Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
Thanks. I have a genius en202 outdoor wifi router and i don't think i can change it to use PAP. So i'am only able to use ClearText-Password? If i'am wrong i will be very happy -- Marcel Kraan +31654378837 > On 29 jul. 2013, at 15:04, "Fajar A. Nugraha" wrote: > >> On Mon, Jul 29, 2013 a

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Fajar A. Nugraha
On Mon, Jul 29, 2013 at 7:39 PM, Marcel Kraan wrote: > Thanks… i think my wifi router does not have that option… > > On 29 jul. 2013, at 14:15, Navodit Bhardwaj > wrote: > > By default PAP, CHAP.. are enabled in FR. > You may need to change the authentication settings in your client. i.e > Wifi

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
Thanks… i think my wifi router does not have that option… On 29 jul. 2013, at 14:15, Navodit Bhardwaj wrote: > By default PAP, CHAP.. are enabled in FR. > You may need to change the authentication settings in your client. i.e Wifi > Router to send PAP enabled access-request. > > > > On Mon

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Phil Mayers
On 29/07/13 12:55, Marcel Kraan wrote: Yes i want to use "PAP" (?) but where do i change that? into my Wifi router ? or in the Freeradius config? On the client. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Navodit Bhardwaj
By default PAP, CHAP.. are enabled in FR. You may need to change the authentication settings in your client. i.e Wifi Router to send PAP enabled access-request. On Mon, Jul 29, 2013 at 5:25 PM, Marcel Kraan wrote: > Yes i want to use "PAP" (?) but where do i change that? > into my Wifi router

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
I very clear understands.. thanks for the help On 29 jul. 2013, at 14:07, Alan DeKok wrote: > Marcel Kraan wrote: >> Yes i want to use "PAP" (?) but where do i change that? >> into my Wifi router ? or in the Freeradius config? > > No. > > You're doing 802.1X to the WiFi router. You *cannot*

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Alan DeKok
Marcel Kraan wrote: > Yes i want to use "PAP" (?) but where do i change that? > into my Wifi router ? or in the Freeradius config? No. You're doing 802.1X to the WiFi router. You *cannot* use PAP. You cannot pick an authentication protocol and demand that everyone use it. The AP, client

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
Yes i want to use "PAP" (?) but where do i change that? into my Wifi router ? or in the Freeradius config? On 29 jul. 2013, at 13:52, Alan DeKok wrote: > Marcel Kraan wrote: >> I'am marcel kraan from Holland and i have a problem with Crypt-passwords >> in the mysql table. >> FreeRadius is wor

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Alan DeKok
Marcel Kraan wrote: > I'am marcel kraan from Holland and i have a problem with Crypt-passwords > in the mysql table. > FreeRadius is working really great with "Cleartext-Password" but it does > not authenticate with "Crypt-password" You can't use Crypt-Password and MS-CHAP. http://deployingradi

Re: Freeradius + MySQL + Daloradius

2013-04-10 Thread Alan DeKok
Erik Sellgren wrote: > I am trying to setup wireless authentication through my mikrotik router > using freeradius with mysql and daloradius. I have the server setup and > working, I can use NTradtest from my pc and I get Access-Accept messages > in return with my cleartext user/password, username u

Freeradius + MySQL + Daloradius

2013-04-09 Thread Erik Sellgren
I am trying to setup wireless authentication through my mikrotik router using freeradius with mysql and daloradius. I have the server setup and working, I can use NTradtest from my pc and I get Access-Accept messages in return with my cleartext user/password, username userclear password clear.

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
10:00 AM > *To:* David Peterson-WirelessConnections; FreeRadius users mailing list > *Subject:* Re: MAC-Auth + Freeradius + MySQL Database > > ** ** > > ** ** > > ** ** > > On Sun, Feb 24, 2013 at 1:55 PM, David Peterson < > dav...@wirelessconnections.net> wro

RE: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread David Peterson
-WirelessConnections; FreeRadius users mailing list Subject: Re: MAC-Auth + Freeradius + MySQL Database On Sun, Feb 24, 2013 at 1:55 PM, David Peterson wrote: I know of one person doing something similar to what you are looking to do. If your NAS sends the MAC of the device with the EAP

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 1:55 PM, David Peterson < dav...@wirelessconnections.net> wrote: > I know of one person doing something similar to what you are looking to > do. If your NAS sends the MAC of the device with the EAP request, you can > extract the MAC from the request using unlang and check

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 2:20 PM, Alan DeKok wrote: > Russell Mike wrote: > > Thanks for guidelines. exactly, as you stated I simple want to store MAC > > address somewhere & compair against the request. Can they be in > > "radcheck"? > > I wouldn't do that. Just create your own table of MAC add

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Alan DeKok
Russell Mike wrote: > Thanks for guidelines. exactly, as you stated I simple want to store MAC > address somewhere & compair against the request. Can they be in > "radcheck"? I wouldn't do that. Just create your own table of MAC addresses. If all you want is to list known MACs, you can do that

RE: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread David Peterson
+ Freeradius + MySQL Database Greetings Dear Alan D. & List Members, First of all, thank you very much for developing such application. I need help, i have functional Freeradius server with MySQL backend. i have been asked to add MAC address authentication support for the servers. i googled the t

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sunday, February 24, 2013, Alan DeKok wrote: > Russell Mike wrote: > >i also > > came across where guys are discussing EAP and MAC authentication. i > > could not conclude, if it is a better way of doing > > MAC authentication using EAP. > > To be clear: you don't. EAP is authentication. MA

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-23 Thread Alan DeKok
Russell Mike wrote: >i also > came across where guys are discussing EAP and MAC authentication. i > could not conclude, if it is a better way of doing > MAC authentication using EAP. To be clear: you don't. EAP is authentication. MAC "authentication" is just checking if the MAC address is in a

MAC-Auth + Freeradius + MySQL Database

2013-02-23 Thread Russell Mike
Greetings Dear Alan D. & List Members, First of all, thank you very much for developing such application. I need help, i have functional Freeradius server with MySQL backend. i have been asked to add MAC address authentication support for the servers. i googled the topic and got many many mail arc

freeradius+mysql

2012-12-18 Thread nanthitha shanmugam
Hi, I am using mysql with free radius for user authorization and accounting with assignment of ip pools from iptables in mysql. These all are working. But, I would like to know if we can bypass the authorization phase with mysql and use only ip pool assignment. Can you help in this part. Like

Re: FreeRADIUS + Mysql + xl2tpd and pptpd

2012-11-15 Thread Matthew Newton
Can't help much, as I didn't set up our system, but have you tried "require authentication = no" in xl2tpd.conf? You've got auth in IPsec (one assumes), and also in PPP (CHAP; we use MSCHAPv2 for Windows compatibility), so my understanding is you don't need it in L2TP as well, which goes inside IPs

Re: FreeRADIUS + Mysql + xl2tpd and pptpd

2012-11-15 Thread Dmitry Korzhevin
Here, is links to logs on pastebin service: freeradius_debug_log (freeradius -X): http://dpaste.com/831692/ xl2tpd_debug_log (xl2tpd -D): http://dpaste.com/831693/ /etc/xl2tpd/xl2tpd.conf http://dpaste.com/831695/ /etc/ppp/options.xl2tpd http://dpaste.com/831696/ Guys, i just need "another eyes"

FreeRADIUS + Mysql + xl2tpd and pptpd

2012-11-15 Thread Dmitry Korzhevin
Hello, Can anyone please share working configs for freeradius + xl2tpd or pptpd? Radius server is already configured, and works with mysql backend + strongSwan ipsec (dirrect connection). But, i try several pptpd / xl2tpd configurations, and suddenly they doesn't work.. I even try configurat

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Edgars Makņa
Oh my, any linux/bsd system with 128MB of RAM or you can even try a http://www.raspberrypi.org/ :) - Original Message - From: "fknet" To: freeradius-users@lists.freeradius.org Sent: Tuesday, October 30, 2012 12:31:54 PM Subject: Re: Ideal SO and hardware for FreeRadius+My

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Alan DeKok
fknet wrote: > What virtual machine does you recommend Alan? It doesn't matter. I've used all of them. A VM with ~1G of RAM, one CPU, and ~10G of disk space is tiny by todays standards. It should be enough to handle 20K users. Alan DeKok. - List info/subscribe/unsubscribe? See http://ww

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread fknet
What virtual machine does you recommend Alan? thanks Em 30/10/2012 07:49, Alan DeKok escreveu: Bjørn Mork wrote: You're right. Time to save some power replacing all those idling x86 CPUs with last years phones :-) Most people with small RADIUS systems should really be running them in a VM

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Alan DeKok
Bjørn Mork wrote: > You're right. Time to save some power replacing all those idling x86 > CPUs with last years phones :-) Most people with small RADIUS systems should really be running them in a VM. There are few reasons to run dedicated hardware for ~10K users. Alan DeKol. - List info/sub

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Bjørn Mork
Arran Cudbard-Bell writes: > On 30 Oct 2012, at 07:57, Bjørn Mork wrote: >> Alan DeKok writes: >>> fknet wrote: >>>> Hello people! >>>> >>>> What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for >>>>

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Arran Cudbard-Bell
On 30 Oct 2012, at 07:57, Bjørn Mork wrote: > Alan DeKok writes: >> fknet wrote: >>> Hello people! >>> >>> What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for >>> authentication of 3000 PPPoE users? >> >>

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Bjørn Mork
Alan DeKok writes: > fknet wrote: >> Hello people! >> >> What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for >> authentication of 3000 PPPoE users? > > Any iPhone 4 could handle that traffic. Yes, but how do I build FR for an iph

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread fknet
Thanks for the reply! I'll use FreeBSD with Xeon 3420 + 8Gb RAM. Regards Em 29/10/2012 16:59, Alan DeKok escreveu: Any iPhone 4 could handle that traffic. Buy anything that its your budget. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread Alan DeKok
fknet wrote: > Hello people! > > What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for > authentication of 3000 PPPoE users? Any iPhone 4 could handle that traffic. Buy anything that its your budget. Alan DeKok. - List info/subscribe/unsu

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread fknet
Just for information: I have more affinity with FreeBSD, than if the friends can help me to do the ideal configuration of these system will be better to me! Thanks! Em 29/10/2012 16:00, fknet escreveu: Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL

Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread fknet
Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for authentication of 3000 PPPoE users? Thanks Fabrício F Kammer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
:9A', 'Cleartext-Password', 'Redback', ':=' ), ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', '0x000403fc0001', '==' ), ( '00:12:23:56:78:9A', 'Agent-Remote-ID', '0x0006001e58ab0304', '=='

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
IVB wrote: > Hello Alan, > Yes, I will be very happy to read how to represent 'octets' data in > DB. And I ask about this several times. I don't find this info in > documentation, sorry. > > Please give me link to right place. I gave you a hint, and you deleted it. Good luck. Alan DeKok.

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
in DB. And I ask about this several times. I don't find this info in documentation, sorry. Please give me link to right place. -- Best regards, Igormailto:i...@is.ua -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
Igor Belikov wrote: > AD> You don't. > > Are you kidding? If you insist on going down that path, you'll be unsubscribed and banned. I'm tried of people who can't read the documentation, and who use that ignorance to put me down. > Do you mean that FreeRADIUS can't accept non-ASCII data from

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Igor Belikov
Hello Alan, Monday, April 2, 2012, 1:59:03 PM, you wrote: AD> IVB wrote: >> But that was my question! AD> ... >> How I can put Opt82 attributes (which contains non-printable bytes) into >> database to offer it later for FreeRADIUS using SELECT statement? AD> You don't. Are you kidding? AD>

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
IVB wrote: > But that was my question! ... > How I can put Opt82 attributes (which contains non-printable bytes) into > database to offer it later for FreeRADIUS using SELECT statement? You don't. The database is intended for ASCII data. You could also edit the dictionaries to make the dat

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
id`, `UserName`, `Attribute`, `Value`, `op` FROM `radcheck` WHERE `UserName` = '00:12:23:56:78:9A' -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5612096.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
IVB wrote: > Yes, I run queries by hand and see results as strings, non-printable chars > not printed, but attribute itself has non-zero length. You can't put binary data into an ASCII "string" field. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
o length. -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5611684.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
need help - how I can store needed value to adequately accepted by Radius? -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5611663.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-31 Thread Alan DeKok
IVB wrote: > But I don't see in debug output what exactly was returned in SQL query. Have you tried running the SQL queries from an SQL client on the command line? That's why they're printed out in debugging mode: so you can see them, and re-run them yourself. Alan DeKok. - List info/subsc

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
trol { > Auth-Type := "Reject" > } > } > > then use debug mode again. It should print out what it recognize > control:Agent-Circuit-ID (which is from db) and > request:Agent-Circuit-ID. Then you just need to edit entry on db to > match what's on the r

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread Fajar A. Nugraha
On Fri, Mar 30, 2012 at 6:12 PM, IVB wrote: > Agent-Circuit-Id = 0x000403fc0001 let's start with that one. >  ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', x'000403fc0001', '==' ), Does that work? Shouldn't it be something like ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', 0x000403fc0001, '==' ),

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
ee message 'User found in radcheck table' after "check" SQL, and "reply" SQL don't executed. And finally I don't login. But I don't see in debug output what exactly was returned in SQL query. -- View this message in context: http://freeradius.1045715.n5.nabbl

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
are in project mode (using PPPoE authorisation now). DHCP testing uses same context and same Radius server. To run different Radius in debug mode I need to configure different context... > Then compare to what you have on radcheck. Note the operators (you > probably need "=="). >

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread Fajar A. Nugraha
On Fri, Mar 30, 2012 at 4:29 PM, IVB wrote: > I need help. > > Software: FreeRADIUS v2.1.11, MySQL v5.1.61. > Hardware: RB SE100 under SEOS-6.4.1.4-Release > > BRAS sends Opt-82 related attributes in following format: > What format? > > Attributes Agent-* described in radius dictionary as 'octet

FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
h and mismatch. So I need help. Very need. And exuse me my english - it is not my native language. -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606148.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - Li

Re: Freeradius Mysql Performance

2012-01-29 Thread Alan Buxey
Hi, >Sorry to pick into this with a short question. >Just wondering, do you see performance increase using postgres instead of >mysql? yes. I am a postgreSQL convert. though, that said - out of the box you get slightly better and safer performance - but you'll still have to configure

Re: Freeradius Mysql Performance

2012-01-29 Thread YvesDM
On Sun, Jan 29, 2012 at 11:36 AM, Alan DeKok wrote: > YvesDM wrote: > > Just wondering, do you see performance increase using postgres instead > > of mysql? > > Yes. > > MySQL can be higher performance than older versions of PostGreSQL, if > you don't do database writes. Newer versions of Post

Re: Freeradius Mysql Performance

2012-01-29 Thread Alan DeKok
YvesDM wrote: > Just wondering, do you see performance increase using postgres instead > of mysql? Yes. MySQL can be higher performance than older versions of PostGreSQL, if you don't do database writes. Newer versions of Postgres have similar performance to MySQL, with the benefit of allowi

Re: Freeradius Mysql Performance

2012-01-29 Thread YvesDM
On Sat, Jan 28, 2012 at 3:03 PM, Alan Buxey wrote: > What?? > You dont need that kind of hardware for job, sure. Throwing that kind of > horsepower might fix the speed but this is a DBA question. > > Look at your mysql configuration and see how it can be adjusted (my.cnf) > look at the engine in

Re: Freeradius Mysql Performance

2012-01-28 Thread Alan Buxey
It's do-able. Though I would be worried about failover and resiliancy. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius Mysql Performance

2012-01-28 Thread Marinko Tarlac
1 mil of users and one server... ??? Good luck... On 1/28/2012 10:57 AM, Morteza Milani wrote: Hi, Currently we use a server with the following features: * RAM: 4 GB * Processor: 1x E8400 3.0 GHz - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius Mysql Performance

2012-01-28 Thread Alan Buxey
What?? You dont need that kind of hardware for job, sure. Throwing that kind of horsepower might fix the speed but this is a DBA question. Look at your mysql configuration and see how it can be adjusted (my.cnf) look at the engine in use and see if you can use better..(eg innodb instead of my

Re: Freeradius Mysql Performance

2012-01-28 Thread Fajar A. Nugraha
On Sat, Jan 28, 2012 at 6:10 PM, Phil Mayers wrote: > On 01/28/2012 09:57 AM, Morteza Milani wrote: >> >> Hi, >> >> Our company is using freeradius as a VPN authentication& >> authorization system. In worse-case say we would have 1 Million users. >> Beside >> scaling our market, we are going to de

Re: Freeradius Mysql Performance

2012-01-28 Thread Giuseppe Marocchio
Dear, i've got same problem in the first time that i use freeradius, first of all, you need to tune your mysql ( my.cnf ) with right optimization, you can enable slow query logging in order to check if is mysql or freeradius problem. when your mysql works fine, you can tune freeradius, like incr

Re: Freeradius Mysql Performance

2012-01-28 Thread Phil Mayers
On 01/28/2012 09:57 AM, Morteza Milani wrote: Hi, Our company is using freeradius as a VPN authentication& authorization system. In worse-case say we would have 1 Million users. Beside scaling our market, we are going to develop an application to analyze users with data mining algorithms. Curre

Freeradius Mysql Performance

2012-01-28 Thread Morteza Milani
Hi, Our company is using freeradius as a VPN authentication & authorization system. In worse-case say we would have 1 Million users. Beside scaling our market, we are going to develop an application to analyze users with data mining algorithms. Currently we use a server with the following feature

Re: Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread Alan Buxey
Hi, >when i changed the authentication to use peap, i got the problem. I >launched the server in debug mode ( freeradius -X ) and all that i can see >is that all my requests are rejected. i'm sorry, I've lost my ability to read minds. It would actually be quite handy if you, for examp

Re: Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread RAZAFIMBELO Faliharinohatra Rindra
Hi,     I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected how are you testing this? what client are you

Re: Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread Alan Buxey
Hi, >    I have configured a freeradius + mysql server and i would like to use >the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but >when i have tested the PEAP authentication all my requests were rejected how are you testing this? what client are

Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread RAZAFIMBELO Faliharinohatra Rindra
Hi all,     I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected by freeradius. I saw that both of PEAP and EAP-TTLS used TLS

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2012-01-21 Thread lumirl
one last note - PEAP is using MSCHAPv2 and so the passwords must be stored in cleartext (or nthash)! I use for administration DiapUPAdmin - very nice and easy. Hopefully this will help to somebody who was lost like me. -- View this message in context: http://freeradius.1045715.n5.nabble.

Re: wifi + freeradius + mysql + eap/tls

2011-11-18 Thread Fajar A. Nugraha
On Fri, Nov 18, 2011 at 3:02 AM, Enrique Llanos Vargas wrote: > I > don't find a way to make it work with eap+tls: > I don't really want to use TLS, so if you help me to disable TLS, it'll be > fine for me. You want to make it work with eap+tls, but you don't really want to use TLS? It doesn't m

Re: wifi + freeradius + mysql + eap/tls

2011-11-18 Thread Alan DeKok
Enrique Llanos Vargas wrote: > I've just installed a freeradius+mysql on a debian 6.0.3, first test > from localhost with radtest and mysql user auth (radcheck table) worked > well, 2nd test with radeaptest with mysql and md5 eap method worked well > too, but I don't find

wifi + freeradius + mysql + eap/tls

2011-11-17 Thread specr
Hi guys, I've just installed a freeradius+mysql on a debian 6.0.3, first test from localhost with radtest and mysql user auth (radcheck table) worked well, 2nd test with radeaptest with mysql and md5 eap method worked well too, but I don't find a way to make it work with eap+tls: Here&

wifi + freeradius + mysql + eap/tls

2011-11-17 Thread Enrique Llanos Vargas
Hi guys, I've just installed a freeradius+mysql on a debian 6.0.3, first test from localhost with radtest and mysql user auth (radcheck table) worked well, 2nd test with radeaptest with mysql and md5 eap method worked well too, but I don't find a way to make it work with eap+tls: Here&

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Erik
>  It does.  It works.  See "man checkrad". > Checkrad is called to double-check duplicate logins. Thank you, I understand now. >  The guy using exec-program-wait for Simultaneous-Use was doing > something different.  That was clear from his post. Not to me - this is a new world for me & I'm d

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Alan DeKok
Erik wrote: > I'm trying to understand exactly what's happening & was wondering why > checkrad wasn't being called. If I get a NAS which does SNMP, for > example, I wanted to know that checkrad would work in a predictable > fashion. It does. It works. See "man checkrad". > I'll quote some of

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Erik
> >  Are you looking for additional problems, or are you trying to solve > the original issue? I'm trying to understand exactly what's happening & was wondering why checkrad wasn't being called. If I get a NAS which does SNMP, for example, I wanted to know that checkrad would work in a predictabl

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Alan DeKok
Erik wrote: > wouldn't you at least see checkrad initiate in the freeradius -X debug > if I set the NAS type to cisco? I was just trying to get it to > initiate, not expecting it to work. In the debug, it doesn't even > come up. I've read in prior posts where you said that checkrad should > init

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Fajar A. Nugraha
On Wed, Nov 9, 2011 at 5:11 AM, Erik wrote: > I've read in prior posts where you said that checkrad should > initiate regardless if the radutmp or mysql modules were used. I really don't recommend using radutmp. And if you use sql, there's no need to use checkrad. Simultanous check is done using

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Erik
Alan, thanks for the response... >  Because the cheap NAS (a) isn't a Cisco box, and (b) doesn't support > the protocols needed by checkrad. wouldn't you at least see checkrad initiate in the freeradius -X debug if I set the NAS type to cisco? I was just trying to get it to initiate, not expecti

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Alan DeKok
Erik wrote: > I've been going in circles for days on how to come up with a > workaround to get simultaneous-use checking working on my FreeRadius + > PEAP MSCHAPv2 deployment. I have read through seemingly all of the > posts... I suspect certain areas which might be causing the problem: > 1) my N

Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Erik
- FreeRadius Version: 2.1.10 - Hello All, I've been going in circles for days on how to come up with a workaround to get simultaneous-use checking working on my FreeRadius + PEAP MSCHAPv2 deployment. I have read throu

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Fajar, > So you mean radutmp was the root cause of your problem? I don't know, but it's better now. =) > What does FR log says? Does it say it recives duplicate or conflicting packets? > If yes, then the db is still slow. You still need to fix it. If not, > then the problem might be somewhere el

RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Hi Arran, > It doesn't support row level locking for one. Which absolutely cripples selects against the radacct/postauth table when there are > high levels of inserts/updates. > > MyISAM should *NOT* be used for the postauth and radacct. Version 3 schema has been updated to use INNODB for these ta

Re: RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Alan DeKok
Daniel Menezes wrote: > I don't know better than anyone, I'm simply asking to understand where I'm > lost. Then you should ask "WHY is one better than the other". > Sorry if you feel bad with my questions .. Which is proof you didn't understand my response. Alan DeKok. - List info/subscri

RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Hi Alan, > If you know better than the RADIUS experts, why are you asking > questions on this list? I don't know better than anyone, I'm simply asking to understand where I'm lost. Sorry if you feel bad with my questions .. Sds, --- Daniel Menezes - List info/subscribe/unsubscribe? See ht

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Fajar A. Nugraha
On Thu, Oct 27, 2011 at 8:19 PM, Daniel Menezes wrote: > Fajar, > > I had radutmp and SQL commented out in account {}. > I don't know why, a possible mistake. > After mark radutmp and restart freeradius I don't see new errors in log. So you mean radutmp was the root cause of your problem? That's

Re: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Arran Cudbard-Bell
On 27 Oct 2011, at 16:16, Alan DeKok wrote: > Daniel Menezes wrote: >>> 1. User the InnoDB Engine in MySQL. >> I read about it and don't know if it's the best way. >> Why InnoDB engine? MySAM engine is more fast. > It doesn't support row level locking for one. Which absolutely cripples selects

Re: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Alan DeKok
Daniel Menezes wrote: >> 1. User the InnoDB Engine in MySQL. > I read about it and don't know if it's the best way. > Why InnoDB engine? MySAM engine is more fast. If you know better than the RADIUS experts, why are you asking questions on this list? Alan DeKok. - List info/subscribe/unsubscr

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Hi Tim, > 1. User the InnoDB Engine in MySQL. I read about it and don't know if it's the best way. Why InnoDB engine? MySAM engine is more fast. > 2. Increase the number of SQL sockets in sql.conf (num_sql_socks). The > default is 5, try 25. Ok. > 3. Increase the number of connections (max_conn

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
ist Assunto: Re: FreeRadius + MySQL | radacct: Errors and Warnings > Another thing to try, are you using radutmp? If no (e.g. > session/simultaneous use check is using sql), just mark all instance > of radutmp from sites-available/default (and whatever other virtual > server you u

Re: Freeradius mysql acct copy

2011-10-27 Thread tonimanel
Hi, This configuration is correctly? Nowadays, could I use this to copy acct to a remote server? Thanks. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Freeradius-mysql-acct-copy-tp4272880p4942524.html Sent from the FreeRadius - User mailing list archive at Nabble.com

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Fajar A. Nugraha
On Thu, Oct 27, 2011 at 12:13 AM, Daniel Menezes wrote: > Yes, there is a large number of rows in the radacct and radposauth tables. > The attribute 'Acct-Interim-Interval' works very well but makes many > records. Interim update aren't suppose to add records, they simply update existing ones. Th

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Daniel Menezes
-bounces+listas=dmnzs.com...@lists.freeradius.org] Em nome de Fajar A. Nugraha Enviada em: quarta-feira, 26 de outubro de 2011 13:17 Para: FreeRadius users mailing list Assunto: Re: FreeRadius + MySQL | radacct: Errors and Warnings On Wed, Oct 26, 2011 at 10:08 PM, Daniel Menezes wrote: > I read something about slow

RE: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Tim Sylvester
Hi Daniel, > I have a FreeRadius + MySQL setup with MikroTik as NAS. > And a few days ago I have some warnings and errors in the log: > > Tue Oct 25 04:02:41 2011 : Info: Released IP xxx.xxx.xxx.xxx (did > via-pppoe-01 cli xx:xx:xx:xx:xx:xx user dmnzs-test) Tue Oct 25 05:30:36

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Fajar A. Nugraha
On Wed, Oct 26, 2011 at 10:08 PM, Daniel Menezes wrote: > Tue Oct 25 15:43:20 2011 : Error: WARNING: Unresponsive child for request > 784, in module radutmp component accounting Another thing to try, are you using radutmp? If no (e.g. session/simultaneous use check is using sql), just mark all in

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Fajar A. Nugraha
On Wed, Oct 26, 2011 at 10:08 PM, Daniel Menezes wrote: > I read something about slow backend, tables indexes and other things. > I've used the backend script 'mysqltuner.pl' to adjust the performance. > It's better now, but the warnings and erros persists. > > Can anyone help me on this? Obvious

FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Daniel Menezes
Hi all, First, sorry my bad English. I have a FreeRadius + MySQL setup with MikroTik as NAS. And a few days ago I have some warnings and errors in the log: Tue Oct 25 04:02:41 2011 : Info: Released IP xxx.xxx.xxx.xxx (did via-pppoe-01 cli xx:xx:xx:xx:xx:xx user dmnzs-test) Tue Oct 25 05:30:36

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-18 Thread Lumir Lindovsky
Lumir Lindovsky wrote: How do I give access to wifi users who authenticate with username& pass over PEAP only to a group of users? See the FAQ. You can create a group, and limit them based on group membership. You can use SQL-Group. See doc/rlm_sql Alan DeKok. - List info/subscribe/un

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-12 Thread Alan DeKok
Lumir Lindovsky wrote: > How do I give access to wifi users who authenticate with username & pass > over PEAP only to a group of users? See the FAQ. You can create a group, and limit them based on group membership. You can use SQL-Group. See doc/rlm_sql Alan DeKok. - List info/subscribe/un

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-10 Thread Lumir Lindovsky
>I would think something like this in your users file: DEFAULT NAS-Ip-Address == your.wifi.nas.ip, Group == WIFI DEFAULT NAS-Ip-Address == your.wifi.nas.ip, Auth-Type = Reject - Thank you for the answer but I do not use any users file - I use mysql and users are stored in radcheck table and th

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-10 Thread up
> Hello, > I would like to help with this: > I have Freeradius version 2.1.6 > I have it running with SQL and DialupAdmin. > How do I give access to wifi users who authenticate with username & pass over > PEAP > only to a group of users? > I mean that authorised would be only users from group WIFI

  1   2   3   4   5   6   7   >