Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Alan DeKok
Marcel Kraan wrote: I'am marcel kraan from Holland and i have a problem with Crypt-passwords in the mysql table. FreeRadius is working really great with Cleartext-Password but it does not authenticate with Crypt-password You can't use Crypt-Password and MS-CHAP.

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
Yes i want to use PAP (?) but where do i change that? into my Wifi router ? or in the Freeradius config? On 29 jul. 2013, at 13:52, Alan DeKok al...@deployingradius.com wrote: Marcel Kraan wrote: I'am marcel kraan from Holland and i have a problem with Crypt-passwords in the mysql table.

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Alan DeKok
Marcel Kraan wrote: Yes i want to use PAP (?) but where do i change that? into my Wifi router ? or in the Freeradius config? No. You're doing 802.1X to the WiFi router. You *cannot* use PAP. You cannot pick an authentication protocol and demand that everyone use it. The AP, client PC,

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
I very clear understands.. thanks for the help On 29 jul. 2013, at 14:07, Alan DeKok al...@deployingradius.com wrote: Marcel Kraan wrote: Yes i want to use PAP (?) but where do i change that? into my Wifi router ? or in the Freeradius config? No. You're doing 802.1X to the WiFi

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Navodit Bhardwaj
By default PAP, CHAP.. are enabled in FR. You may need to change the authentication settings in your client. i.e Wifi Router to send PAP enabled access-request. On Mon, Jul 29, 2013 at 5:25 PM, Marcel Kraan mar...@kraan.net wrote: Yes i want to use PAP (?) but where do i change that? into my

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Phil Mayers
On 29/07/13 12:55, Marcel Kraan wrote: Yes i want to use PAP (?) but where do i change that? into my Wifi router ? or in the Freeradius config? On the client. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
Thanks… i think my wifi router does not have that option… On 29 jul. 2013, at 14:15, Navodit Bhardwaj navodit.bhard...@gmail.com wrote: By default PAP, CHAP.. are enabled in FR. You may need to change the authentication settings in your client. i.e Wifi Router to send PAP enabled

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Fajar A. Nugraha
On Mon, Jul 29, 2013 at 7:39 PM, Marcel Kraan mar...@kraan.net wrote: Thanks… i think my wifi router does not have that option… On 29 jul. 2013, at 14:15, Navodit Bhardwaj navodit.bhard...@gmail.com wrote: By default PAP, CHAP.. are enabled in FR. You may need to change the authentication

Re: FreeRadius + MySql + Crypt-Password unable to authenticate

2013-07-29 Thread Marcel Kraan
Thanks. I have a genius en202 outdoor wifi router and i don't think i can change it to use PAP. So i'am only able to use ClearText-Password? If i'am wrong i will be very happy -- Marcel Kraan +31654378837 On 29 jul. 2013, at 15:04, Fajar A. Nugraha l...@fajar.net wrote: On Mon, Jul

Re: Freeradius + MySQL + Daloradius

2013-04-10 Thread Alan DeKok
Erik Sellgren wrote: I am trying to setup wireless authentication through my mikrotik router using freeradius with mysql and daloradius. I have the server setup and working, I can use NTradtest from my pc and I get Access-Accept messages in return with my cleartext user/password, username

Freeradius + MySQL + Daloradius

2013-04-09 Thread Erik Sellgren
I am trying to setup wireless authentication through my mikrotik router using freeradius with mysql and daloradius. I have the server setup and working, I can use NTradtest from my pc and I get Access-Accept messages in return with my cleartext user/password, username userclear password clear.

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sunday, February 24, 2013, Alan DeKok wrote: Russell Mike wrote: i also came across where guys are discussing EAP and MAC authentication. i could not conclude, if it is a better way of doing MAC authentication using EAP. To be clear: you don't. EAP is authentication. MAC

RE: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread David Peterson
+ Freeradius + MySQL Database Greetings Dear Alan D. List Members, First of all, thank you very much for developing such application. I need help, i have functional Freeradius server with MySQL backend. i have been asked to add MAC address authentication support for the servers. i googled the topic

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Alan DeKok
Russell Mike wrote: Thanks for guidelines. exactly, as you stated I simple want to store MAC address somewhere compair against the request. Can they be in radcheck? I wouldn't do that. Just create your own table of MAC addresses. If all you want is to list known MACs, you can do that with

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 2:20 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: Thanks for guidelines. exactly, as you stated I simple want to store MAC address somewhere compair against the request. Can they be in radcheck? I wouldn't do that. Just create your own

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 1:55 PM, David Peterson dav...@wirelessconnections.net wrote: I know of one person doing something similar to what you are looking to do. If your NAS sends the MAC of the device with the EAP request, you can extract the MAC from the request using unlang and check that

RE: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread David Peterson
-WirelessConnections; FreeRadius users mailing list Subject: Re: MAC-Auth + Freeradius + MySQL Database On Sun, Feb 24, 2013 at 1:55 PM, David Peterson dav...@wirelessconnections.net wrote: I know of one person doing something similar to what you are looking to do. If your NAS sends

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
*Subject:* Re: MAC-Auth + Freeradius + MySQL Database ** ** ** ** ** ** On Sun, Feb 24, 2013 at 1:55 PM, David Peterson dav...@wirelessconnections.net wrote: I know of one person doing something similar to what you are looking to do. If your NAS sends the MAC of the device

MAC-Auth + Freeradius + MySQL Database

2013-02-23 Thread Russell Mike
Greetings Dear Alan D. List Members, First of all, thank you very much for developing such application. I need help, i have functional Freeradius server with MySQL backend. i have been asked to add MAC address authentication support for the servers. i googled the topic and got many many mail

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-23 Thread Alan DeKok
Russell Mike wrote: i also came across where guys are discussing EAP and MAC authentication. i could not conclude, if it is a better way of doing MAC authentication using EAP. To be clear: you don't. EAP is authentication. MAC authentication is just checking if the MAC address is in a

freeradius+mysql

2012-12-18 Thread nanthitha shanmugam
Hi, I am using mysql with free radius for user authorization and accounting with assignment of ip pools from iptables in mysql. These all are working. But, I would like to know if we can bypass the authorization phase with mysql and use only ip pool assignment. Can you help in this part. Like

FreeRADIUS + Mysql + xl2tpd and pptpd

2012-11-15 Thread Dmitry Korzhevin
Hello, Can anyone please share working configs for freeradius + xl2tpd or pptpd? Radius server is already configured, and works with mysql backend + strongSwan ipsec (dirrect connection). But, i try several pptpd / xl2tpd configurations, and suddenly they doesn't work.. I even try

Re: FreeRADIUS + Mysql + xl2tpd and pptpd

2012-11-15 Thread Dmitry Korzhevin
Here, is links to logs on pastebin service: freeradius_debug_log (freeradius -X): http://dpaste.com/831692/ xl2tpd_debug_log (xl2tpd -D): http://dpaste.com/831693/ /etc/xl2tpd/xl2tpd.conf http://dpaste.com/831695/ /etc/ppp/options.xl2tpd http://dpaste.com/831696/ Guys, i just need another eyes

Re: FreeRADIUS + Mysql + xl2tpd and pptpd

2012-11-15 Thread Matthew Newton
Can't help much, as I didn't set up our system, but have you tried require authentication = no in xl2tpd.conf? You've got auth in IPsec (one assumes), and also in PPP (CHAP; we use MSCHAPv2 for Windows compatibility), so my understanding is you don't need it in L2TP as well, which goes inside

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Bjørn Mork
Alan DeKok al...@deployingradius.com writes: fknet wrote: Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for authentication of 3000 PPPoE users? Any iPhone 4 could handle that traffic. Yes, but how do I build FR for an iphone? Bjørn :-) - List info

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Arran Cudbard-Bell
On 30 Oct 2012, at 07:57, Bjørn Mork bj...@mork.no wrote: Alan DeKok al...@deployingradius.com writes: fknet wrote: Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for authentication of 3000 PPPoE users? Any iPhone 4 could handle that traffic. Yes

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Bjørn Mork
Arran Cudbard-Bell a.cudba...@freeradius.org writes: On 30 Oct 2012, at 07:57, Bjørn Mork bj...@mork.no wrote: Alan DeKok al...@deployingradius.com writes: fknet wrote: Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for authentication of 3000 PPPoE users

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Alan DeKok
Bjørn Mork wrote: You're right. Time to save some power replacing all those idling x86 CPUs with last years phones :-) Most people with small RADIUS systems should really be running them in a VM. There are few reasons to run dedicated hardware for ~10K users. Alan DeKol. - List

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread fknet
What virtual machine does you recommend Alan? thanks Em 30/10/2012 07:49, Alan DeKok escreveu: Bjørn Mork wrote: You're right. Time to save some power replacing all those idling x86 CPUs with last years phones :-) Most people with small RADIUS systems should really be running them in a

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Alan DeKok
fknet wrote: What virtual machine does you recommend Alan? It doesn't matter. I've used all of them. A VM with ~1G of RAM, one CPU, and ~10G of disk space is tiny by todays standards. It should be enough to handle 20K users. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-30 Thread Edgars Makņa
for FreeRadius+MySQL What virtual machine does you recommend Alan? thanks Em 30/10/2012 07:49, Alan DeKok escreveu: Bjørn Mork wrote: You're right. Time to save some power replacing all those idling x86 CPUs with last years phones :-) Most people with small RADIUS systems should really

Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread fknet
Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for authentication of 3000 PPPoE users? Thanks Fabrício F Kammer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread fknet
Just for information: I have more affinity with FreeBSD, than if the friends can help me to do the ideal configuration of these system will be better to me! Thanks! Em 29/10/2012 16:00, fknet escreveu: Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread Alan DeKok
fknet wrote: Hello people! What's the ideal Hardware (processor+memory) to run FreeRadius+MySQL for authentication of 3000 PPPoE users? Any iPhone 4 could handle that traffic. Buy anything that its your budget. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Ideal SO and hardware for FreeRadius+MySQL

2012-10-29 Thread fknet
Thanks for the reply! I'll use FreeBSD with Xeon 3420 + 8Gb RAM. Regards Em 29/10/2012 16:59, Alan DeKok escreveu: Any iPhone 4 could handle that traffic. Buy anything that its your budget. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
this - I try to return attribute with only printable chars, and got it in Context-Name exactly as it stored in DB. So I urgently need help - how I can store needed value to adequately accepted by Radius? -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5611684.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
IVB wrote: Yes, I run queries by hand and see results as strings, non-printable chars not printed, but attribute itself has non-zero length. You can't put binary data into an ASCII string field. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5612096.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
IVB wrote: But that was my question! ... How I can put Opt82 attributes (which contains non-printable bytes) into database to offer it later for FreeRADIUS using SELECT statement? You don't. The database is intended for ASCII data. You could also edit the dictionaries to make the data

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Igor Belikov
Hello Alan, Monday, April 2, 2012, 1:59:03 PM, you wrote: AD IVB wrote: But that was my question! AD ... How I can put Opt82 attributes (which contains non-printable bytes) into database to offer it later for FreeRADIUS using SELECT statement? AD You don't. Are you kidding? AD The

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
Igor Belikov wrote: AD You don't. Are you kidding? If you insist on going down that path, you'll be unsubscribed and banned. I'm tried of people who can't read the documentation, and who use that ignorance to put me down. Do you mean that FreeRADIUS can't accept non-ASCII data from

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
-- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5612329.html Sent from the FreeRadius - User mailing list archive at Nabble.com.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread Alan DeKok
IVB wrote: Hello Alan, Yes, I will be very happy to read how to represent 'octets' data in DB. And I ask about this several times. I don't find this info in documentation, sorry. Please give me link to right place. I gave you a hint, and you deleted it. Good luck. Alan DeKok. -

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-04-02 Thread IVB
', '0x0006001e58ab0304', '==' ) Thanks to all for help. -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5612364.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-31 Thread Alan DeKok
IVB wrote: But I don't see in debug output what exactly was returned in SQL query. Have you tried running the SQL queries from an SQL client on the command line? That's why they're printed out in debugging mode: so you can see them, and re-run them yourself. Alan DeKok. - List

FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
english - it is not my native language. -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606148.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread Fajar A. Nugraha
On Fri, Mar 30, 2012 at 4:29 PM, IVB i...@is.ua wrote: I need help. Software: FreeRADIUS v2.1.11, MySQL v5.1.61. Hardware: RB SE100 under SEOS-6.4.1.4-Release BRAS sends Opt-82 related attributes in following format: What format? Attributes Agent-* described in radius dictionary as

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606373.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
table' after check SQL, and reply SQL don't executed. And finally I don't login. But I don't see in debug output what exactly was returned in SQL query. -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606432.html Sent from

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread Fajar A. Nugraha
On Fri, Mar 30, 2012 at 6:12 PM, IVB i...@is.ua wrote: Agent-Circuit-Id = 0x000403fc0001 let's start with that one.  ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', x'000403fc0001', '==' ), Does that work? Shouldn't it be something like ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', 0x000403fc0001,

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-30 Thread IVB
this and write results. -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp5606148p5606635.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius Mysql Performance

2012-01-29 Thread YvesDM
On Sat, Jan 28, 2012 at 3:03 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: What?? You dont need that kind of hardware for job, sure. Throwing that kind of horsepower might fix the speed but this is a DBA question. Look at your mysql configuration and see how it can be adjusted (my.cnf) look

Re: Freeradius Mysql Performance

2012-01-29 Thread Alan DeKok
YvesDM wrote: Just wondering, do you see performance increase using postgres instead of mysql? Yes. MySQL can be higher performance than older versions of PostGreSQL, if you don't do database writes. Newer versions of Postgres have similar performance to MySQL, with the benefit of

Re: Freeradius Mysql Performance

2012-01-29 Thread YvesDM
On Sun, Jan 29, 2012 at 11:36 AM, Alan DeKok al...@deployingradius.comwrote: YvesDM wrote: Just wondering, do you see performance increase using postgres instead of mysql? Yes. MySQL can be higher performance than older versions of PostGreSQL, if you don't do database writes. Newer

Re: Freeradius Mysql Performance

2012-01-29 Thread Alan Buxey
Hi, Sorry to pick into this with a short question. Just wondering, do you see performance increase using postgres instead of mysql? yes. I am a postgreSQL convert. though, that said - out of the box you get slightly better and safer performance - but you'll still have to configure

Freeradius Mysql Performance

2012-01-28 Thread Morteza Milani
Hi, Our company is using freeradius as a VPN authentication authorization system. In worse-case say we would have 1 Million users. Beside scaling our market, we are going to develop an application to analyze users with data mining algorithms. Currently we use a server with the following

Re: Freeradius Mysql Performance

2012-01-28 Thread Phil Mayers
On 01/28/2012 09:57 AM, Morteza Milani wrote: Hi, Our company is using freeradius as a VPN authentication authorization system. In worse-case say we would have 1 Million users. Beside scaling our market, we are going to develop an application to analyze users with data mining algorithms.

Re: Freeradius Mysql Performance

2012-01-28 Thread Giuseppe Marocchio
Dear, i've got same problem in the first time that i use freeradius, first of all, you need to tune your mysql ( my.cnf ) with right optimization, you can enable slow query logging in order to check if is mysql or freeradius problem. when your mysql works fine, you can tune freeradius, like

Re: Freeradius Mysql Performance

2012-01-28 Thread Fajar A. Nugraha
On Sat, Jan 28, 2012 at 6:10 PM, Phil Mayers p.may...@imperial.ac.uk wrote: On 01/28/2012 09:57 AM, Morteza Milani wrote: Hi, Our company is using freeradius as a VPN authentication authorization system. In worse-case say we would have 1 Million users. Beside scaling our market, we are

Re: Freeradius Mysql Performance

2012-01-28 Thread Alan Buxey
What?? You dont need that kind of hardware for job, sure. Throwing that kind of horsepower might fix the speed but this is a DBA question. Look at your mysql configuration and see how it can be adjusted (my.cnf) look at the engine in use and see if you can use better..(eg innodb instead of

Re: Freeradius Mysql Performance

2012-01-28 Thread Marinko Tarlac
1 mil of users and one server... ??? Good luck... On 1/28/2012 10:57 AM, Morteza Milani wrote: Hi, Currently we use a server with the following features: * RAM: 4 GB * Processor: 1x E8400 3.0 GHz - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius Mysql Performance

2012-01-28 Thread Alan Buxey
It's do-able. Though I would be worried about failover and resiliancy. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread RAZAFIMBELO Faliharinohatra Rindra
Hi all, I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected by freeradius. I saw that both of PEAP and EAP-TTLS used TLS and i

Re: Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread Alan Buxey
Hi,     I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected how are you testing this? what client are you using? your

Re: Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread RAZAFIMBELO Faliharinohatra Rindra
, I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected how are you testing this? what client are you using? your

Re: Freeradius + Mysql + PEAP Authentication

2012-01-24 Thread Alan Buxey
Hi, when i changed the authentication to use peap, i got the problem. I launched the server in debug mode ( freeradius -X ) and all that i can see is that all my requests are rejected. i'm sorry, I've lost my ability to read minds. It would actually be quite handy if you, for

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2012-01-21 Thread lumirl
and so the passwords must be stored in cleartext (or nthash)! I use for administration DiapUPAdmin - very nice and easy. Hopefully this will help to somebody who was lost like me. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Freeradius-MySQL-WiFi-PEAP-authorisation-only

Re: wifi + freeradius + mysql + eap/tls

2011-11-18 Thread Alan DeKok
Enrique Llanos Vargas wrote: I've just installed a freeradius+mysql on a debian 6.0.3, first test from localhost with radtest and mysql user auth (radcheck table) worked well, 2nd test with radeaptest with mysql and md5 eap method worked well too, but I don't find a way to make it work

Re: wifi + freeradius + mysql + eap/tls

2011-11-18 Thread Fajar A. Nugraha
On Fri, Nov 18, 2011 at 3:02 AM, Enrique Llanos Vargas ellan...@gmail.com wrote: I don't find a way to make it work with eap+tls: I don't really want to use TLS, so if you help me to disable TLS, it'll be fine for me. You want to make it work with eap+tls, but you don't really want to use

wifi + freeradius + mysql + eap/tls

2011-11-17 Thread Enrique Llanos Vargas
Hi guys, I've just installed a freeradius+mysql on a debian 6.0.3, first test from localhost with radtest and mysql user auth (radcheck table) worked well, 2nd test with radeaptest with mysql and md5 eap method worked well too, but I don't find a way to make it work with eap+tls: Here's my error

wifi + freeradius + mysql + eap/tls

2011-11-17 Thread specr
Hi guys, I've just installed a freeradius+mysql on a debian 6.0.3, first test from localhost with radtest and mysql user auth (radcheck table) worked well, 2nd test with radeaptest with mysql and md5 eap method worked well too, but I don't find a way to make it work with eap+tls: Here's my error

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Alan DeKok
Erik wrote: wouldn't you at least see checkrad initiate in the freeradius -X debug if I set the NAS type to cisco? I was just trying to get it to initiate, not expecting it to work. In the debug, it doesn't even come up. I've read in prior posts where you said that checkrad should initiate

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Erik
 Are you looking for additional problems, or are you trying to solve the original issue? I'm trying to understand exactly what's happening was wondering why checkrad wasn't being called. If I get a NAS which does SNMP, for example, I wanted to know that checkrad would work in a predictable

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Alan DeKok
Erik wrote: I'm trying to understand exactly what's happening was wondering why checkrad wasn't being called. If I get a NAS which does SNMP, for example, I wanted to know that checkrad would work in a predictable fashion. It does. It works. See man checkrad. I'll quote some of your

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Erik
 It does.  It works.  See man checkrad. Checkrad is called to double-check duplicate logins. Thank you, I understand now.  The guy using exec-program-wait for Simultaneous-Use was doing something different.  That was clear from his post. Not to me - this is a new world for me I'm doing

Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Erik
- FreeRadius Version: 2.1.10 - Hello All, I've been going in circles for days on how to come up with a workaround to get simultaneous-use checking working on my FreeRadius + PEAP MSCHAPv2 deployment. I have read

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Alan DeKok
Erik wrote: I've been going in circles for days on how to come up with a workaround to get simultaneous-use checking working on my FreeRadius + PEAP MSCHAPv2 deployment. I have read through seemingly all of the posts... I suspect certain areas which might be causing the problem: 1) my NAS

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Erik
Alan, thanks for the response...  Because the cheap NAS (a) isn't a Cisco box, and (b) doesn't support the protocols needed by checkrad. wouldn't you at least see checkrad initiate in the freeradius -X debug if I set the NAS type to cisco? I was just trying to get it to initiate, not

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Fajar A. Nugraha
On Wed, Nov 9, 2011 at 5:11 AM, Erik heideb...@gmail.com wrote: I've read in prior posts where you said that checkrad should initiate regardless if the radutmp or mysql modules were used. I really don't recommend using radutmp. And if you use sql, there's no need to use checkrad. Simultanous

Re: Freeradius mysql acct copy

2011-10-27 Thread tonimanel
Hi, This configuration is correctly? Nowadays, could I use this to copy acct to a remote server? Thanks. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Freeradius-mysql-acct-copy-tp4272880p4942524.html Sent from the FreeRadius - User mailing list archive at Nabble.com

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
: FreeRadius + MySQL | radacct: Errors and Warnings Another thing to try, are you using radutmp? If no (e.g. session/simultaneous use check is using sql), just mark all instance of radutmp from sites-available/default (and whatever other virtual server you use). - List info/subscribe/unsubscribe

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Hi Tim, 1. User the InnoDB Engine in MySQL. I read about it and don't know if it's the best way. Why InnoDB engine? MySAM engine is more fast. 2. Increase the number of SQL sockets in sql.conf (num_sql_socks). The default is 5, try 25. Ok. 3. Increase the number of connections

Re: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Alan DeKok
Daniel Menezes wrote: 1. User the InnoDB Engine in MySQL. I read about it and don't know if it's the best way. Why InnoDB engine? MySAM engine is more fast. If you know better than the RADIUS experts, why are you asking questions on this list? Alan DeKok. - List

Re: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Arran Cudbard-Bell
On 27 Oct 2011, at 16:16, Alan DeKok wrote: Daniel Menezes wrote: 1. User the InnoDB Engine in MySQL. I read about it and don't know if it's the best way. Why InnoDB engine? MySAM engine is more fast. It doesn't support row level locking for one. Which absolutely cripples selects

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Fajar A. Nugraha
On Thu, Oct 27, 2011 at 8:19 PM, Daniel Menezes lis...@dmnzs.com.br wrote: Fajar, I had radutmp and SQL commented out in account {}. I don't know why, a possible mistake. After mark radutmp and restart freeradius I don't see new errors in log. So you mean radutmp was the root cause of your

RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Hi Alan, If you know better than the RADIUS experts, why are you asking questions on this list? I don't know better than anyone, I'm simply asking to understand where I'm lost. Sorry if you feel bad with my questions .. Sds, --- Daniel Menezes - List info/subscribe/unsubscribe? See

Re: RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Alan DeKok
Daniel Menezes wrote: I don't know better than anyone, I'm simply asking to understand where I'm lost. Then you should ask WHY is one better than the other. Sorry if you feel bad with my questions .. Which is proof you didn't understand my response. Alan DeKok. - List

RES: RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Hi Arran, It doesn't support row level locking for one. Which absolutely cripples selects against the radacct/postauth table when there are high levels of inserts/updates. MyISAM should *NOT* be used for the postauth and radacct. Version 3 schema has been updated to use INNODB for these

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-27 Thread Daniel Menezes
Fajar, So you mean radutmp was the root cause of your problem? I don't know, but it's better now. =) What does FR log says? Does it say it recives duplicate or conflicting packets? If yes, then the db is still slow. You still need to fix it. If not, then the problem might be somewhere else

FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Daniel Menezes
Hi all, First, sorry my bad English. I have a FreeRadius + MySQL setup with MikroTik as NAS. And a few days ago I have some warnings and errors in the log: Tue Oct 25 04:02:41 2011 : Info: Released IP xxx.xxx.xxx.xxx (did via-pppoe-01 cli xx:xx:xx:xx:xx:xx user dmnzs-test) Tue Oct 25 05:30:36

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Fajar A. Nugraha
On Wed, Oct 26, 2011 at 10:08 PM, Daniel Menezes lis...@dmnzs.com.br wrote: I read something about slow backend, tables indexes and other things. I've used the backend script 'mysqltuner.pl' to adjust the performance. It's better now, but the warnings and erros persists. Can anyone help me on

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Fajar A. Nugraha
On Wed, Oct 26, 2011 at 10:08 PM, Daniel Menezes lis...@dmnzs.com.br wrote: Tue Oct 25 15:43:20 2011 : Error: WARNING: Unresponsive child for request 784, in module radutmp component accounting Another thing to try, are you using radutmp? If no (e.g. session/simultaneous use check is using

RE: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Tim Sylvester
Hi Daniel, I have a FreeRadius + MySQL setup with MikroTik as NAS. And a few days ago I have some warnings and errors in the log: Tue Oct 25 04:02:41 2011 : Info: Released IP xxx.xxx.xxx.xxx (did via-pppoe-01 cli xx:xx:xx:xx:xx:xx user dmnzs-test) Tue Oct 25 05:30:36 2011 : Error: Received

RES: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Daniel Menezes
...@lists.freeradius.org] Em nome de Fajar A. Nugraha Enviada em: quarta-feira, 26 de outubro de 2011 13:17 Para: FreeRadius users mailing list Assunto: Re: FreeRadius + MySQL | radacct: Errors and Warnings On Wed, Oct 26, 2011 at 10:08 PM, Daniel Menezes lis...@dmnzs.com.br wrote: I read something about slow backend

Re: FreeRadius + MySQL | radacct: Errors and Warnings

2011-10-26 Thread Fajar A. Nugraha
On Thu, Oct 27, 2011 at 12:13 AM, Daniel Menezes lis...@dmnzs.com.br wrote: Yes, there is a large number of rows in the radacct and radposauth tables. The attribute 'Acct-Interim-Interval' works very well but makes many records. Interim update aren't suppose to add records, they simply update

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-18 Thread Lumir Lindovsky
Lumir Lindovsky wrote: How do I give access to wifi users who authenticate with username pass over PEAP only to a group of users? See the FAQ. You can create a group, and limit them based on group membership. You can use SQL-Group. See doc/rlm_sql Alan DeKok. - List

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-12 Thread Alan DeKok
Lumir Lindovsky wrote: How do I give access to wifi users who authenticate with username pass over PEAP only to a group of users? See the FAQ. You can create a group, and limit them based on group membership. You can use SQL-Group. See doc/rlm_sql Alan DeKok. - List

Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-10 Thread Lumir Lindovsky
Hello, I would like to help with this: I have Freeradius version 2.1.6 I have it running with SQL and DialupAdmin. How do I give access to wifi users who authenticate with username pass over PEAP only to a group of users? I mean that authorised would be only users from group WIFI and not other

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

2011-08-10 Thread up
Hello, I would like to help with this: I have Freeradius version 2.1.6 I have it running with SQL and DialupAdmin. How do I give access to wifi users who authenticate with username pass over PEAP only to a group of users? I mean that authorised would be only users from group WIFI and not

  1   2   3   4   5   6   >