the default cert

Changing MTU value for EAP Session error

2012-01-10 Thread Sallee, Stephen (Jake)
I have read on the list and the FR wiki that decreasing the MTU value for the tunnel can help alleviate the pesky EAP session did not finish problem. I would like to try this as I am getting the same issue on IOS and Android based phones using the default certs FR ships with. However I cannot

RE: Radperf message error

2012-01-04 Thread Serge Toussaint
Hi, For a big test for 9 000 requests with radperf, I have got the message : Radperf: received response to request we did not send. (id=125 socket 19) ( 500 lines) Serge -Message d'origine- De : freeradius-users-bounces+stoussaint=netprest@lists.freeradius.org [mailto:freera

RE: Error Reading Certificate file

2011-12-30 Thread McSparin, Joe
+jmcsparin=hillcountrymemorial.org@lists.freerad ius.org [mailto:freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists .freeradius.org] On Behalf Of Alan DeKok Sent: Friday, December 30, 2011 10:22 AM To: FreeRadius users mailing list Subject: Re: Error Reading Certificate file McSparin

Re: Error Reading Certificate file

2011-12-30 Thread Alan DeKok
McSparin, Joe wrote: > Get this error when running radiusd -X I checked my passwords in > eap.cnf, ca.cnf, server.cnf and client.cnf > > rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied > rlm_eap_tls: Error reading certificate file > /usr/local/etc/radd

Error Reading Certificate file

2011-12-30 Thread McSparin, Joe
Get this error when running radiusd -X I checked my passwords in eap.cnf, ca.cnf, server.cnf and client.cnf rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied rlm_eap_tls: Error reading certificate file /usr/local/etc/raddb/certs/server.pem rlm_eap: Failed to initialize type

RE: Error when trying to create certificates

2011-12-23 Thread Herbert J. Skuhra
On Fri, Dec 23, 2011, at 08:52, McSparin, Joe wrote: > It's a package add from FreeBSD ports. I'll try reinstalling it on > another machine and see where it puts it. -- Herbert

RE: Error when trying to create certificates

2011-12-23 Thread McSparin, Joe
- From: freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freerad ius.org [mailto:freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists .freeradius.org] On Behalf Of Alan DeKok Sent: Thursday, December 22, 2011 5:46 PM To: FreeRadius users mailing list Subject: Re:

Re: Error when trying to create certificates

2011-12-22 Thread Fajar A. Nugraha
> McSparin, Joe wrote: >> It's not located in the /usr/local/etc/raddb directory where my install is >> but I did a search and it is located here >> /usr/local/share/examples/freeradius/raddb/certs/xpextensions. That's weird. What OS/distro is this? OS packages would usualy put them in /usr/shar

Re: Error when trying to create certificates

2011-12-22 Thread Alan DeKok
McSparin, Joe wrote: > It's not located in the /usr/local/etc/raddb directory where my install is > but I did a search and it is located here > /usr/local/share/examples/freeradius/raddb/certs/xpextensions. Find out who created the packaged (RPM, DEB, etc.) for your system, and file a bug. T

RE: Error when trying to create certificates

2011-12-22 Thread McSparin, Joe
18 AM To: FreeRadius users mailing list Subject: Re: your mail Hi, >Keep getting this error message when running "make" in my /raddb/certs >directory I reinstalled openssl but to no avail.  Any thoughts? > >/usr/bin/openssl ca -batch -keyfile ca.key -cert ca.pe

Re[6]: freeradius2 installation error

2011-12-07 Thread tolik_shavlov...@mail.ru
- If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/freeradius2-installa

Re[6]: freeradius2 installation error

2011-12-06 Thread Толик Шавловский
thanks for great explanation. i could install Fr from ports (the main problem was in ldap, so i installed without ldap) BR 06 декабря 2011, 20:13 от "Fajar A. Nugraha" : > On Tue, Dec 6, 2011 at 10:51 PM, tolik_shavlov...@mail.ru > wrote: > > Dear Fajar, > > > > i failed to intergate FR + mys

Re: freeradius2 installation error

2011-12-06 Thread Alan Buxey
Hi, > Dear Alan, > > its from the source. > > but error is the same as with ports. you need the development package for MySQL - or FreeRADIUS build process wont find the required headers and includes. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re[2]: freeradius2 installation error

2011-12-06 Thread Толик Шавловский
Dear Alan, its from the source. but error is the same as with ports. 06 декабря 2011, 20:31 от Alan DeKok : > tolik_shavlov...@mail.ru wrote: > > cd freeradius2 > > freebsd_v8# make > > ===> Vulnerability check disabled, database not found > > Go ask the Free

Re: freeradius2 installation error

2011-12-06 Thread Alan DeKok
tolik_shavlov...@mail.ru wrote: > cd freeradius2 > freebsd_v8# make > ===> Vulnerability check disabled, database not found Go ask the FreeBSD people why their ports are broken. We didn't write that software, and can't help you fix it. > the same while installing from source(( No. Alan

Re[6]: freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
t-2.4.26 depends on package: libtool>=2.4 - found ===> openldap-sasl-client-2.4.26 depends on shared library: sasl2.2 - not found ===> Verifying install for sasl2.2 in /usr/ports/security/cyrus-sasl2 ===> cyrus-sasl-2.1.25_1 is marked as broken: SQLITE and SQLITE3 are mutually exclusive..

Re: Re[4]: freeradius2 installation error

2011-12-06 Thread Fajar A. Nugraha
On Tue, Dec 6, 2011 at 10:51 PM, tolik_shavlov...@mail.ru wrote: > Dear Fajar, > > i failed to intergate FR + mysql, i was informed that my FR is without mysql > module. then why didn't you ask that in the first place? It'd save lots of time. > > i am in process of building from the source. > so

Re[4]: freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
/www.freeradius.org/list/users.html -- If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/freeradius2-installation-error-tp5052326p5052460.html To unsubscribe

Re: Re[2]: freeradius2 installation error

2011-12-06 Thread Fajar A. Nugraha
On Tue, Dec 6, 2011 at 10:31 PM, tolik_shavlov...@mail.ru wrote: > but i want to build from /usr/ports, Then ask ports maintaners. Really. > beacause such freeradisu propose mysql > module. freeradius-2.1.2 form source doesn't include mysql module. How did you reach that conclusion? Did you thi

Re: freeradius2 installation error

2011-12-06 Thread Alan Buxey
Hi, >but i want to build from /usr/ports, beacause such freeradisu propose >mysql module. freeradius-2.1.2 form source doesn't include mysql module. ??? it does here - something that the BSD people have done to the port?? alan - List info/subscribe/unsubscribe? See http://www.freeradius.o

Re[2]: freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
dden email]> wrote: >  freeradius-2.1.12 depends on executable: gmake - found > ===>   freeradius-2.1.12 depends on file: /usr/local/bin/perl5.12.4 - found > == > Hi, freeradius2 has error while installing under freebsd. I made (make > clean), and againt make install cle

Re: freeradius2 installation error

2011-12-06 Thread Fajar A. Nugraha
On Tue, Dec 6, 2011 at 9:59 PM, tolik_shavlov...@mail.ru wrote: >  freeradius-2.1.12 depends on executable: gmake - found > ===>   freeradius-2.1.12 depends on file: /usr/local/bin/perl5.12.4 - found > == > Hi, freeradius2 has error while installing under freebs

freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
found ===>Verifying install for sasl2.2 in /usr/ports/security/cyrus-sasl2 ===> cyrus-sasl-2.1.25_1 is marked as broken: SQLITE and SQLITE3 are mutually exclusive.. *** Error code 1 Stop in /usr/ports/security/cyrus-sasl2. *** Error code 1 Stop in /usr/ports/net/openldap24-client. *** Err

Re: Error: Failed to send packet; No response from Server

2011-11-30 Thread suggestme
Alan, I updated the ports tree in FreeBSD which upgraded FreeRadius to 2.1.12 from 2.1.10. After installation I am successful on doing basic PAP Authentication. It solved this issue. Thank You so much! -- View this message in context: http://freeradius.1045715.n5.nabble.com/Error-Failed

Re: Connection Lost, tls resumption error

2011-11-30 Thread Andreas Rudat
isn't a RADIUS > issue. I only saw that came in a new challange from the other AP. >> and a reconnection starts to >> another AP and then I get the resumption error but I have no idea why I >> lost the connection. No Errors in radius debug and a good reception is >> gi

Re: Connection Lost, tls resumption error

2011-11-30 Thread Alan DeKok
other AP and then I get the resumption error but I have no idea why I > lost the connection. No Errors in radius debug and a good reception is > given. The AP is responsible for sending RADIUS packets saying a connection is down. If it doesn't send those packets, buy an AP which does

RE: Connection Lost, tls resumption error

2011-11-30 Thread Sallee, Stephen (Jake)
+jake.sallee=umhb@lists.freeradius.org] On Behalf Of Andreas Rudat Sent: Wednesday, November 30, 2011 8:25 AM To: FreeRadius users mailing list Subject: Connection Lost, tls resumption error Hi, in my enviroment I got three AP's runnning, all with the same essid, after a while the conne

Connection Lost, tls resumption error

2011-11-30 Thread Andreas Rudat
Hi, in my enviroment I got three AP's runnning, all with the same essid, after a while the connection seems lost and a reconnection starts to another AP and then I get the resumption error but I have no idea why I lost the connection. No Errors in radius debug and a good reception is given

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan Buxey
you can create a new RADIUS cert whenever you want. Just ensure its signed by same CA and has same details such as CN . If you want to change CA then client config changes will be needed (likewise for CN changes) ...that assumes the clients were configured properly/securely. If its just a client

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Victor Guk
29.11.2011 19:54, freeradius-users-requ...@lists.freeradius.org пишет: options: client has wrong certificate client has wrong date/time set on it certificate has expired alan The time is set correctly. Certificate has expired. Can I renew it without breaking. Or to create a new one? - List i

<    1   2   3   4   5   6   7   8   9   10   >