configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread Angelica Delgado
We have our freeradius setup to authenticate with Active Directory for EAP. Currently, it uses the samaccountname but we want to use UPN instead. We get NT_STATUS_NO_SUCH_USER when testing with ntlm through command line. ntlm_auth --request-nt-key --domain=test.local --username=tu...@pub.com

Re: configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread Alan DeKok
Angelica Delgado wrote: We have our freeradius setup to authenticate with Active Directory for EAP. Currently, it uses the samaccountname but we want to use UPN instead. We get NT_STATUS_NO_SUCH_USER when testing with ntlm through command line. ntlm_auth --request-nt-key --domain

RE: configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread stefan.paetow
You might want to do an LDAP lookup first on your UPN to find the samAccountName, then use that with ntlm_auth. Stefan From: freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org] On Behalf

Book for freeradius 3.0

2013-10-13 Thread Osvaldo T Crispim Filho
Is there any book about the new version of FreeRADIUS 3.0? -- - Osvaldo T Crispim Filho - - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problems with compiling freeradius on Ubuntu Linux

2013-10-12 Thread Andrei Petru Mura
Hello, I imported FreeRADIUS from git on Eclipse, and tried to build it, but this error occurs while building the project: *threads.h:47:2: error: #error WITH_THREADS defined, but pthreads not available* * * Can anybody guide me how to solve this issue? Thanks. - List info/subscribe/unsubscribe

Re: Problems with compiling freeradius on Ubuntu Linux

2013-10-12 Thread Arran Cudbard-Bell
On 12 Oct 2013, at 17:40, Andrei Petru Mura mapand...@gmail.com wrote: Hello, I imported FreeRADIUS from git on Eclipse, and tried to build it, but this error occurs while building the project: threads.h:47:2: error: #error WITH_THREADS defined, but pthreads not available Can anybody

Re: clone break freeradius

2013-10-11 Thread A . L . M . Buxey
identity (eg /etc/hosts and $HOSTNAME all refer to a unique name per machine) and that there is nothing in the AD referencing either system. THEN net ads join each boxbut this isnt a freeradius question. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: clone break freeradius

2013-10-11 Thread stefan.paetow
) account for the original machine from Active Directory. Then retry the net join command for both machines. Stefan From: freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=diamond.ac...@lists.freeradius.org] On Behalf Of trevor

freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
Hi there, Im trying use freeradius with oracle database. I've used guide on this site http://wiki.freeradius.org/modules/Rlm_sql_oracle to compile oracle driver. I'e installed oracle instant client from rpm packages (basic + devel) When i use ./configure --with-oracle-lib-dir

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread A . L . M . Buxey
Hi, I'e installed oracle instant client from rpm packages (basic + devel) okay. if you've done this rather than manually installing from Oracle then its most likely that the paths are different...you will need to check where your Oracle files have been installed and use those paths instead

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Fajar A. Nugraha
On Thu, Oct 10, 2013 at 2:22 PM, Puzzel puzzel1...@gmail.com wrote: --with-oracle-include-dir=/usr/lib/oracle/11.2/client64 ** ** configure: WARNING: oracle headers not found. Use --with-oracle-include-dir=path.configure: WARNING: silently not building rlm_sql_oracle.

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
82983 2009-08-15 orai18n-mapping.jar -rw-r--r--. 1 root root 298388 2009-08-15 ottclasses.zip -rw-r--r--. 1 root root37807 2009-08-15 xstreams.jar but it didn't help. -Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org [mailto:freeradius-users

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
Tnx Arran, ./configure went fine and then created all.mk file. What to do next? make don't work. I'm sorry i'm not very much experienced in linux. -Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
. all.mk is a make include not an actual make file. It should pick up that rlm_sql_oracle has been configured (even if it's not marked as stable) and build it. -Arran Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
- Repeat the previous command which generated this error message. *sigh* -Arran -Original Message- From: freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent

RE: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Puzzel
I've made configure at top level ./configure --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib --with-oracle-include-dir=/usr/include/oracle/11.2/client64 Then i made make, but i still can't find rlm_sql_oracle.so file. :/ -Original Message- From: freeradius-users-bounces

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Arran Cudbard-Bell
. :/ run the configure script in src/modules/rlm_sql/drivers/rlm_sql_oracle and post the output and config.log file. -Arran Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread Alan DeKok
Puzzel wrote: I've made configure at top level ./configure --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib --with-oracle-include-dir=/usr/include/oracle/11.2/client64 If the build is having issues, you should READ the output of configure. It tells you what it's building, and what

Re: freeradius 2.2.0 on Fedora and oracle module

2013-10-10 Thread John Dennis
On 10/10/2013 08:39 AM, Puzzel wrote: I've made configure at top level ./configure --with-oracle-lib-dir=/usr/lib/oracle/11.2/client64/lib --with-oracle-include-dir=/usr/include/oracle/11.2/client64 Then i made make, but i still can't find rlm_sql_oracle.so file. :/ Try reading the output

clone break freeradius

2013-10-10 Thread trevor obba
I configured freeradius version 2.2.0 running on Ubuntu 12.04 to authenticate against active directory and it is working fine until I decide to clone (vmware) the machine. Once the machine is clone I changed the IP address, hostname in (/etc/hosts and /etc/hostname) and also changed the name

Re: Freeradius 3 and DHCP

2013-10-09 Thread Rok Kosir
On 10/08/2013 07:09 PM, Arran Cudbard-Bell wrote: On 8 Oct 2013, at 17:44, Phil Mayers p.may...@imperial.ac.uk wrote: On 08/10/13 17:01, Rok Kosir wrote: authentication to mysql), when i run freeradius -X, i get Segmentation Fault when it reaches dhcp listner. See doc/bugs. and skip

Re: Freeradius 3 and DHCP

2013-10-09 Thread Arran Cudbard-Bell
On 9 Oct 2013, at 11:56, Rok Kosir rok.ko...@cosylab.com wrote: On 10/08/2013 07:09 PM, Arran Cudbard-Bell wrote: On 8 Oct 2013, at 17:44, Phil Mayers p.may...@imperial.ac.uk wrote: On 08/10/13 17:01, Rok Kosir wrote: authentication to mysql), when i run freeradius -X, i get

Freeradius 3 and DHCP

2013-10-08 Thread Rok Kosir
Hello, i had running version of freeradius 2.1.10 (from ubuntu ppa) with workable EAP-TTLS configuration. Today when i noticed that version 3 is out i decided to upgrade to it and also test the built-in dhcp server. All was goin well until i enabled dhcp (EAP-TTLS was working and authentication

Re: Freeradius 3 and DHCP

2013-10-08 Thread Phil Mayers
On 08/10/13 17:01, Rok Kosir wrote: authentication to mysql), when i run freeradius -X, i get Segmentation Fault when it reaches dhcp listner. See doc/bugs. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 3 and DHCP

2013-10-08 Thread Arran Cudbard-Bell
On 8 Oct 2013, at 17:44, Phil Mayers p.may...@imperial.ac.uk wrote: On 08/10/13 17:01, Rok Kosir wrote: authentication to mysql), when i run freeradius -X, i get Segmentation Fault when it reaches dhcp listner. See doc/bugs. and skip to section 2. :) Arran Cudbard-Bell a.cudba

Freeradius issue : Active Directory Integration

2013-10-04 Thread Shameek Bhattacharya
Hello, I am facing issue with MS CHAP authentication in Ubuntu 13.04 . Also NTLM Authentication takes place when putting 'wait = no' in /etc/freeradius/modules/ntlm_auth ie exec ntlm_auth { wait = no program = “/usr/bin/ntlm_auth -request-nt-key -username=%{mschap:User-Name

Re: Freeradius issue : Active Directory Integration

2013-10-04 Thread Andreas Sartori
Hi, Hello, I am facing issue with MS CHAP authentication in Ubuntu 13.04 . Also NTLM Authentication takes place when putting 'wait = no' in /etc/freeradius/modules/ntlm_auth is ntml_auth on the command line working? Please provide some debug output. regards -andreas

Re: Freeradius issue : Active Directory Integration

2013-10-04 Thread Alan Buxey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi. Wondering what authentication method you are using as maybe looking at wrong ntlm check the mschap module for its ntlm_auth incantation. Also, if you have doubts about the AD account used to bind them follow that up. Get it bound in

Re: Freeradius issue : Active Directory Integration

2013-10-04 Thread Phil Mayers
On 10/04/2013 07:02 AM, Shameek Bhattacharya wrote: Hello, I am facing issue with MS CHAP authentication in Ubuntu 13.04 . Also NTLM Authentication takes place when putting 'wait = no' in /etc/freeradius/modules/ntlm_auth ie exec ntlm_auth { wait = no wait = no is wrong here

control flow in FreeRADIUS authorize section

2013-10-02 Thread Bruce Bauman
We are getting unexpected behavior from FreeRADIUS 2.2.x (built from current git). We want to check if a user is BLOCKED first, and only then do we want to perform some other checks. Our current config looks like this: authorize { #auth_log # uncomment for debugging

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread Alan DeKok
Bruce Bauman wrote: We want to stop executing the BUNCH OF UNLANG CODE in the first two cases (infected and tempsus), effectively doing something like a return. There is a return code. See doc/configurable_failover.rst: ok { ok = return } That may work. The issue is that

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread Arran Cudbard-Bell
We want to stop executing the BUNCH OF UNLANG CODE in the first two cases (infected and tempsus), effectively doing something like a return. Where you have ok in the case stanzas, put ok { ok = return } -Arran Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread A . L . M . Buxey
Hi, A simple thing: infected case update control { Tmp-String-0 := stop } ... if (Tmp-String-0 != stop) { BUNCH OF UNLANG CODE } That should work. Ugly, but functional. this is pretty much what I was

Re: control flow in FreeRADIUS authorize section

2013-10-02 Thread Arran Cudbard-Bell
FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Post a question on freeradius

2013-09-30 Thread Suryalakshmi Annadurai
Email id: suryalakshmi.annadu...@carc.co.inmailto:suryalakshmi.annadu...@carc.co.in Or ritu.gla...@gmail.commailto:ritu.gla...@gmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius - DeadLock

2013-09-25 Thread Alisson
Hi, I have a lot of logs with deadlocks ed Sep 25 15:05:44 2013 : Error: [sql] Couldn't update SQL accounting ALIVE record - Deadlock found when trying to get lock; try restarting transaction Wed Sep 25 15:05:44 2013 : Error: [sql] Couldn't update SQL accounting ALIVE record - Deadlock

Re: Freeradius - DeadLock

2013-09-25 Thread Arran Cudbard-Bell
On 25 Sep 2013, at 20:08, Alisson alissongoncal...@bsd.com.br wrote: Hi, I have a lot of logs with deadlocks Those would be caused by a bug in your custom SQL queries? Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http

Re: Freeradius - DeadLock

2013-09-25 Thread Alisson
would be caused by a bug in your custom SQL queries? Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius - DeadLock

2013-09-25 Thread Arran Cudbard-Bell
On 25 Sep 2013, at 20:54, Alisson alissongoncal...@bsd.com.br wrote: This messages are from radius.log Those errors were generated by the MySQL client library or the MySQL server, just because they're included in the radius.log file does not mean they originated from within the FreeRADIUS

Re: Freeradius - DeadLock

2013-09-25 Thread Alisson
because they're included in the radius.log file does not mean they originated from within the FreeRADIUS code base. I've doesn't changed anything in db... and I haven't custom queries... Here is a post describing possible causes. I've never seen this with the stock queries and schema. http

Re: Freeradius - DeadLock

2013-09-25 Thread Fajar A. Nugraha
or the MySQL server, just because they're included in the radius.log file does not mean they originated from within the FreeRADIUS code base. I've doesn't changed anything in db... and I haven't custom queries... Here is a post describing possible causes. I've never seen this with the stock queries

message freeradius

2013-09-24 Thread María Teresa Mondragón Reyes
Hi everybody I need some help I'm new in this topic and I'm traying to configure a freeradius serve. I followed the instructions to configure freeradius plus remote mysql server and when put in debug mode freeradius -f -X i get this message. rad_recv: Accounting-Request packet from host

Re: message freeradius

2013-09-24 Thread Phil Mayers
On 24/09/13 17:58, María Teresa Mondragón Reyes wrote: rad_recv: Accounting-Request packet from host 192.168.4.224 port 32769, id=157, length=285 Invalid packet code 4 sent to a proxy port from home server 192.168.4.224 port 32769 - ID 157 : IGNORED Ready to process requests. This should be

Re: message freeradius

2013-09-24 Thread Alan DeKok
María Teresa Mondragón Reyes wrote: I followed the instructions to configure freeradius plus remote mysql server and when put in debug mode freeradius -f -X i get this message. You don't need -f -X. Just -X is good enough. rad_recv: Accounting-Request packet from host 192.168.4.224 port

FreeRadius Error Access Rejected Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect ( [ldap] User not found): [root/trash] (from client LTC-ROUTER port 2) Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites

Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Husnain Taseer
Hi, I want to authenticate asterisk peer using freeradius I am using asterisk 12.0.0 and Freeradius 2.2.1. I have configured freeradius correctly as I am able to authenticate user saved in users file from the terminal by using radclient command from the terminal. but when I try to register peer

Re: Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Adam Bishop
On 23 Sep 2013, at 11:27, Husnain Taseer husnain.tas...@gmail.com wrote: Even I don't get any request from asterisk server in radius logs. You're looking at the wrong layer for the problem. Fire up tcpdump. Do you see any radius traffic leaving the asterisk box? Does it reach the RADIUS

Re: Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Husnain Taseer
In tcpdump asterisk not sending request to the freeradius can u tell after configuring freeradius what configurations are needed to be done in asterisk. Regards, Husnain Taseer On Mon, Sep 23, 2013 at 4:11 PM, Adam Bishop adam.bis...@ja.net wrote: On 23 Sep 2013, at 11:27, Husnain Taseer

Re: Facing Problem in Asterisk peer Authentication with Freeradius.

2013-09-23 Thread Alan DeKok
Husnain Taseer wrote: In tcpdump asterisk not sending request to the freeradius can u tell after configuring freeradius what configurations are needed to be done in asterisk. You were told to ask this question on the asterisk mailing list. We are not asterisk, and we know nothing about

Re: FreeRadius Error Access Rejected Only On Some CISCO Switch Ports

2013-09-23 Thread Alan DeKok
Daniel Baker wrote: [ldap] performing search in dc=citlao,dc=local, with filter (uid=root) [ldap] object not found [ldap] search failed What part of that is unclear? What can I try to fix the authentication issues so that all ports are being successfully authenticated ? Ensure

FreeRadius Error Access Rejected Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect ( [ldap] User not found): [root/trash] (from client LTC-ROUTER port 2) Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites

Re: FreeRadius Error Access Rejected Only On Some CISCO Switch Ports

2013-09-23 Thread Daniel Baker
Thank you Alan I will pursue that line of inquiry further. On 9/23/2013 8:18 PM, Alan DeKok wrote: Daniel Baker wrote: [ldap] performing search in dc=citlao,dc=local, with filter (uid=root) [ldap] object not found [ldap] search failed What part of that is unclear? What can I try

Re: Freeradius-Users Digest, Vol 101, Issue 50

2013-09-23 Thread Rui Ribeiro
-- Message: 5 Date: Mon, 23 Sep 2013 12:33:10 -0400 (EDT) From: paul trader flip...@igolinux.com To: freeradius-users@lists.freeradius.org Subject: pap always returns noop for windows dialup authentication Message-ID: alpine.DEB.2.02.1309231213040.7006

Re: Freeradius-Users Digest, Vol 101, Issue 50

2013-09-23 Thread paul trader
On Mon, 23 Sep 2013 at 18:49, Rui Ribeiro opined: RR:Your not crazy for sure. The problem authenticating with Windows boxen RR:is that they only support MSCHAPv2… kudos to Microsoft. hi rui - thanks for that, although my family and co workers may disagree! according to this wiki faq entry:

RE: Freeradius 2.1.12 Second LDAP Server

2013-09-16 Thread Beliars Fire
not authenticate user Username%Password with plaintext password challenge/response password authentication succeeded Is this normal? How can I fix it? The Response seems to work correctly. The Second One is this: It`s the last Point on this Page: Configuring FreeRadius to use ntml_auth for MS-CHAP

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-16 Thread Alan DeKok
Beliars Fire wrote: The next Step wbinfo -a *user*%*password *works too, but i`m getting this Error-Message: /Could not authenticate user Username%Password with plaintext password/ challenge/response password authentication succeeded Is this normal? How can I fix it? The Response seems to

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-16 Thread A . L . M . Buxey
in the file: /etc/freeradius/modules/mschap ntlm_auth = /path/to/ntlm_auth --request-nt-key --username=%{mschap:User-Name:-None} --domain=%{%{mschap:NT-Domain}:-MYDOMAIN} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00} But my default commented

Re: Freeradius + 2 x LDAP + VLAN

2013-09-16 Thread Miroslav Lednicky
12.9.2013 19:36, Arran Cudbard-Bell napsal(a): On 12 Sep 2013, at 18:18, Miroslav Lednicky miroslav.ledni...@fnusa.cz mailto:miroslav.ledni...@fnusa.cz wrote: Hello, I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 authorize { ldap1 if (ok) { update reply

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-14 Thread Mathieu Simon
Hi While I generally chime in with Alan's later message, one important you should start reading about and differentiating is Authentication and Authorization (the later is Accounting of AAA with RADIUS). While you can do Authorization using LDAP with AD, you can't do the Authentication part

Re: Freeradius authenticate against Active directory

2013-09-13 Thread Matthew Newton
On Fri, Sep 13, 2013 at 12:23:47AM +0100, trevor obba wrote: expand: --username=%{mschap:User-Name:-None} - --username=t...@abc.ac.uk ... Exec-Program output: Logon failure (0xc4f) How can I fix the problem of authentication users that type in there local realm @abc.ac.uk with their

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-13 Thread Alan DeKok
Beliars Fire wrote: - I`m worked to this Tutorial Step-by-Step. On the last two steps, i`m configured Freeradius to use ntlm_auth This was obviousy wrong, cause i want to implement LDAP-Severs. Please, don't think you're smarter than people with decades more experience than you. It's

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Arran Cudbard-Bell
it the way I suggested I highly recommend you use V3.0.0 (release_branch_3.0.0 or master/HEAD) instead, as the list/attribute handling is much better. -Arran Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Nikolaos Milas
net_timeout = 1 } ...having added in ldap.attr the following (using current unused freeradius schema attributes): replyItem DHCP-Subnet-Mask radiusArapZoneAccess replyItem DHCP-Router-Address radiusArapSecurity replyItem DHCP-Your-IP-Address

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Nikolaos Milas
On 13/9/2013 8:40 μμ, Arran Cudbard-Bell wrote: If you do it the way I suggested I highly recommend you use V3.0.0 (release_branch_3.0.0 or master/HEAD) instead, as the list/attribute handling is much better. Thanks, I'll look into rlm_cache. I wonder if anyone in this list has created a

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Arran Cudbard-Bell
On 13 Sep 2013, at 19:47, Nikolaos Milas nmi...@noa.gr wrote: On 13/9/2013 9:35 μμ, Nikolaos Milas wrote: Where can I find the v3.0.0 source branch? Oh, I found it and it includes a spec file for redhat: https://github.com/FreeRADIUS/freeradius-server/tree/release_branch_3.0.0/redhat

Re: FreeRadius DHCP against LDAP

2013-09-13 Thread Nikolaos Milas
On 13/9/2013 9:35 μμ, Nikolaos Milas wrote: Where can I find the v3.0.0 source branch? Oh, I found it and it includes a spec file for redhat: https://github.com/FreeRADIUS/freeradius-server/tree/release_branch_3.0.0/redhat Is the spec file in a well-working condition? (I might test

Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
Hello, I am trying to use http://www.packetfence.org/downloads/PacketFence/freeradius/freeradius-2.2.0-2.el6.src.rpm to create custom FreeRadius RPMs for RHEL/CentOS 6. The main aim is to add --with-dhcp compile option which is not included in the standard build. The secondary aim

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Arran Cudbard-Bell
--with-rlm-ldap-lib-dir= --with-rlm-ldap-include-dir= Top level configure. Thanks, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
/BUILDROOT/freeradius-2.2.0-3.el6.x86_64/usr/lib64/freeradius/rlm_ldap.so error: File not found: /home/fradius1/rpmbuild/BUILDROOT/freeradius-2.2.0-3.el6.x86_64/usr/lib64/freeradius/rlm_ldap-2.2.0.so But I have also installed the standard openldap and openldap-devel packages (openldap 2.4.23

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Arran Cudbard-Bell
...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Fajar A. Nugraha
On Thu, Sep 12, 2013 at 3:25 PM, Nikolaos Milas nmi...@noa.gr wrote: Hello, I am trying to use http://www.packetfence.org/**downloads/PacketFence/** freeradius/freeradius-2.2.0-2.**el6.src.rpmhttp://www.packetfence.org/downloads/PacketFence/freeradius/freeradius-2.2.0-2.el6.src.rpmto create

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Nikolaos Milas
On 12/9/2013 2:46 μμ, Arran Cudbard-Bell wrote: Your linker's search path doesn't include the directory the libraries are in. Hmm, it seems the path is included but the ldap libs therein are not used because there is an override in /etc/ld.so.conf: # ldconfig -v | grep -v ^$'\t'

Re: Building FreeRadius with custom LDAP libraries

2013-09-12 Thread Alan DeKok
Nikolaos Milas wrote: ldconfig -v output does not list any *ldap* libraries in /usr/lib64 although they exist (while it lists *ldap* libs in /usr/local/openldap/lib64), obviously because: Well... this is a local OS issue. You'll need to consult your OS documentation to figure out what's

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
of the plane. Still trying to come up with a justification for an rlm_avionics module. Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 15:47, Kevin Bigalke beliarsf...@outlook.com wrote: Hello, i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login with 802.1 works perfectly. I`m using a Windows LDAP Server for the Login and want to add a second LDAP-Server for a Fail Over. I`m

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Alan DeKok
Kevin Bigalke wrote: i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login with 802.1 works perfectly. I`m using a Windows LDAP Server for the Login and want to add a second LDAP-Server for a Fail Over. I`m following the Tutorials to setup my Freeradius Server: **Click http

Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Kevin Bigalke
Hello, i`m running a Freeradius Server 2.1.12 on a Ubuntu 13.04 VM. The Login with 802.1 works perfectly. I`m using a Windows LDAP Server for the Login and want to add a second LDAP-Server for a Fail Over. I`m following the Tutorials to setup my Freeradius Server: *Click*. I`cant find

Freeradius + 2 x LDAP + VLAN

2013-09-12 Thread Miroslav Lednicky
Hello, I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 I using it for 802.1x users. I need switch users from ldap1 to VLAN 1 and users from ldap2 to VLAN 2. I don't know how can i do it. My configuration: /etc/freeradius/modules/ldap: ldap ldap1

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-12 Thread Arran Cudbard-Bell
It's like you're asking for flying lessons, and showing up with a bicycle. There's a bit of a disconnect somewhere. Not true, they make these awesome little fold up bikes you can chuck in the back of the plane. Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team

Re: Freeradius + 2 x LDAP + VLAN

2013-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2013, at 18:18, Miroslav Lednicky miroslav.ledni...@fnusa.cz wrote: Hello, I have Freeradius 2.1.10 with 2 LDAP servers (ldap1 + ldap2) and Ubuntu 12.04 authorize { ldap1 if (ok) { update reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802

Freeradius authenticate against Active directory

2013-09-12 Thread trevor obba
I am running freeradius 2.2.0, I have configured freeradius to authenticate against active directory and also offer eduroam service  When I authenticate my username as “test” and password in to my wireless devices it works. However if I try to authenticate my username as t...@abc.ac.uk it does

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Nikolaos Milas
On 31/8/2013 5:57 μμ, Nikolaos Milas wrote: I'll look into DHCP... Looking at the sites-available/dhcp example setup (on v2.2.0) I see that the DHCP code is not production-ready. Based on user feedback and on your involvement with next FreeRadius release(s) development, do you expect

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Arran Cudbard-Bell
involvement with next FreeRadius release(s) development, do you expect the DHCP module to be production ready in the next release? I can surely experiment now with the current experimental release, but it would be important to have a roadmap as to when the software will be production-ready, so

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Arran Cudbard-Bell
system. It is intended for validation and # experimentation ONLY. My understanding is that the term production system implies the definition above. Does the reference to code apply to the configuration file only (sites-available/dhcp) or to the DHCP FreeRadius module (as I have

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Nikolaos Milas
system implies the definition above. Does the reference to code apply to the configuration file only (sites-available/dhcp) or to the DHCP FreeRadius module (as I have probably misunderstood)? Please, clarify. Thanks, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Alan DeKok
Nikolaos Milas wrote: My understanding is that the term production system implies the definition above. It's just a warning. If it works for you, it works. Does the reference to code apply to the configuration file only (sites-available/dhcp) or to the DHCP FreeRadius module (as I have

freeradius eam sim authorization to everyone

2013-09-10 Thread Maxim Shoustin
Hello, I use freeradius 2.2.0 (runs on Ubuntu). I played enough with eap sim, (thanks for examples eapsim-02 - 06). My goal is to test client + AP but not freeradius authorization/authentication process. Ho can I configure freeradius to give success for every user, no matter what is imsi

Re: freeradius eam sim authorization to everyone

2013-09-10 Thread Alan DeKok
Maxim Shoustin wrote: Can I configure to give OK to any sim based on provider only, like Orange, for example/ No. The design of EAP-SIM makes that impossible. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-06 Thread Ben
On 05/09/2013 22:31, Alan Buxey wrote: But if you'd installed the debian/Ubuntu package version then it is 'freeradius' ;) alan Indeed, and that was the source of my problem. I had spent the best part of the day troubleshooting the older Ubuntu packaged version. So when I threw

Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Ben
Hi, Am I being stupid or what ? 3.5.0-26-generic #42~precise1-Ubuntu Downloaded ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.2.0.tar.gz Ran ./configure --sysconfdir=/etc --localstatedir=/var --prefix=/usr --exec-prefix=/usr --mandir=/usr/share/man --libdir=/usr/lib

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Arran Cudbard-Bell
On 5 Sep 2013, at 18:08, Ben ben+freerad...@list-subs.com wrote: Hi, Am I being stupid or what ? Yes. The main binary is called radiusd, not freeradius. Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Arran Cudbard-Bell
On 5 Sep 2013, at 18:29, Chris Decker csd...@psu.edu wrote: All, I could use some help in understanding my options for the following scenario: In our environment, FreeRADIUS currently writes its Accounting logs to the local drive - one file per authorized client. In addition to the local

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread CHRISTOPHER SHELDON DECKER
Alan, Thanks for responding. I'm from the Security group so I'm not intimately familiar with FreeRADIUS - can you please elaborate on how it would work off we set up a Virtual Accounting server? Sent from my iPhone On Sep 5, 2013, at 5:53 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Alan Buxey
The default install comes with a few accounting virtual servers that you can use. I'd strongly advise one of the or of band asynchronous ones. If you use UDP syslog is not blocking. .. it is fire and forget. .. so if you might lose packets if you have congested links or a disruption between

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Fajar A. Nugraha
On Fri, Sep 6, 2013 at 12:08 AM, Ben ben+freerad...@list-subs.com wrote: Hi, Am I being stupid or what ? 3.5.0-26-generic #42~precise1-Ubuntu Downloaded ftp://ftp.freeradius.org/pub/**freeradius/freeradius-server-** 2.2.0.tar.gzftp://ftp.freeradius.org/pub/freeradius/freeradius-server

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Ben
On 05/09/2013 18:32, Fajar A. Nugraha wrote: ./configure --sysconfdir=/etc --localstatedir=/var --prefix=/usr --exec-prefix=/usr --mandir=/usr/share/man --libdir=/usr/lib/freeradius --datadir=/usr/share Thank you Fajar. I'm up and running now though. - List info/subscribe/unsubscribe? See

FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Chris Decker
All, I could use some help in understanding my options for the following scenario: In our environment, FreeRADIUS currently writes its Accounting logs to the local drive - one file per authorized client. In addition to the local logging, the Security group wants the Accounting logs sent

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Ben
On 05/09/2013 18:19, Arran Cudbard-Bell wrote: On 5 Sep 2013, at 18:08, Ben ben+freerad...@list-subs.com wrote: Hi, Am I being stupid or what ? Yes. The main binary is called radiusd, not freeradius. Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info

Re: Freeradius 2.2.0 - binaries not being installed ???

2013-09-05 Thread Alan Buxey
But if you'd installed the debian/Ubuntu package version then it is 'freeradius' ;) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

  1   2   3   4   5   6   7   8   9   10   >