RE: configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread stefan.paetow
You might want to do an LDAP lookup first on your UPN to find the samAccountName, then use that with ntlm_auth. Stefan From: freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org] On Behalf

Re: configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread Alan DeKok
Angelica Delgado wrote: > We have our freeradius setup to authenticate with Active Directory for > EAP. Currently, it uses the samaccountname but we want to use UPN > instead. We get "NT_STATUS_NO_SUCH_USER" when testing with ntlm through > command line. > > ntlm_au

configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread Angelica Delgado
We have our freeradius setup to authenticate with Active Directory for EAP. Currently, it uses the samaccountname but we want to use UPN instead. We get "NT_STATUS_NO_SUCH_USER" when testing with ntlm through command line. ntlm_auth --request-nt-key --domain=test.local --username=tu.

Book for freeradius 3.0

2013-10-13 Thread Osvaldo T Crispim Filho
Is there any book about the new version of FreeRADIUS 3.0? -- - Osvaldo T Crispim Filho - - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems with compiling freeradius on Ubuntu Linux

2013-10-12 Thread Arran Cudbard-Bell
On 12 Oct 2013, at 17:40, Andrei Petru Mura wrote: > Hello, > > I imported FreeRADIUS from git on Eclipse, and tried to build it, but this > error occurs while building the project: > > threads.h:47:2: error: #error WITH_THREADS defined, but pthreads not available > &

Problems with compiling freeradius on Ubuntu Linux

2013-10-12 Thread Andrei Petru Mura
Hello, I imported FreeRADIUS from git on Eclipse, and tried to build it, but this error occurs while building the project: *threads.h:47:2: error: #error WITH_THREADS defined, but pthreads not available* * * Can anybody guide me how to solve this issue? Thanks. - List info/subscribe/unsubscribe

RE: clone break freeradius

2013-10-11 Thread stefan.paetow
) account for the original machine from Active Directory. Then retry the net join command for both machines. Stefan From: freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org] On Behalf Of trevor

Re: clone break freeradius

2013-10-11 Thread A . L . M . Buxey
their own identity (eg /etc/hosts and $HOSTNAME all refer to a unique name per machine) and that there is nothing in the AD referencing either system. THEN net ads join each boxbut this isnt a freeradius question. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

clone break freeradius

2013-10-10 Thread trevor obba
I configured freeradius version 2.2.0 running on Ubuntu 12.04 to authenticate against active directory and it is working fine until I decide to clone (vmware) the machine. Once the machine is clone I changed the IP address, hostname in (/etc/hosts and /etc/hostname) and also changed the name in

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread John Dennis
On 10/10/2013 08:39 AM, Puzzel wrote: > I've made configure at top level ./configure > --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib > --with-oracle-include-dir=/usr/include/oracle/11.2/client64 > > Then i made make, but i still can't find rlm_sql_oracle.so file. :/ Try reading the outp

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Alan DeKok
Puzzel wrote: > I've made configure at top level ./configure > --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib > --with-oracle-include-dir=/usr/include/oracle/11.2/client64 If the build is having issues, you should READ the output of "configure". It tells you what it's building, and wha

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
acle.so file. :/ run the configure script in src/modules/rlm_sql/drivers/rlm_sql_oracle and post the output and config.log file. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
I've made configure at top level ./configure --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib --with-oracle-include-dir=/usr/include/oracle/11.2/client64 Then i made make, but i still can't find rlm_sql_oracle.so file. :/ -Original Message----- From: freeradius-use

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
ething additional you have to do as well as running the previous command. - retry - Repeat the previous command which generated this error message. *sigh* -Arran > > -Original Message- > From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org > [mailto:f

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
When i do make at top level, i'm getting this output: make Makefile:10: *** Missing 'Make.inc' Run './configure [options]' and retry". Stop. -----Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org [mailto:freeradius-

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
the module directory. all.mk is a make include not an actual make file. It should pick up that rlm_sql_oracle has been configured (even if it's not marked as stable) and build it. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
Tnx Arran, ./configure went fine and then created all.mk file. What to do next? "make" don't work. I'm sorry i'm not very much experienced in linux. -Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org [mailto:freeradius

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
script is much better. http://freeradius.org/download.html Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
rw-r--r--. 1 root root82983 2009-08-15 orai18n-mapping.jar -rw-r--r--. 1 root root 298388 2009-08-15 ottclasses.zip -rw-r--r--. 1 root root37807 2009-08-15 xstreams.jar but it didn't help. -Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.o

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Fajar A. Nugraha
On Thu, Oct 10, 2013 at 2:22 PM, Puzzel wrote: > --with-oracle-include-dir=/usr/lib/oracle/11.2/client64 > > ** ** > > > configure: WARNING: oracle headers not found. Use > --with-oracle-include-dir=.configure: WARNING: silently not > building rlm_sql_oracle. > > configure: WARNING: FA

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread A . L . M . Buxey
Hi, >I'e installed oracle instant client from rpm packages (basic + devel) okay. if you've done this rather than manually installing from Oracle then its most likely that the paths are different...you will need to check where your Oracle files have been installed and use those paths instead

freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
Hi there, Im trying use freeradius with oracle database. I've used guide on this site http://wiki.freeradius.org/modules/Rlm_sql_oracle to compile oracle driver. I'e installed oracle instant client from rpm packages (basic + devel) When i use ./configure --with-orac

Re: Freeradius 3 and DHCP

2013-10-09 Thread Arran Cudbard-Bell
On 9 Oct 2013, at 11:56, Rok Kosir wrote: > On 10/08/2013 07:09 PM, Arran Cudbard-Bell wrote: >> On 8 Oct 2013, at 17:44, Phil Mayers >> wrote: >> >> >>> On 08/10/13 17:01, Rok Kosir wrote: >>> >>> >>>> authentication to my

Re: Freeradius 3 and DHCP

2013-10-09 Thread Rok Kosir
On 10/08/2013 07:09 PM, Arran Cudbard-Bell wrote: On 8 Oct 2013, at 17:44, Phil Mayers wrote: On 08/10/13 17:01, Rok Kosir wrote: authentication to mysql), when i run freeradius -X, i get Segmentation Fault when it reaches dhcp listner. See doc/bugs. and skip to section 2. :) Arran

Re: Freeradius 3 and DHCP

2013-10-08 Thread Arran Cudbard-Bell
On 8 Oct 2013, at 17:44, Phil Mayers wrote: > On 08/10/13 17:01, Rok Kosir wrote: > >> authentication to mysql), when i run freeradius -X, i get Segmentation >> Fault when it reaches dhcp listner. > > See doc/bugs. and skip to section 2. :) Arran Cudbard-Bell Fre

Re: Freeradius 3 and DHCP

2013-10-08 Thread Phil Mayers
On 08/10/13 17:01, Rok Kosir wrote: authentication to mysql), when i run freeradius -X, i get Segmentation Fault when it reaches dhcp listner. See doc/bugs. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius 3 and DHCP

2013-10-08 Thread Rok Kosir
Hello, i had running version of freeradius 2.1.10 (from ubuntu ppa) with workable EAP-TTLS configuration. Today when i noticed that version 3 is out i decided to upgrade to it and also test the built-in dhcp server. All was goin well until i enabled dhcp (EAP-TTLS was working and authentication

Re: Freeradius issue : Active Directory Integration

2013-10-04 Thread Phil Mayers
On 10/04/2013 07:02 AM, Shameek Bhattacharya wrote: Hello, I am facing issue with MS CHAP authentication in Ubuntu 13.04 . Also NTLM Authentication takes place when putting 'wait = no' in /etc/freeradius/modules/ntlm_auth ie exec ntlm_auth { wait = no "wait = no

Re: Freeradius issue : Active Directory Integration

2013-10-03 Thread Alan Buxey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi. Wondering what authentication method you are using as maybe looking at wrong ntlm check the mschap module for its ntlm_auth incantation. Also, if you have doubts about the AD account used to bind them follow that up. Get it bound in th

Re: Freeradius issue : Active Directory Integration

2013-10-03 Thread Andreas Sartori
Hi, > Hello, > I am facing issue with MS CHAP authentication in Ubuntu 13.04 . Also > NTLM Authentication takes place when putting 'wait = no' in > /etc/freeradius/modules/ntlm_auth > is ntml_auth on the command line working? Please provide some debug

Freeradius issue : Active Directory Integration

2013-10-03 Thread Shameek Bhattacharya
Hello, I am facing issue with MS CHAP authentication in Ubuntu 13.04 . Also NTLM Authentication takes place when putting 'wait = no' in /etc/freeradius/modules/ntlm_auth ie exec ntlm_auth { wait = no program = “/usr/bin/ntlm_auth -request-nt-key -username=%{mschap

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread Arran Cudbard-Bell
gt;> if (Tmp-String-0 != "stop") { >> >> } >> >> That should work. Ugly, but functional. > > this is pretty much what I was going to suggest. ugly, yes. but sometimes > simple is best. > and its much easier for a non u

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread A . L . M . Buxey
Hi, > A simple thing: > > > > update control { > Tmp-String-0 := "stop" > } > ... > > > > > if (Tmp-String-0 != "stop") { > > } > > That should work. Ugly, but functional. this is pretty much what I was going to suggest

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread Arran Cudbard-Bell
> We want to stop executing the in the first two cases > ("infected" and "tempsus"), effectively doing something like a return. Where you have ok in the case stanzas, put ok { ok = return } -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread Alan DeKok
Bruce Bauman wrote: > We want to stop executing the in the first two > cases ("infected" and "tempsus"), effectively doing something like a return. There is a "return" code. See doc/configurable_failover.rst: ok { ok = return } That may work. The issue is that there's really n

control flow in FreeRADIUS authorize section

2013-10-02 Thread Bruce Bauman
We are getting unexpected behavior from FreeRADIUS 2.2.x (built from current git). We want to check if a user is BLOCKED first, and only then do we want to perform some other checks. Our current config looks like this: authorize { #auth_log # uncomment for debugging

Post a question on freeradius

2013-09-30 Thread Suryalakshmi Annadurai
Email id: mailto:suryalakshmi.annadu...@carc.co.in>> Or ritu.gla...@gmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius - DeadLock

2013-09-25 Thread Fajar A. Nugraha
MySQL client library or the MySQL >> server, just because they're included in the radius.log file does not mean >> they originated from within the FreeRADIUS code base. >> >> > I've doesn't changed anything in db... and I haven't custom quer

Re: Freeradius - DeadLock

2013-09-25 Thread Alisson
cluded in the radius.log file does not mean > they originated from within the FreeRADIUS code base. > > > I've doesn't changed anything in db... and I haven't custom queries... > > Here is a post describing possible causes. I've never seen this with the &

Re: Freeradius - DeadLock

2013-09-25 Thread Arran Cudbard-Bell
On 25 Sep 2013, at 20:54, Alisson wrote: > This messages are from radius.log Those errors were generated by the MySQL client library or the MySQL server, just because they're included in the radius.log file does not mean they originated from within the FreeRADIUS code base. > I

Re: Freeradius - DeadLock

2013-09-25 Thread Alisson
hose would be caused by a bug in your custom SQL queries? > > Arran Cudbard-Bell > FreeRADIUS Development Team > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius - DeadLock

2013-09-25 Thread Arran Cudbard-Bell
On 25 Sep 2013, at 20:08, Alisson wrote: > Hi, > > I have a lot of logs with deadlocks Those would be caused by a bug in your custom SQL queries? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius - DeadLock

2013-09-25 Thread Alisson
Hi, I have a lot of logs with deadlocks ed Sep 25 15:05:44 2013 : Error: [sql] Couldn't update SQL accounting ALIVE record - Deadlock found when trying to get lock; try restarting transaction Wed Sep 25 15:05:44 2013 : Error: [sql] Couldn't update SQL accounting ALIVE record - Deadlock found

Re: message freeradius

2013-09-24 Thread Alan DeKok
María Teresa Mondragón Reyes wrote: > I followed the instructions to configure freeradius plus remote mysql > server and when put in debug mode freeradius -f -X i get > this message. You don't need "-f -X". Just "-X" is good enough. > rad_recv

Re: message freeradius

2013-09-24 Thread Phil Mayers
On 24/09/13 17:58, María Teresa Mondragón Reyes wrote: rad_recv: Accounting-Request packet from host 192.168.4.224 port 32769, id=157, length=285 Invalid packet code 4 sent to a proxy port from home server 192.168.4.224 port 32769 - ID 157 : IGNORED Ready to process requests. This should be cl

message freeradius

2013-09-24 Thread María Teresa Mondragón Reyes
Hi everybody I need some help I'm new in this topic and I'm traying to configure a freeradius serve. I followed the instructions to configure freeradius plus remote mysql server and when put in debug mode freeradius -f -X i get this message. rad_recv: Accounting-Request packet

Re: Freeradius-Users Digest, Vol 101, Issue 50

2013-09-23 Thread paul trader
On Mon, 23 Sep 2013 at 18:49, Rui Ribeiro opined: RR:Your not crazy for sure. The problem authenticating with Windows boxen RR:is that they only support MSCHAPv2… kudos to Microsoft. hi rui - thanks for that, although my family and co workers may disagree! according to this wiki faq entry: h

Re: Freeradius-Users Digest, Vol 101, Issue 50

2013-09-23 Thread Rui Ribeiro
-- Message: 5 Date: Mon, 23 Sep 2013 12:33:10 -0400 (EDT) From: paul trader To: freeradius-users@lists.freeradius.org Subject: pap always returns noop for windows dialup authentication Message-ID: Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII hi

Re: FreeRadius Error " Access Rejected" Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
Thank you Alan I will pursue that line of inquiry further. On 9/23/2013 8:18 PM, Alan DeKok wrote: Daniel Baker wrote: [ldap] performing search in dc=citlao,dc=local, with filter (uid=root) [ldap] object not found [ldap] search failed What part of that is unclear? What can I try to

FreeRadius Error " Access Rejected" Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
se of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect ( [ldap] User not found): [root/trash] (from client LTC-ROUTER port 2) Using Post-Auth-Type Reject # Executing group from f

Re: FreeRadius Error " Access Rejected" Only On Some CISCO Switch Ports

2013-09-23 Thread Alan DeKok
Daniel Baker wrote: > [ldap] performing search in dc=citlao,dc=local, with filter (uid=root) > [ldap] object not found > [ldap] search failed What part of that is unclear? > What can I try to fix the authentication issues so that all ports are being > successfully authenticated ? Ensur

Re: Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Alan DeKok
Husnain Taseer wrote: > In tcpdump asterisk not sending request to the freeradius can u tell > after configuring freeradius what configurations are needed to be done > in asterisk. You were told to ask this question on the asterisk mailing list. We are not asterisk, and we know noth

Re: Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Husnain Taseer
In tcpdump asterisk not sending request to the freeradius can u tell after configuring freeradius what configurations are needed to be done in asterisk. Regards, Husnain Taseer On Mon, Sep 23, 2013 at 4:11 PM, Adam Bishop wrote: > On 23 Sep 2013, at 11:27, Husnain Taseer wrote: > >

Re: Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Adam Bishop
On 23 Sep 2013, at 11:27, Husnain Taseer wrote: > Even I don't get any request from asterisk server in radius logs. You're looking at the wrong layer for the problem. Fire up tcpdump. Do you see any radius traffic leaving the asterisk box? Does it reach the RADIUS server? If no traffic is l

Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Husnain Taseer
Hi, I want to authenticate asterisk peer using freeradius I am using asterisk 12.0.0 and Freeradius 2.2.1. I have configured freeradius correctly as I am able to authenticate user saved in users file from the terminal by using "radclient" command from the terminal. but when I try to reg

FreeRadius Error " Access Rejected" Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
se of this. ++[pap] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect ( [ldap] User not found): [root/trash] (from client LTC-ROUTER port 2) Using Post-Auth-Type Reject # Executing group from file /e

Re: Freeradius + 2 x LDAP + VLAN

2013-09-16 Thread Miroslav Lednicky
12.9.2013 19:36, Arran Cudbard-Bell napsal(a): On 12 Sep 2013, at 18:18, Miroslav Lednicky mailto:miroslav.ledni...@fnusa.cz>> wrote: Hello, I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 authorize { ldap1 if (ok) { update reply { Tunne

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-16 Thread A . L . M . Buxey
s text in the file: >/etc/freeradius/modules/mschap > >ntlm_auth = "/path/to/ntlm_auth --request-nt-key >--username=%{mschap:User-Name:-None} >--domain=%{%{mschap:NT-Domain}:-MYDOMAIN} >--challenge=%{mschap:Challenge:-00} >--nt-response=%{msch

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-16 Thread Alan DeKok
Beliars Fire wrote: > The next Step wbinfo -a *user*%*password *works too, but i`m getting > this Error-Message: > > /Could not authenticate user Username%Password with plaintext password/ > challenge/response password authentication succeeded > > Is this normal? How can I fix it? The Response se

RE: Freeradius 2.1.12 Second LDAP Server

2013-09-16 Thread Beliars Fire
or-Message: Could not authenticate user Username%Password with plaintext password challenge/response password authentication succeeded Is this normal? How can I fix it? The Response seems to work correctly. The Second One is this: It`s the last Point on this Page: Configuring FreeRadius to use ntml

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-14 Thread Mathieu Simon
Hi While I generally chime in with Alan's later message, one important you should start reading about and differentiating is Authentication and Authorization (the later is Accounting of AAA with RADIUS). While you can do Authorization using LDAP with AD, you can't do the Authentication part using

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Nikolaos Milas
On 13/9/2013 9:35 μμ, Nikolaos Milas wrote: Where can I find the v3.0.0 source branch? Oh, I found it and it includes a spec file for redhat: https://github.com/FreeRADIUS/freeradius-server/tree/release_branch_3.0.0/redhat Is the spec file in a well-working condition? (I might test, but

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Arran Cudbard-Bell
On 13 Sep 2013, at 19:47, Nikolaos Milas wrote: > On 13/9/2013 9:35 μμ, Nikolaos Milas wrote: > >> >> Where can I find the v3.0.0 source branch? > > Oh, I found it and it includes a spec file for redhat: > https://github.com/FreeRADIUS/freeradius-server/tree/

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Nikolaos Milas
On 13/9/2013 8:40 μμ, Arran Cudbard-Bell wrote: If you do it the way I suggested I highly recommend you use V3.0.0 (release_branch_3.0.0 or master/HEAD) instead, as the list/attribute handling is much better. Thanks, I'll look into rlm_cache. I wonder if anyone in this list has created a v

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Nikolaos Milas
er = 2 timeout = 4 timelimit = 3 net_timeout = 1 } ...having added in ldap.attr the following (using current unused freeradius schema attributes): replyItem DHCP-Subnet-Mask radiusArapZoneAccess replyItem DHCP-Router-Address radius

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Arran Cudbard-Bell
if appropriate. If you do it the way I suggested I highly recommend you use V3.0.0 (release_branch_3.0.0 or master/HEAD) instead, as the list/attribute handling is much better. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-13 Thread Alan DeKok
Beliars Fire wrote: > -> I`m worked to this Tutorial Step-by-Step. On the last two steps, i`m > configured Freeradius to use ntlm_auth > This was obviousy wrong, cause > i want to implement LDAP-Severs. Please, don't think you're smarter than people with decades more e

Re: Freeradius authenticate against Active directory

2013-09-13 Thread Matthew Newton
On Fri, Sep 13, 2013 at 12:23:47AM +0100, trevor obba wrote: > expand: --username=%{mschap:User-Name:-None} -> --username=t...@abc.ac.uk ... > Exec-Program output: Logon failure (0xc4f) > How can I fix the problem of authentication users that type > in there local realm @abc.ac.uk with their

Freeradius authenticate against Active directory

2013-09-12 Thread trevor obba
I am running freeradius 2.2.0, I have configured freeradius to authenticate against active directory and also offer eduroam service  When I authenticate my username as “test” and password in to my wireless devices it works. However if I try to authenticate my username as t...@abc.ac.uk it does

Re: Freeradius + 2 x LDAP + VLAN

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 18:18, Miroslav Lednicky wrote: > Hello, > > I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 authorize { ldap1 if (ok) { update reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802 Tunnel-Private

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
> It's like you're asking for flying lessons, and showing up with a > bicycle. There's a bit of a disconnect somewhere. Not true, they make these awesome little fold up bikes you can chuck in the back of the plane. Arran Cudbard-Bell FreeRADIUS Development Team

Freeradius + 2 x LDAP + VLAN

2013-09-12 Thread Miroslav Lednicky
Hello, I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 I using it for 802.1x users. I need switch users from ldap1 to VLAN 1 and users from ldap2 to VLAN 2. I don't know how can i do it. My configuration: /etc/freeradius/modules/ldap: ldap

Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Kevin Bigalke
Hello, i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login with 802.1 works perfectly. I`m using a Windows LDAP Server for the Login and want to add a second LDAP-Server for a Fail Over. I`m following the Tutorials to setup my Freeradius Server: *Click*. I`cant find a

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Alan DeKok
Kevin Bigalke wrote: > i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login > with 802.1 works perfectly. I`m using a Windows LDAP Server for the > Login and want to add a second LDAP-Server for a Fail Over. I`m > following the Tutorials to setup my Freeradius Ser

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 15:47, Kevin Bigalke wrote: > Hello, > i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login with > 802.1 works perfectly. I`m using a Windows LDAP Server for the Login and want > to add a second LDAP-Server for a Fail Over. I`m following the

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
> back of the plane. Still trying to come up with a justification for an rlm_avionics module. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Alan DeKok
Nikolaos Milas wrote: > ldconfig -v output does not list any *ldap* libraries in /usr/lib64 > although they exist (while it lists *ldap* libs in > /usr/local/openldap/lib64), obviously because: Well... this is a local OS issue. You'll need to consult your OS documentation to figure out what's

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
On 12/9/2013 2:46 μμ, Arran Cudbard-Bell wrote: Your linker's search path doesn't include the directory the libraries are in. Hmm, it seems the path is included but the ldap libs therein are not used because there is an "override" in /etc/ld.so.conf: # ldconfig -v | grep -v ^$'\t' /usr/lib6

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Fajar A. Nugraha
On Thu, Sep 12, 2013 at 3:25 PM, Nikolaos Milas wrote: > Hello, > > I am trying to use http://www.packetfence.org/**downloads/PacketFence/** > freeradius/freeradius-2.2.0-2.**el6.src.rpm<http://www.packetfence.org/downloads/PacketFence/freeradius/freeradius-2.2.0-2.el6.src.r

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Arran Cudbard-Bell
les didn't exist when building the RPM. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
/BUILDROOT/freeradius-2.2.0-3.el6.x86_64/usr/lib64/freeradius/rlm_ldap.so error: File not found: /home/fradius1/rpmbuild/BUILDROOT/freeradius-2.2.0-3.el6.x86_64/usr/lib64/freeradius/rlm_ldap-2.2.0.so But I have also installed the standard openldap and openldap-devel packages (openldap 2.4.23, as

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Arran Cudbard-Bell
--with-rlm-ldap-lib-dir= --with-rlm-ldap-include-dir= Top level configure. > > Thanks, > Nick > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
Hello, I am trying to use http://www.packetfence.org/downloads/PacketFence/freeradius/freeradius-2.2.0-2.el6.src.rpm to create custom FreeRadius RPMs for RHEL/CentOS 6. The main aim is to add --with-dhcp compile option which is not included in the standard build. The secondary aim is to

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Alan DeKok
Nikolaos Milas wrote: > My understanding is that the term "production system" implies the > definition above. It's just a warning. If it works for you, it works. > Does the reference to "code" apply to the configuration file only > (sites-available/dhcp) o

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Nikolaos Milas
term "production system" implies the definition above. Does the reference to "code" apply to the configuration file only (sites-available/dhcp) or to the DHCP FreeRadius module (as I have probably misunderstood)? Please, clarify. Thanks, Nick - List info/subscribe/unsubscribe? See

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Arran Cudbard-Bell
SHOULD NOT be used in a > # production system. It is intended for validation and > # experimentation ONLY." > > My understanding is that the term "production system" implies the definition > above. > > Does the reference to "code" appl

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Arran Cudbard-Bell
feedback and on your involvement with next FreeRadius > release(s) development, do you expect the DHCP module to be production ready > in the next release? > > I can surely experiment now with the current "experimental" release, but it > would be important to have a ro

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Nikolaos Milas
On 31/8/2013 5:57 μμ, Nikolaos Milas wrote: I'll look into DHCP... Looking at the sites-available/dhcp example setup (on v2.2.0) I see that the DHCP code is not production-ready. Based on user feedback and on your involvement with next FreeRadius release(s) development, do you expec

Re: freeradius eam sim authorization to everyone

2013-09-10 Thread Alan DeKok
Maxim Shoustin wrote: > Can I configure to give "OK" to any sim based on provider only, like > "Orange", for example/ No. The design of EAP-SIM makes that impossible. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius eam sim authorization to everyone

2013-09-09 Thread Maxim Shoustin
Hello, I use freeradius 2.2.0 (runs on Ubuntu). I played enough with eap sim, (thanks for examples eapsim-02 - 06). My goal is to test client + AP but not freeradius authorization/authentication process. Ho can I configure freeradius to give success for every user, no matter what is imsi

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-06 Thread Ben
On 05/09/2013 22:31, Alan Buxey wrote: But if you'd installed the debian/Ubuntu package version then it is 'freeradius' ;) alan Indeed, and that was the source of my problem. I had spent the best part of the day troubleshooting the older Ubuntu packaged version. So when

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Chris Decker
Arran - Ignore my 'What would happen to the FreeRADIUS processes…" question - I meant to delete that before sending my message. On Sep 5, 2013, at 9:34 PM, Chris Decker wrote: > Arran, > > Thank you for taking the time to so clearly lay things out - it seems like >

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Chris Decker
;. What would happen to the FreeRADIUS processes should my client be unable to connect back to the redis 'server' (for whatever reason) for an extended period of time? Also, should I be nervous about using the redis module in production given the 'Experimental' re

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Alan Buxey
But if you'd installed the debian/Ubuntu package version then it is 'freeradius' ;) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Ben
On 05/09/2013 18:19, Arran Cudbard-Bell wrote: On 5 Sep 2013, at 18:08, Ben wrote: Hi, Am I being stupid or what ? Yes. The main binary is called radiusd, not freeradius. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org

FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Chris Decker
All, I could use some help in understanding my options for the following scenario: In our environment, FreeRADIUS currently writes its Accounting logs to the local drive - one file per authorized client. In addition to the local logging, the Security group wants the Accounting logs sent to

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Ben
On 05/09/2013 18:32, Fajar A. Nugraha wrote: ./configure --sysconfdir=/etc --localstatedir=/var --prefix=/usr --exec-prefix=/usr --mandir=/usr/share/man --libdir=/usr/lib/freeradius --datadir=/usr/share Thank you Fajar. I'm up and running now though. - List info/subscribe/unsubscribe

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Fajar A. Nugraha
On Fri, Sep 6, 2013 at 12:08 AM, Ben wrote: > Hi, > > Am I being stupid or what ? > > 3.5.0-26-generic #42~precise1-Ubuntu > > Downloaded ftp://ftp.freeradius.org/pub/**freeradius/freeradius-server-** > 2.2.0.tar.gz<ftp://ftp.freeradius.org/pub/freeradius/freeradius-s

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Alan Buxey
The default install comes with a few accounting virtual servers that you can use. I'd strongly advise one of the or of band asynchronous ones. If you use UDP syslog is not blocking. .. it is fire and forget. .. so if you might lose packets if you have congested links or a disruption between sou

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread CHRISTOPHER SHELDON DECKER
Alan, Thanks for responding. I'm from the Security group so I'm not intimately familiar with FreeRADIUS - can you please elaborate on how it would work off we set up a Virtual Accounting server? Sent from my iPhone > On Sep 5, 2013, at 5:53 PM, Alan Buxey wrote: > >

  1   2   3   4   5   6   7   8   9   10   >