freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
hi guys im getting this error when radius authenticating with LDAP, is there any way to sort the issue # Executing group from file /etc/freeradius/sites-enabled/default Thu May 3 11:50:26 2012 : Info: +- entering group PAP {...} Thu May 3 11:50:26 2012 : Info: [pap] ERROR: You set 'Auth

RE: freeraduis LDAP error

2012-05-03 Thread Sallee, Stephen (Jake)
To: FreeRadius users mailing list Subject: freeraduis LDAP error hi guys im getting this error when radius authenticating with LDAP, is there any way to sort the issue # Executing group from file /etc/freeradius/sites-enabled/default Thu May 3 11:50:26 2012 : Info: +- entering group PAP

Re: freeraduis LDAP error

2012-05-03 Thread Alan DeKok
dhanushka ranasinghe wrote: im getting this error when radius authenticating with LDAP, is there any way to sort the issue Yes. Don't edit the configuration and break the server. # Executing group from file /etc/freeradius/sites-enabled/default Thu May 3 11:50:26 2012 : Info

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
...@deployingradius.com wrote: dhanushka ranasinghe wrote: im getting this error when radius  authenticating  with LDAP, is there any way to sort the issue  Yes.  Don't edit the configuration and break the server.  # Executing group from file /etc/freeradius/sites-enabled/default Thu May  3 11:50:26 2012 : Info

Re: freeraduis LDAP error

2012-05-03 Thread Fajar A. Nugraha
On Fri, May 4, 2012 at 7:56 AM, dhanushka ranasinghe parakrama1...@gmail.com wrote: Hi...guys,, in user file i have the following configuration as well, DEFAULT Ldap-Group == cn=employees,ou=group,dc=ldap,dc=home,dc=com, Auth-Type := PAP If your LDAP server does NOT store passwords as

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
Hi... for some reason i got via the error message , but radius server authenticate the users even though they entered wrong password, is there any reason for that Thank You Dhanushka On 4 May 2012 06:34, Fajar A. Nugraha l...@fajar.net wrote: On Fri, May 4, 2012 at 7:56 AM, dhanushka

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
ahh yes my LDAP server stors password in SHA Thank you Dhanushka On 4 May 2012 09:40, dhanushka ranasinghe parakrama1...@gmail.com wrote: Hi... for some reason i got via the error message , but radius server authenticate the users even though  they entered wrong password, is there any

Re: freeraduis LDAP error

2012-05-03 Thread dhanushka ranasinghe
parakrama1...@gmail.com wrote: ahh yes my LDAP server stors password in SHA Thank you Dhanushka On 4 May 2012 09:40, dhanushka ranasinghe parakrama1...@gmail.com wrote: Hi... for some reason i got via the error message , but radius server authenticate the users even though  they entered wrong

Re: Building 2.1.12 on Debian Squeeze: Clean Error

2012-04-22 Thread Alan DeKok
and get the following clean error: You edited the source and broke it. It works fine using the standard source. I've looked through the output and dependencies but no help. Then I thought to try ./configure, make, and make install, but when I run ./configure it errors too

Re: Building 2.1.12 on Debian Squeeze: Clean Error

2012-04-22 Thread Matthew Newton
On Sun, Apr 22, 2012 at 10:39:42AM +0200, Alan DeKok wrote: Eric Geier wrote: I enter fakeroot dpkg-buildpackage -b -uc and get the following clean error: You edited the source and broke it. Most likely, in this case. I can't reproduce that from the clean git release_2_1_12

Re: Building 2.1.12 on Debian Squeeze: Clean Error

2012-04-22 Thread Alan DeKok
Matthew Newton wrote: The fix is in 282c2dfb3d64, or just use v2.1.x. Unfortunately that does introduce another bug - you need to install the freeradius-mysql package or pull dhcp_sqlippool out of the config, due to it pulling in a mysql file at line 18, added in aeee8bb6b840f12c. I'll

DHCP Parse error

2012-03-29 Thread Peter Balsianok
on accounting address * port 1813 Listening on dhcp interface eth1 address * port 67 as server dhcp Ready to process requests. Received DHCP-Discover of id dc1e32bf from 0.0.0.0:68 to 0.0.0.0:67 (0) Dropping packet without response because of error Parse error Parse error Parse error Parse error Parse

Re: DHCP Parse error

2012-03-29 Thread Alan DeKok
Peter Balsianok wrote: I try to use the DHCP functionality of the Freeradius server. Server is unable to parse somethink. Could you please help me, thx. Read raddb/dictionary. You need to enable the DHCP dictionary. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: On FreeBSd: syslog-ng: I/O error occurred while writing; fd='xx', error='No buffer space available (yy)'

2012-03-22 Thread Traiano Welcome
Um. Ignore this. Wrong list :-( On 22/03/2012 09:51, Traiano Welcome traiano.welc...@mtnbusiness.co.za wrote: Hi List I've been seeing the following in the messages log of my freebsd syslog server for quite some time now: --- Mar 20 12:19:12 syslog2 syslog-ng[35313]: I/O error occurred while

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-19 Thread Rathod Subhashchandra
, March 15, 2012 2:51 PM To: 'FreeRadius users mailing list' Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Run freeradius in debug mode (-X). Look for eap module debug messages. Look for wimax module debug messages. Try to understand. Rathod Subhashchandra wrote

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Iliya Peregoudov
exchange is through. When AAA server responds with Access-Accept, ASN-GW throws error saying Validation of the Attributes in the Received packet failed Wireshark logs @ ASN-GW I could not attach wireshark pcap logs due to size constraint. I have took print screen of only ACCESS-ACCEPT

Re[2]: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Толик Шавловский
...@fajar.net] Sent: Thursday, March 15, 2012 11:00 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra rat...@tataelxsi.co.in wrote: Wireshark logs

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
! Rathod. -Original Message- From: Iliya Peregoudov [mailto:iperegu...@cboss.ru] Sent: Thursday, March 15, 2012 11:41 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed There is no WiMAX-MSK attribute

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Iliya Peregoudov
...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed There is no WiMAX-MSK attribute in Access-Accept. You need to call rlm_wimax module from post-auth section of default virtual server: # raddb/sites-enabled/default post-auth

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Alan DeKok
why. And ask your NAS vendor why their equipment is broken. They need to supply a *useful* error message. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread David Peterson
-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of Alan DeKok Sent: Thursday, March 15, 2012 7:49 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Rathod Subhashchandra wrote

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
To: 'FreeRadius users mailing list' Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Run freeradius in debug mode (-X). Look for eap module debug messages. Look for wimax module debug messages. Try to understand. Rathod Subhashchandra wrote: Dear Iliya, Thanks for your

Re: SQL_LOG Interim Update missing partial config error? huh?

2012-03-15 Thread Aidan Rowe
Any possible updates on this? It seems at some point the man pages changed from using INSERTs and UPDATEs to only using INSERTS. On 14/03/2012, at 3:52 PM, Aidan Rowe wrote: Hi Chrstiaan, It's because there is no SQL statement configured for Interim-Update by default, you need to create

Re: SQL_LOG Interim Update missing partial config error? huh?

2012-03-15 Thread Phil Mayers
On 03/15/2012 09:11 PM, Aidan Rowe wrote: Any possible updates on this? It seems at some point the man pages changed from using INSERTs and UPDATEs to only using INSERTS. I'm guessing here, but I suspect the problem with doing UPDATEs is that they noop if the row isn't present. This can

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-14 Thread Fajar A. Nugraha
On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra rat...@tataelxsi.co.in wrote: Wireshark logs @ ASN-GW I could not attach wireshark pcap logs due to size constraint. I have took print screen of only ACCESS-ACCEPT message copied to MS word. While that information might be

Centos 6 Compile error

2012-03-13 Thread David Peterson
Has anyone seen this error? I am not sure what might be missing: In file included from rlm_eap_pwd.h:37, from rlm_eap_pwd.c:39: eap_pwd.h:42:24: error: openssl/ec.h: No such file or directory In file included from rlm_eap_pwd.h:37, from rlm_eap_pwd.c:39

Re: Centos 6 Compile error

2012-03-13 Thread Alan Buxey
Hi, Has anyone seen this error? I am not sure what might be missing: ECC support in OpenSSL - Redhat and their derivitives dont have it. you will need to not have EAP-PWD present and it will then compile not sure when/if Redhat will have ECC supportsome policy decision. rm -rf src

Re: Centos 6 Compile error

2012-03-13 Thread Fajar A. Nugraha
On Tue, Mar 13, 2012 at 6:12 PM, David Peterson dav...@wirelessconnections.net wrote: Has anyone seen this error?  I am not sure what might be missing: In file included from rlm_eap_pwd.h:37,                 from rlm_eap_pwd.c:39: eap_pwd.h:42:24: error: openssl/ec.h: No such file

RE: Centos 6 Compile error

2012-03-13 Thread David Peterson
I am checking out the master, should I be using something earlier? David -Original Message- From: Fajar A. Nugraha [mailto:l...@fajar.net] Sent: Tuesday, March 13, 2012 7:21 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Centos 6 Compile error

Re: Centos 6 Compile error

2012-03-13 Thread Fajar A. Nugraha
On Tue, Mar 13, 2012 at 7:01 PM, David Peterson dav...@wirelessconnections.net wrote: I am checking out the master, should I be using something earlier? Depends on what you need, actually. If you're interested in helping bug-hunting, or try out 3.0-only new features, then it's the right source.

RE: Centos 6 Compile error

2012-03-13 Thread Brian Julin
David Peterson Wrote: Sent: Tuesday, March 13, 2012 7:12 AM To: FreeRadius users mailing list Subject: Centos 6 Compile error Has anyone seen this error? I am not sure what might be missing: RHEL variants don't include EC support in OpenSSL due to some licensing/patent/whatnot issues

[SOLVED] RE: Centos 6 Compile error

2012-03-13 Thread David Peterson
Sent: Tuesday, March 13, 2012 8:01 AM To: FreeRadius users mailing list Subject: RE: Centos 6 Compile error I am checking out the master, should I be using something earlier? David -Original Message- From: Fajar A. Nugraha [mailto:l...@fajar.net] Sent: Tuesday, March 13, 2012 7:21 AM

SQL_LOG Interim Update missing partial config error? huh?

2012-03-13 Thread Christiaan Rademan
Greetings Everyone, I am using FreeRadius + mySQL + SQLIPPOOL. FreeRADIUS Version 2.1.11. The start and stop accounting records work fine. My issue is I keep getting the following in the logs: Tue Mar 13 22:18:33 2012 : Info: [sql_log] Couldn't find an entry Interim-Update in the config

Re: SQL_LOG Interim Update missing partial config error? huh?

2012-03-13 Thread Aidan Rowe
Hi Chrstiaan, It's because there is no SQL statement configured for Interim-Update by default, you need to create a query to be associated with it in modules/sql_log. A poor example: Interim-Update = UPDATE ${acct_table} \ SET FramedIPAddress = '%{Framed-IP-Address}', \

Re: Authentification failure error sql and Daloradius

2012-03-06 Thread Fajar A. Nugraha
On Tue, Mar 6, 2012 at 7:27 PM, Javier Ruiz Escalante fruiz...@hotmail.com wrote: Hello, After installing Daloradius I get the following error, could somebody give me a clue of how to solve it? Befoe everything was working... Did you read daloradius documentation, just in case it had some

Error

2012-03-06 Thread David Peterson
Has anyone run across this: Couldn't open dictionary /usr/local/share/freeradius/dictionary: Too many open files | David Peterson | Senior Engineer | Wireless Connections | | Office: 419.660.6100 ext 2287 | Cell: 419.706.7355| Fax: 419.668.4077 | www.wirelessconnections.net | | 166 Milan Ave |

RE: Error

2012-03-06 Thread Danner, Mearl
: Error Has anyone run across this: Couldn't open dictionary /usr/local/share/freeradius/dictionary: Too many open files | David Peterson | Senior Engineer | Wireless Connections | | Office: 419.660.6100 ext 2287 | Cell: 419.706.7355| Fax: 419.668.4077 | www.wirelessconnections.net | | 166 Milan

Re: Error

2012-03-06 Thread Alan DeKok
David Peterson wrote: Has anyone run across this: Couldn't open dictionary /usr/local/share/freeradius/dictionary: Too many open files You edited the dictionaries and broke them. You have a circular loop in loading the dictionaries. So the loading process is infinite, and never

error-cause-attribute in CoA-Nak

2012-02-14 Thread Gennaro Leo
Hi all, I'm a really newbie of freeradius server and I need your help. How can I configure the freeradius to set error-cause-attributes (e.g. 401 - Unsupported Attribute) when sending a CoA-Nak after receiving an Accounting Request? Thanks Gennaro - List info/subscribe/unsubscribe? See http

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Alan DeKok
Gennaro Leo wrote: How can I configure the freeradius to set error-cause-attributes (e.g. 401 - Unsupported Attribute) when sending a CoA-Nak after receiving an Accounting Request? $ man unlang update reply { Error-Cause = Unsupported-Attribute } This should go into the send

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Gennaro Leo
Gennaro Leo wrote: How can I configure the freeradius to set error-cause-attributes (e.g. 401 - Unsupported Attribute) when sending a CoA-Nak after receiving an Accounting Request? $ man unlang update reply { Error-Cause = Unsupported-Attribute } This should go into the send

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Alan DeKok
Gennaro Leo wrote: I added the Attribute-Name Unsupported-Attribute in the dictionary Did I say to do that? and modified the send-coa subsection as you suggested. Anyway in the dictionary the 401 code is not accepted (max 255). Can I modify this limit? You need to follow instructions.

Re: error-cause-attribute in CoA-Nak

2012-02-14 Thread Gennaro Leo
Hi, I began by saying that I am a newbie so you could expect some errors by me. Fortunately I solved immediately. Thank you anyway. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Doubt about Dropping Conflicting Error.

2012-02-02 Thread Alan DeKok
Rodrigo Yoshioka wrote: Does anyone have explanations about this error?? I couldn´t find something understandable about it on the internet. There are TONS of references to it on this list. Error: Dropping conflicting packet from client PPPoE_FTTH:41882 - ID: 66 due to unfinished request

Doubt about Dropping Conflicting Error.

2012-02-01 Thread Rodrigo Yoshioka
Hi folks, Does anyone have explanations about this error?? I couldn´t find something understandable about it on the internet.  Error: Dropping conflicting packet from client PPPoE_FTTH:41882 - ID: 66 due to unfinished request 457370 My radius server gives me this error frequently. Thanks

Re: eapol_test giving up and win-like error?

2012-01-23 Thread NdK
Il 20/01/2012 11:55, Phil Mayers ha scritto: If that's really all you've changed, there must be something wrong with Samba; it's getting the final crypto blob wrong, and the client is dropping the packets. You'll need to investigate and fix this. Just tested with radtest (have had to use

Re: eapol_test giving up and win-like error?

2012-01-23 Thread Phil Mayers
Mschap v1 doesn't validate the reply from server to client, which is what is failing with eapol_test. Therefore you're not testing the same path. Try using a local i.e. non samba user to test. I am sure the problem is with your samba daemon. -- Sent from my phone. Please excuse brevity and

Re: eapol_test giving up and win-like error?

2012-01-23 Thread Phil Mayers
Phil Mayers p.may...@imperial.ac.uk wrote: Mschap v1 doesn't validate the reply from server to client, which is what is failing with eapol_test. Therefore you're not testing the same path. Try using a local i.e. non samba user to test. I am sure the problem is with your samba daemon. -- Sent

RE: eapol_test giving up and win-like error?

2012-01-23 Thread Sergio NNX
I mentioned exactly that last week but he disregarded it! Subject: Re: eapol_test giving up and win-like error? From: p.may...@imperial.ac.uk Date: Mon, 23 Jan 2012 10:12:08 + To: freeradius-users@lists.freeradius.org Phil Mayers p.may...@imperial.ac.uk wrote: Mschap v1 doesn't

Re: eapol_test giving up and win-like error?

2012-01-23 Thread NdK
Il 23/01/2012 11:02, Phil Mayers ha scritto: Mschap v1 doesn't validate the reply from server to client, which is what is failing with eapol_test. Therefore you're not testing the same path. So radtest isn't actually equivalent to eapol_test. It's just another step for testing. Try using a

'Logout for NAS CP port 76, but no Login record' 'Login entry for NAS CP port 76 wrong order' Error

2012-01-20 Thread Zlyzwy
the error log: == Jan 20 11:15:07 radiusd[55144]:rlm_radutmp: Logout for NAS CP port 76, but no Login record Jan 20 11:15:07 radiusd[55144]: rlm_radutmp: Logout for NAS CP port 76, but no Login record Jan 20 11:14:06 radiusd[55144]: rlm_radutmp: Login entry for NAS

Re: 'Logout for NAS CP port 76, but no Login record' 'Login entry for NAS CP port 76 wrong order' Error

2012-01-20 Thread Fajar A. Nugraha
and writing the log to MySQL. There is one client running VMware Workstaion inside wiondow2003. And a virtual Debian is running in VM. Debian's network is bridged on host.I am receiving the error log: It shouldn't matter whether it's a VM or not. What matters is the network setup (e.g. bridged vs

Re: eapol_test giving up and win-like error?

2012-01-20 Thread NdK
Il 19/01/2012 13:01, Phil Mayers ha scritto: I'm not sure what the problem is then. From your original post, the authentication is failing at the *client*, in the inner EAP section. This normally means the final MSCHAP response is invalid, which only happens if some crypto has gone wrong

Re: eapol_test giving up and win-like error?

2012-01-20 Thread Phil Mayers
On 01/20/2012 10:30 AM, NdK wrote: Il 19/01/2012 13:01, Phil Mayers ha scritto: I'm not sure what the problem is then. From your original post, the authentication is failing at the *client*, in the inner EAP section. This normally means the final MSCHAP response is invalid, which only happens

Re: eapol_test giving up and win-like error?

2012-01-19 Thread Phil Mayers
EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit MPPE keys OK: 0 mismatch: 1 FAILURE Hmm. I see from your original email that Samba ntlm_auth are succeeding. There are a couple of buggy version of Samba out there that return invalid response values, and generate these

Re: eapol_test giving up and win-like error?

2012-01-19 Thread NdK
Il 19/01/2012 10:03, Phil Mayers ha scritto: EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit MPPE keys OK: 0 mismatch: 1 FAILURE These (plus the timeout one) are the lines printed after FR have already cloded session. Hmm. I see from your original email that Samba

Re: eapol_test giving up and win-like error?

2012-01-19 Thread Phil Mayers
On 19/01/12 11:07, NdK wrote: Il 19/01/2012 10:03, Phil Mayers ha scritto: EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit MPPE keys OK: 0 mismatch: 1 FAILURE These (plus the timeout one) are the lines printed after FR have already cloded session. Yes. Hmm. I see

eapol_test giving up and win-like error?

2012-01-18 Thread NdK
Hi all. I think I'm near to correctly configure my server... but I incur in a situation that IIUC should be related to win clients only: I get -8-- WARNING: !! WARNING: !! EAP session for state 0x6ac8f8c260c3e171 did not finish!

Re: eapol_test giving up and win-like error?

2012-01-18 Thread Alan DeKok
NdK wrote: I think I'm near to correctly configure my server... but I incur in a situation that IIUC should be related to win clients only: I get ... message and *eapol_test* (run from a *linux* machine!) gives up after about 10 seconds. Then read the error messages from eapol_test. Why

Re: Strange error in eapol_test

2012-01-18 Thread Phil Mayers
On 17/01/12 16:24, Rui Ribeiro wrote: Hi list, Still setting up a freeradius for eduroam -- internally it is working fine EAP, TTLS and al, however when proxying/connecting to the eduroam, everything seems ok in freeradius logs, however, eapol_test finishes with an error (WARNING: PMK mismatch

Re: eapol_test giving up and win-like error?

2012-01-18 Thread NdK
. Then read the error messages from eapol_test. Why does it stop? It should say. That's eapol_test output. I changed my AD pass to 'testing123' just for the time needed to test, so the values are the real ones. I can't see any error, just a timeout... There's a short delay before EAPOL: startWhen -- 0

Changing MTU value for EAP Session error

2012-01-10 Thread Sallee, Stephen (Jake)
I have read on the list and the FR wiki that decreasing the MTU value for the tunnel can help alleviate the pesky EAP session did not finish problem. I would like to try this as I am getting the same issue on IOS and Android based phones using the default certs FR ships with. However I cannot

Re: Changing MTU value for EAP Session error

2012-01-10 Thread Alan DeKok
Sallee, Stephen (Jake) wrote: I have read on the list and the FR wiki that decreasing the MTU value for the tunnel can help alleviate the pesky EAP session did not finish problem. I would like to try this as I am getting the same issue on IOS and Android based phones using the default certs

RE: Radperf message error

2012-01-04 Thread Serge Toussaint
Hi, For a big test for 9 000 requests with radperf, I have got the message : Radperf: received response to request we did not send. (id=125 socket 19) ( 500 lines) Serge -Message d'origine- De : freeradius-users-bounces+stoussaint=netprest@lists.freeradius.org

Error Reading Certificate file

2011-12-30 Thread McSparin, Joe
Get this error when running radiusd -X I checked my passwords in eap.cnf, ca.cnf, server.cnf and client.cnf rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied rlm_eap_tls: Error reading certificate file /usr/local/etc/raddb/certs/server.pem rlm_eap: Failed to initialize type

Re: Error Reading Certificate file

2011-12-30 Thread Alan DeKok
McSparin, Joe wrote: Get this error when running radiusd -X I checked my passwords in eap.cnf, ca.cnf, server.cnf and client.cnf rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied rlm_eap_tls: Error reading certificate file /usr/local/etc/raddb/certs/server.pem

RE: Error Reading Certificate file

2011-12-30 Thread McSparin, Joe
+jmcsparin=hillcountrymemorial.org@lists.freerad ius.org [mailto:freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists .freeradius.org] On Behalf Of Alan DeKok Sent: Friday, December 30, 2011 10:22 AM To: FreeRadius users mailing list Subject: Re: Error Reading Certificate file McSparin

RE: Error when trying to create certificates

2011-12-23 Thread McSparin, Joe
: freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freerad ius.org [mailto:freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists .freeradius.org] On Behalf Of Alan DeKok Sent: Thursday, December 22, 2011 5:46 PM To: FreeRadius users mailing list Subject: Re: Error when

RE: Error when trying to create certificates

2011-12-23 Thread Herbert J. Skuhra
On Fri, Dec 23, 2011, at 08:52, McSparin, Joe wrote: It's a package add from FreeBSD ports. I'll try reinstalling it on another machine and see where it puts it. http://www.freebsd.org/cgi/cvsweb.cgi/ports/net/freeradius2/files/pkg-message.in?rev=1.2;content-type=text%2Fplain -- Herbert -

RE: Error when trying to create certificates

2011-12-22 Thread McSparin, Joe
To: FreeRadius users mailing list Subject: Re: your mail Hi, Keep getting this error message when running make in my /raddb/certs directory I reinstalled openssl but to no avail.  Any thoughts? /usr/bin/openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr  -key `grep

Re: Error when trying to create certificates

2011-12-22 Thread Alan DeKok
McSparin, Joe wrote: It's not located in the /usr/local/etc/raddb directory where my install is but I did a search and it is located here /usr/local/share/examples/freeradius/raddb/certs/xpextensions. Find out who created the packaged (RPM, DEB, etc.) for your system, and file a bug. The

Re: Error when trying to create certificates

2011-12-22 Thread Fajar A. Nugraha
McSparin, Joe wrote: It's not located in the /usr/local/etc/raddb directory where my install is but I did a search and it is located here /usr/local/share/examples/freeradius/raddb/certs/xpextensions. That's weird. What OS/distro is this? OS packages would usualy put them in

Re[6]: freeradius2 installation error

2011-12-07 Thread tolik_shavlov...@mail.ru
will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/freeradius2-installation-error-tp5052326p5052587.html To unsubscribe from freeradius2 installation error, click here. NAML

freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
-2.1.25_1 is marked as broken: SQLITE and SQLITE3 are mutually exclusive.. *** Error code 1 Stop in /usr/ports/security/cyrus-sasl2. *** Error code 1 Stop in /usr/ports/net/openldap24-client. *** Error code 1 Stop in /usr/ports/net/openldap24-client. *** Error code 1 Stop in /usr/ports/security/heimdal

Re: freeradius2 installation error

2011-12-06 Thread Fajar A. Nugraha
On Tue, Dec 6, 2011 at 9:59 PM, tolik_shavlov...@mail.ru tolik_shavlov...@mail.ru wrote:  freeradius-2.1.12 depends on executable: gmake - found ===   freeradius-2.1.12 depends on file: /usr/local/bin/perl5.12.4 - found == Hi, freeradius2 has error while installing under freebsd

Re[2]: freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
, [hidden email] [hidden email] wrote:  freeradius-2.1.12 depends on executable: gmake - found ===   freeradius-2.1.12 depends on file: /usr/local/bin/perl5.12.4 - found == Hi, freeradius2 has error while installing under freebsd. I made (make clean), and againt make install clean

Re: freeradius2 installation error

2011-12-06 Thread Alan Buxey
Hi, but i want to build from /usr/ports, beacause such freeradisu propose mysql module. freeradius-2.1.2 form source doesn't include mysql module. ??? it does here - something that the BSD people have done to the port?? alan - List info/subscribe/unsubscribe? See

Re: Re[2]: freeradius2 installation error

2011-12-06 Thread Fajar A. Nugraha
On Tue, Dec 6, 2011 at 10:31 PM, tolik_shavlov...@mail.ru tolik_shavlov...@mail.ru wrote: but i want to build from /usr/ports, Then ask ports maintaners. Really. beacause such freeradisu propose mysql module. freeradius-2.1.2 form source doesn't include mysql module. How did you reach that

Re[4]: freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
://www.freeradius.org/list/users.html -- If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/freeradius2-installation-error-tp5052326p5052460.html To unsubscribe

Re: Re[4]: freeradius2 installation error

2011-12-06 Thread Fajar A. Nugraha
On Tue, Dec 6, 2011 at 10:51 PM, tolik_shavlov...@mail.ru tolik_shavlov...@mail.ru wrote: Dear Fajar, i failed to intergate FR + mysql, i was informed that my FR is without mysql module. then why didn't you ask that in the first place? It'd save lots of time. i am in process of building

Re[6]: freeradius2 installation error

2011-12-06 Thread tolik_shavlov...@mail.ru
library: sasl2.2 - not found === Verifying install for sasl2.2 in /usr/ports/security/cyrus-sasl2 === cyrus-sasl-2.1.25_1 is marked as broken: SQLITE and SQLITE3 are mutually exclusive.. *** Error code 1 Stop in /usr/ports/security/cyrus-sasl2. *** Error code 1 Stop in /usr/ports/net/openldap24-client

Re: freeradius2 installation error

2011-12-06 Thread Alan DeKok
tolik_shavlov...@mail.ru wrote: cd freeradius2 freebsd_v8# make === Vulnerability check disabled, database not found Go ask the FreeBSD people why their ports are broken. We didn't write that software, and can't help you fix it. the same while installing from source(( No. Alan

Re[2]: freeradius2 installation error

2011-12-06 Thread Толик Шавловский
Dear Alan, its from the source. but error is the same as with ports. 06 декабря 2011, 20:31 от Alan DeKok al...@deployingradius.com: tolik_shavlov...@mail.ru wrote: cd freeradius2 freebsd_v8# make === Vulnerability check disabled, database not found Go ask the FreeBSD people why

Re: freeradius2 installation error

2011-12-06 Thread Alan Buxey
Hi, Dear Alan, its from the source. but error is the same as with ports. you need the development package for MySQL - or FreeRADIUS build process wont find the required headers and includes. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re[6]: freeradius2 installation error

2011-12-06 Thread Толик Шавловский
thanks for great explanation. i could install Fr from ports (the main problem was in ldap, so i installed without ldap) BR 06 декабря 2011, 20:13 от Fajar A. Nugraha l...@fajar.net: On Tue, Dec 6, 2011 at 10:51 PM, tolik_shavlov...@mail.ru tolik_shavlov...@mail.ru wrote: Dear Fajar, i

Connection Lost, tls resumption error

2011-11-30 Thread Andreas Rudat
Hi, in my enviroment I got three AP's runnning, all with the same essid, after a while the connection seems lost and a reconnection starts to another AP and then I get the resumption error but I have no idea why I lost the connection. No Errors in radius debug and a good reception is given

RE: Connection Lost, tls resumption error

2011-11-30 Thread Sallee, Stephen (Jake)
+jake.sallee=umhb@lists.freeradius.org] On Behalf Of Andreas Rudat Sent: Wednesday, November 30, 2011 8:25 AM To: FreeRadius users mailing list Subject: Connection Lost, tls resumption error Hi, in my enviroment I got three AP's runnning, all with the same essid, after a while the connection

Re: Connection Lost, tls resumption error

2011-11-30 Thread Alan DeKok
the resumption error but I have no idea why I lost the connection. No Errors in radius debug and a good reception is given. The AP is responsible for sending RADIUS packets saying a connection is down. If it doesn't send those packets, buy an AP which does send them. The resumption error can be only

Re: Connection Lost, tls resumption error

2011-11-30 Thread Andreas Rudat
in a new challange from the other AP. and a reconnection starts to another AP and then I get the resumption error but I have no idea why I lost the connection. No Errors in radius debug and a good reception is given. The AP is responsible for sending RADIUS packets saying a connection

Re: Error: Failed to send packet; No response from Server

2011-11-30 Thread suggestme
Alan, I updated the ports tree in FreeBSD which upgraded FreeRadius to 2.1.12 from 2.1.10. After installation I am successful on doing basic PAP Authentication. It solved this issue. Thank You so much! -- View this message in context: http://freeradius.1045715.n5.nabble.com/Error-Failed

HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Victor Guk
what's wrong? Help! Tue Nov 29 17:14:00 2011 : Auth: Login incorrect: [host/dbu14/via Auth-Type = EAP] (from client private-network port 123 cli 00-0E-A6-B4-43-99) Tue Nov 29 17:16:02 2011 : Error: -- verify error:num=10:certificate has expired Tue Nov 29 17:16:02 2011 : Error: TLS Alert

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan DeKok
Victor Guk wrote: what's wrong? Help! ... Tue Nov 29 17:16:02 2011 : Error: TLS Alert write:fatal:certificate expired What does that line say? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan Buxey
Hi, what's wrong? Help! Tue Nov 29 17:14:00 2011 : Auth: Login incorrect: [host/dbu14/via Auth-Type = EAP] (from client private-network port 123 cli 00-0E-A6-B4-43-99) Tue Nov 29 17:16:02 2011 : Error: -- verify error:num=10:certificate has expired Tue Nov 29 17:16:02 2011 : Error: TLS

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Victor Guk
29.11.2011 19:54, freeradius-users-requ...@lists.freeradius.org пишет: options: client has wrong certificate client has wrong date/time set on it certificate has expired alan The time is set correctly. Certificate has expired. Can I renew it without breaking. Or to create a new one? - List

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan Buxey
you can create a new RADIUS cert whenever you want. Just ensure its signed by same CA and has same details such as CN . If you want to change CA then client config changes will be needed (likewise for CN changes) ...that assumes the clients were configured properly/securely. If its just a

Error: /etc/freeradius/proxy.conf[667]: Failed looking up hostname radius.easyzonecorp.net.

2011-11-28 Thread EasyHorpak.com
Dear all I try to set freeradius proxy and put my server my dns server and my isp dns is ok. on server startup after reboot freeradius not start and show error Error: /etc/freeradius/proxy.conf[667]: Failed looking up hostname radius.easyzonecorp.net. but when i try to start by hand /etc

Re: Error: /etc/freeradius/proxy.conf[667]: Failed looking up hostname radius.easyzonecorp.net.

2011-11-28 Thread Alan Buxey
Hi, on server startup after reboot freeradius not start and show error Error: /etc/freeradius/proxy.conf[667]: Failed looking up hostname radius.easyzonecorp.net. but when i try to start by hand /etc/init.d/freeradius start, it 's OK. Why freeradius fail to looking up hostname only

Error: Failed to send packet; No response from Server

2011-11-28 Thread suggestme
deployingradius.com site for basic testing. I can start the server in debugging mode successfully using radiusd -X, which shows Ready to process requests. But while doing basic radtest for PAP authentication it gives error: radclient: Failed to send packet for ID 85: (unknown error) radclient

Re: Error: Failed to send packet; No response from Server

2011-11-28 Thread Alan DeKok
suggestme wrote: I was successful to install Freeradius 2.1.10 Upgrade to 2.1.12. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

getting sometimes TLS error

2011-11-19 Thread Andreas Rudat
Hi, I get the error from time to time, I use one self signed cert for alle clients and some times I get this error from one ubuntu client, do you have any idea? so self+signed cert + mschapv2 TLS Alert read:fatal:bad certificate Sat Nov 19 18:52:30 2011 : Error: TLS_accept:failed in SSLv3

<    1   2   3   4   5   6   7   8   9   10   >