Re: [RADIATOR] Assign static IP to users based on Source address

2012-05-21 Thread Heikki Vatiainen
, $value) = @$_; \ $ip = $value if $name eq 'Framed-IP-Address-' . $p-{Client}-{Identifier}; \ push (@to_delete, $name) if $name =~ /^Framed-IP-Address-/; \ } \ $rp-add_attr('Framed-IP-Address', $ip) if $ip; \ map {$rp-delete_attr($_)} @to_delete; \ } /Handler -- Heikki

Re: [RADIATOR] TLS Session Resumption does not work on Windows Server 2008 R2 64-bit.

2012-05-21 Thread Heikki Vatiainen
Perl 5.12.2 (Build 1202) (32-bit) and Net-SSLeay 1.36.0.1 also. So it's either a Windows Sever 2003 to 2008 issue or a 32-bit to 64-bit issue. Ok, thanks for the information. I'll give 2008R2 with Perl 5.12.4 a try and see how it works with 32bit and 64bit Perl. Heikki -- Heikki Vatiainen

Re: [RADIATOR] EAP-SIM EAP-AKA issues with radiator server

2012-05-21 Thread Heikki Vatiainen
/html/rfc4186 (the EAP-SIM RFC) is a valuable source of information. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM

Re: [RADIATOR] Password Variable not passed

2012-05-18 Thread Heikki Vatiainen
attributes from AD while letting LSA do the authentication. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active

Re: [RADIATOR] TLS Session Resumption does not work on Windows Server 2008 R2 64-bit.

2012-05-16 Thread Heikki Vatiainen
a try to OSC compiled Net-SSLeay, does it change anything? See http://www.open.com.au/radiator/free-downloads/ and http://www.open.com.au/radiator/free-downloads/Net-SSLeay.ppd which you can use with ppm install url. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable

Re: [RADIATOR] TLS Session Resumption does not work on Windows Server 2008 R2 64-bit.

2012-05-15 Thread Heikki Vatiainen
this in the config: EAPTLS_PEAPVersion 0 Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS

Re: [RADIATOR] Radiator Failover between two Accounting Databases

2012-05-15 Thread Heikki Vatiainen
manual for version 4.9, section 5.31 AuthBy SQL. There is one paragraph discussing how the failover with multiple databases works. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS

Re: [RADIATOR] AcctLogFileName alongside AccountingTable in AuthBy SQL

2012-05-11 Thread Heikki Vatiainen
radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active

Re: [RADIATOR] Tacacs Authentication to survive reloads ?

2012-05-11 Thread Heikki Vatiainen
types of network devices, it is important that I be able to grab the key for a particular Client from each LDAP entry. The above suggestion is based on the guess that device-type has the IP address or name that would go into Client IP/name when doing a static configuration. Heikki -- Heikki

Re: [RADIATOR] AcctLogFileName alongside AccountingTable in AuthBy SQL

2012-05-09 Thread Heikki Vatiainen
in your Handlers and it should work. Notice the spelling (f vs F). That's where the problem is. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus

Re: [RADIATOR] Upgrade Challenges to 4.9

2012-05-09 Thread Heikki Vatiainen
/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX

Re: [RADIATOR] Radiator CPU Usage

2012-05-08 Thread Heikki Vatiainen
ROUNDROBIN, HASHBALANCE, EAPBALANCE) to proxy the incoming requests to backend instances. Currently the Perl service is only running on a single core out of the 4 available. That's correct. You need to have multiple instances to utilise all the cores. Thanks! Heikki -- Heikki Vatiainen h

Re: [RADIATOR] AddressPool behaves how? CORRECTIONS

2012-05-03 Thread Heikki Vatiainen
, Range can be used only within a single /24 You could do: Range 172.20.0.1 172.20.0.255 Range 172.20.1.0 172.20.1.254 However, I'm wondering why it does not give you an error. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS

Re: [RADIATOR] (no subject)

2012-05-03 Thread Heikki Vatiainen
. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco

Re: [RADIATOR] doubt on Radiator Radius Authentication server

2012-05-02 Thread Heikki Vatiainen
that you do not e.g., have Radiator as Windows service enabled and running. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM

Re: [RADIATOR] Tacacs Authentication to survive reloads ?

2012-05-01 Thread Heikki Vatiainen
and testing that it works when the client is removed from the config file. The clients Radiator knows about are the combined set of clients in the config file and from any ClientList* that are configured. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible

Re: [RADIATOR] Rewrite userna functionality for use in ldap_aps authby

2012-05-01 Thread Heikki Vatiainen
not change the username allowing MS-CHAP-V2 to succeed. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active

Re: [RADIATOR] CHAP client question

2012-04-30 Thread Heikki Vatiainen
in this case. All other PAP client work fine. Yes, with PAM that sounds correct. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM

Re: [RADIATOR] Tacacs Authentication to survive reloads ?

2012-04-30 Thread Heikki Vatiainen
authentication, any related cisco-avpairs and such. So it looks like there is no good way to recover the old functionality. So maybe the need for reloading Radiator could be made less frequent? Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable

Re: [RADIATOR] EAP-TTLS and MAC tracking

2012-04-25 Thread Heikki Vatiainen
. Thanks, ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files

Re: [RADIATOR] EAP-TLS (Radiator)

2012-04-25 Thread Heikki Vatiainen
-- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP

Re: [RADIATOR] EAP-TLS (Radiator)

2012-04-19 Thread Heikki Vatiainen
any alternatives to what Radiator proposed. So now it is at least responding to EAP-TLS start message, but still does not want to actually start EAP-TLS. The client configuration needs more work, most likely. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable

Re: [RADIATOR] ] RADIATOR: EAP-FAST-MSCHAPv2

2012-04-19 Thread Heikki Vatiainen
is there and the PACs do not time out. PACs can have limited lifetime and the client should be prepared for this too. Heikki - Sudhir -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Wednesday, April 18

Re: [RADIATOR] Tacacs Server and DefaultRealm

2012-04-19 Thread Heikki Vatiainen
On 04/18/2012 12:07 PM, Heikki Vatiainen wrote: This might be by-design ofc.. just noticed it tho :) I'll check if there's such history behind this. Thanks for notifying us. Hello Patrik, the current patches now have this change. 2012-04-20 ServerTACACSPLUS.pm tacacsplusserver.cfg

Re: [RADIATOR] RADIATOR, EAP-TLS

2012-04-18 Thread Heikki Vatiainen
...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Monday, April 16, 2012 2:39 PM To: radiator@open.com.au Subject: Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2 On 04/16/2012 11:12 AM, Sudhir Harwalkar wrote: 1. Please guide me how to keep PACs

Re: [RADIATOR] Tacacs Server and DefaultRealm

2012-04-18 Thread Heikki Vatiainen
nothing seem to be wrong. Ok. Thanks! Heikki Regards, Patrik Forsberg ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible

Re: [RADIATOR] RADIATOR, EAP-TLS

2012-04-18 Thread Heikki Vatiainen
...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Wednesday, April 18, 2012 1:41 PM To: radiator@open.com.au Subject: Re: [RADIATOR] RADIATOR, EAP-TLS On 04/18/2012 10:00 AM, Sudhir Harwalkar wrote: How to configure the client to trust the CA certificate

Re: [RADIATOR] evaluation - Checkby syntax

2012-04-18 Thread Heikki Vatiainen
, Heikki Vatiainen wrote: On 04/05/2012 04:12 PM, Robb Pfrank wrote: Hello Robb, I attempted to use the config provided but the handler is not picking my device up. I have specified to specific IP address instead of DEFAULT, this did not seem to work either. Try this: Handler Client

Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-17 Thread Heikki Vatiainen
[mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Monday, April 16, 2012 11:52 PM To: radiator@open.com.au Subject: Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2 On 04/16/2012 06:02 PM, Sudhir Harwalkar wrote: Please check the modification in the config ( eap_fast.cfg

Re: [RADIATOR] Strange username in radiator logs

2012-04-17 Thread Heikki Vatiainen
-144s1214145147230N223+ Attributes: Reply-Message = No such user Regards, -Manish ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable

Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-17 Thread Heikki Vatiainen
recover from the case where the server does not recognise the PAC it sends. Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM

Re: [RADIATOR] RADIATOR: EAP-FAST-MSCHAPv2

2012-04-17 Thread Heikki Vatiainen
and provisioned. You should experiment with your client and see its logs for why it does not work. The configuration I returned to you was working and tested fine here. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL

Re: [RADIATOR] Idle timeout issue

2012-04-16 Thread Heikki Vatiainen
for the user. When the users logs in again, the returned Sesstion-Timeout reflects what's currently left. Note: if you want to try this, add 'HandleAcctStatusTypes Stop' to the AuthBy to make sure possible accounting alives are not processed here. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au

Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-16 Thread Heikki Vatiainen
is not accepted a new PAC is provisioned. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS

Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-16 Thread Heikki Vatiainen
Thanks! Heikki Regards Sudhir H -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Friday, April 13, 2012 6:00 PM To: radiator@open.com.au Subject: Re: [RADIATOR] FW: RADIATOR: EAP-FAST-MSCHAPv2

Re: [RADIATOR] Tacacs Authentication to survive reloads ?

2012-04-16 Thread Heikki Vatiainen
have fixed the problem you are seeing. Is there anything else you do not like in current apart from authorization info (context) not being saved across reloads? Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy

Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-16 Thread Heikki Vatiainen
see the config file and sql.cfg file. Regards Sudhir H -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Monday, April 16, 2012 2:39 PM To: radiator@open.com.au Subject: Re: [RADIATOR] FW: FW

Re: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-16 Thread Heikki Vatiainen
Message- From: Sudhir Harwalkar Sent: Monday, April 16, 2012 4:33 PM To: 'Heikki Vatiainen' Cc: radiator@open.com.au Subject: RE: [RADIATOR] FW: FW: RADIATOR: EAP-FAST-MSCHAPv2 As per your comment, I made changes for EAP-FAST MACHAPv2, If I enable AUTHBY SQL ,its giving me an error

Re: [RADIATOR] FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-13 Thread Heikki Vatiainen
configuration. Heikki Sudhir H -Original Message- From: Heikki Vatiainen [mailto:h...@open.com.au] Sent: Thursday, April 12, 2012 2:52 PM To: Sudhir Harwalkar Subject: Re: FW: [RADIATOR] FW: RADIATOR: EAP-FAST-MSCHAPv2 On 04/12/2012 09:25 AM, Sudhir Harwalkar wrote: Thanks

Re: [RADIATOR] FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-10 Thread Heikki Vatiainen
is happening and what the client is expecting. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP

Re: [RADIATOR] FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-09 Thread Heikki Vatiainen
-Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Friday, April 06, 2012 4:55 PM To: radiator@open.com.au Subject: Re: [RADIATOR] FW: RADIATOR: EAP-FAST-MSCHAPv2 On 04/06/2012 10:07 AM, Sudhir Harwalkar wrote

Re: [RADIATOR] FW: RADIATOR: EAP-FAST-MSCHAPv2

2012-04-06 Thread Heikki Vatiainen
file. Thanks Sudhir H -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Thursday, April 05, 2012 4:50 PM To: radiator@open.com.au Subject: Re: [RADIATOR] RADIATOR: EAP-FAST-MSCHAPv2 On 04/05/2012

Re: [RADIATOR] RADSEC, failure algorithm, eduroaming and long reply times

2012-04-06 Thread Heikki Vatiainen
know how this goes once I hear more from development. Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active

Re: [RADIATOR] RADIATOR: EAP-FAST-MSCHAPv2

2012-04-05 Thread Heikki Vatiainen
with the other option being SQL. So do not restart Radiator unless you want to clear the PAC. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside

Re: [RADIATOR] RADSEC, failure algorithm, eduroaming and long reply times

2012-04-05 Thread Heikki Vatiainen
ever bought! Charly -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX

Re: [RADIATOR] evaluation - Checkby syntax

2012-04-05 Thread Heikki Vatiainen
. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS

Re: [RADIATOR] RADSEC, failure algorithm, eduroaming and long reply times

2012-04-05 Thread Heikki Vatiainen
think I understand what you need. I was just trying to clarify if Status-Server would be enough or if anything else is needed too. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS

Re: [RADIATOR] Radiator

2012-04-01 Thread Heikki Vatiainen
/[MS-PEAP].pdf Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC

Re: [RADIATOR] Radiator

2012-03-29 Thread Heikki Vatiainen
. Extract the package and replace the current certificates with the certificates in the patches package. You can patch the whole distribution, but just replacing the old certificates is sufficient. Otherwise PEAP authentication seems to be starting fine. Thanks! Heikki -- Heikki Vatiainen h

Re: [RADIATOR] Radiator

2012-03-28 Thread Heikki Vatiainen
:15 AM To: 'Heikki Vatiainen'; 'radiator@open.com.au' Subject: RE: [RADIATOR] FW: Radiator Hi Heikki, For PEAPv0, in the users files I have see so many username and password, in that where exactly I need to modify. -Original Message- From: Sudhir Harwalkar Sent: Tuesday

Re: [RADIATOR] FW: Radiator

2012-03-27 Thread Heikki Vatiainen
...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Monday, March 26, 2012 1:35 PM To: radiator@open.com.au list Subject: Re: [RADIATOR] Radiator On 03/26/2012 02:54 PM, Sudhir Harwalkar wrote: Hello Sudhir, Please find the modified EAP-PEAPv0 file, please check once whether whatever changes I

Re: [RADIATOR] CRL reload error

2012-03-27 Thread Heikki Vatiainen
at version 1.0.0h. Is OCSP an option instead of a crl? Can Radiator use OCSP? Unfortunately there is no OSCP related functionality in Radiator. Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS

Re: [RADIATOR] FW: Radiator

2012-03-27 Thread Heikki Vatiainen
and connectivity between the AP and Radiator and connectivity between user and AP. Thanks! Heikki Thanks Sudhir -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Tuesday, March 27, 2012 3:40 PM To: radiator

Re: [RADIATOR] FW: Radiator

2012-03-27 Thread Heikki Vatiainen
Thanks! Heikki Thanks Sudhir H -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Tuesday, March 27, 2012 3:40 PM To: radiator@open.com.au Subject: Re: [RADIATOR] FW: Radiator On 03/27/2012 11:19 AM

Re: [RADIATOR] Radiator

2012-03-26 Thread Heikki Vatiainen
This creates users file which knows about one user 'username' and where the user has password 'mypassword'. Thanks! Heikki Thanks Sudhir H -Original Message- From: Sudhir Harwalkar Sent: Monday, March 26, 2012 10:53 AM To: 'Heikki Vatiainen' Subject: RE: [RADIATOR] Radiator Hi Heikki

Re: [RADIATOR] Radiator

2012-03-22 Thread Heikki Vatiainen
Thanks in Advance Sudhir H -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Thursday, March 22, 2012 4:08 AM To: radiator@open.com.au Subject: Re: [RADIATOR] Radiator On 03/21/2012 11:40 AM, Sudhir

Re: [RADIATOR] Radiator

2012-03-22 Thread Heikki Vatiainen
@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP

Re: [RADIATOR] Radiator

2012-03-22 Thread Heikki Vatiainen
-Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Thursday, March 22, 2012 2:22 PM To: radiator@open.com.au Subject: Re: [RADIATOR] Radiator On 03/21/2012 03:58 PM, Sudhir Harwalkar wrote: Thanks a lot

Re: [RADIATOR] CRL reload error

2012-03-22 Thread Heikki Vatiainen
. *** ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL

Re: [RADIATOR] eap + apple products - failed auth - CORRECTION

2012-03-22 Thread Heikki Vatiainen
). As far as I can understand, someone is breaking the 4-way..., which makes the authentication fail. Hope this can help you to help me... Best regards, Amândio -Mensagem original- De: Heikki Vatiainen [mailto:h...@open.com.au] Enviada: qua 21-03-2012 23:38 Para: Amândio

Re: [RADIATOR] AddToReply with Diameter

2012-03-21 Thread Heikki Vatiainen
dictionary is specified after the system dictionary e.g. with DictionaryFile parameter, it will override the IANA information. That is why lookup for Line-Identifier returns 13019,350 instead of 0,127, which it would normally return. Thanks! Heikki br, Arthur 20.03.2012 10:16, Heikki Vatiainen

Re: [RADIATOR] Radiator

2012-03-21 Thread Heikki Vatiainen
/radiator/install-demo.html and the installation instructions there. They give examples how to start radiusd (Radiator). Typically something like this should work: perl c:\perl\bin\radiusd -trace 4 -config_file c:\path\to\your.conf -- Heikki Vatiainen h...@open.com.au Radiator: the most portable

Re: [RADIATOR] eap + apple products - failed auth - CORRECTION

2012-03-21 Thread Heikki Vatiainen
, Amândio -Mensagem original- De: Heikki Vatiainen [mailto:h...@open.com.au] Enviada: sexta-feira, 16 de Março de 2012 12:54 Para: Amândio Antunes Gomes Silva Cc: radiator@open.com.au Assunto: Re: [RADIATOR] eap + apple products - failed auth On 03/08/2012 05:40 PM, Amândio Antunes

Re: [RADIATOR] AddToReply with Diameter

2012-03-20 Thread Heikki Vatiainen
___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT

Re: [RADIATOR] Radiator

2012-03-20 Thread Heikki Vatiainen
the sender and delete it from your system. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere

Re: [RADIATOR] Radiator

2012-03-20 Thread Heikki Vatiainen
/radiator/free-downloads/Net-SSLeay.ppd The idea is to fetch the files from the Internet with ppm. Thanks! Heikki Thanks Sudhir H -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Tuesday, March 20, 2012 2:29

Re: [RADIATOR] Radiator

2012-03-20 Thread Heikki Vatiainen
to the internet. Thanks! Heikki Thanks Sudhir -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heikki Vatiainen Sent: Tuesday, March 20, 2012 3:09 PM To: radiator@open.com.au Subject: Re: [RADIATOR] Radiator On 03/20/2012 11:07 AM

Re: [RADIATOR] what kind of error?

2012-03-16 Thread Heikki Vatiainen
. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco

Re: [RADIATOR] eap + apple products - failed auth

2012-03-16 Thread Heikki Vatiainen
is eapolclient's process id and en1 is the interface name. The log file will show how EAPOL works. It will not show details about e.g., MS-CHAP-V2 but should at least tell what EAP messages are received and sent and what their contents are. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au

Re: [RADIATOR] pam_radius_auth x86_64 password garbled RHEL/CENTOS 5.8

2012-03-15 Thread Heikki Vatiainen
pam_radius_auth.o md5.o -lpam -o pam_radius_auth.so [root@app2 pam_radius-1.3.17]# Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS

Re: [RADIATOR] Configuration Question

2012-03-13 Thread Heikki Vatiainen
of the client as part of the key, so that in situations where the group name depends on the client the correct group name will be retrieved There are also many other Tacacs related changes. See the history file for more. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator

Re: [RADIATOR] eap + apple products - failed auth

2012-03-07 Thread Heikki Vatiainen
in it. If you have received this mail in error, please tell us immediately by return email and delete the document. -Mensagem original- De: Heikki Vatiainen [mailto:h...@open.com.au] Enviada: segunda-feira, 5 de Março de 2012 22:59 Para: Amândio Antunes Gomes Silva

Re: [RADIATOR] eap + apple products - failed auth

2012-03-05 Thread Heikki Vatiainen
@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP

Re: [RADIATOR] Server 2008 R2 x64 - radsec certificate verify failed

2012-03-02 Thread Heikki Vatiainen
configuration. Thanks! Heikki Regards Christian -Ursprüngliche Nachricht- Von: Heikki Vatiainen [mailto:h...@open.com.au] Gesendet: Donnerstag, 15. Dezember 2011 11:57 An: Röver, Christian Cc: radiator@open.com.au Betreff: Re: AW: [RADIATOR] Server 2008 R2 x64 - radsec certificate

Re: [RADIATOR] a logging question

2012-03-02 Thread Heikki Vatiainen
/Realm Thanks for any hints and help! ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server

Re: [RADIATOR] eap + apple products - failed auth

2012-02-29 Thread Heikki Vatiainen
is frequently updated and has text about version negotiation but uses 0 for its own version. In summary: there are multiple documents with different versions, but version 0 seems to work the best among all implementations. Especially Macs do not like version 1. Heikki -- Heikki Vatiainen h

Re: [RADIATOR] Eap ttls/mschapv2 MySQL

2012-02-29 Thread Heikki Vatiainen
for an index of configuration examples and other related files. Studying them with the reference manual, see doc/ref.pdf, will get you started. Thanks! Heikk -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files

Re: [RADIATOR] (Radiator) Filtering log Message

2012-02-23 Thread Heikki Vatiainen
5.13.1 Filename for more about using pipes. Heikki On 02/23/2012 12:04 AM, Heikki Vatiainen wrote: On 02/22/2012 01:25 PM, G.N. wrote: i would like to know if is possible to filter Authlog entry, logging all except access from certain username. Unfortunately that is not possible. Here

Re: [RADIATOR] Inner and outer authentication

2012-02-23 Thread Heikki Vatiainen
-- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP

Re: [RADIATOR] (Radiator) Filtering log Message

2012-02-22 Thread Heikki Vatiainen
. G. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP

Re: [RADIATOR] Authenticating Devices...

2012-02-22 Thread Heikki Vatiainen
checking is needed. Be sure to check Trace 4 log to see how the SQL queries and Radiator behaviour changes with the above options. This might be the way to go if you can not configure your wlan gear to send mac address as username as Mike suggested. Thanks! Heikki -- Heikki Vatiainen h

Re: [RADIATOR] Cannot install rpm file

2012-02-20 Thread Heikki Vatiainen
, Feb 17, 2012 at 11:10 PM, Heikki Vatiainen h...@open.com.au mailto:h...@open.com.au wrote: On 02/17/2012 03:27 AM, Jay Tuala wrote: I followed the 'RPM format for Linux' link and accepted the license agreement to download the file. After downloading the file onto

Re: [RADIATOR] Cannot install rpm file

2012-02-17 Thread Heikki Vatiainen
Radiator on a virtual machine is not a problem. It's actually quite common. Thanks! Heikki Many thanks, Jay #radiatornewbie :-| On Fri, Feb 17, 2012 at 1:45 PM, Heikki Vatiainen h...@open.com.au mailto:h...@open.com.au wrote: On 02/15/2012 10:31 PM, Jay Tuala wrote

Re: [RADIATOR] Chap challenge in AuthBy EXTERNAL

2012-02-16 Thread Heikki Vatiainen
Please somebody help me. 2012/2/15 Heikki Vatiainen h...@open.com.au On 02/14/2012 05:34 PM, Mark Green wrote: # The challenge is sent by the client in CHAP-Challenge. # If that is not set, the challenge is in the authenticator $challenge = $p-getAttrByNum($Radius::Radius::CHAP_CHALLENGE

Re: [RADIATOR] Cannot install rpm file

2012-02-16 Thread Heikki Vatiainen
I would greatly appreciate any help i can get. Many thanks, J ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible

Re: [RADIATOR] missing request attributes with TunnelledByPEAP

2012-02-15 Thread Heikki Vatiainen
')); \ }; tp stands for tunnelled packet. It can be manipulated with PreHandlerHook from the outer Handler. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald

Re: [RADIATOR] Chap challenge in AuthBy EXTERNAL

2012-02-15 Thread Heikki Vatiainen
or AuthHook instead. Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA

Re: [RADIATOR] AuthBy SQL Reject or Accept in the SQL results

2012-02-09 Thread Heikki Vatiainen
the returned Reply-Message based on X-Reject-Msg which comes from SQL call. For more about the hook parameters, please see the reference manual. Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files

Re: [RADIATOR] AuthBy SQL Reject or Accept in the SQL results

2012-02-09 Thread Heikki Vatiainen
mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM

Re: [RADIATOR] iOS5 and untrusted/not verified EAP certificates

2012-02-09 Thread Heikki Vatiainen
? As clarification, I'm not using provisioning profiles, so the iPad doesn't know the network when it first connects to it. Cheers, Mike ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki

Re: [RADIATOR] MSCHAPv2 and LDAP Authentication...

2012-02-08 Thread Heikki Vatiainen
___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password

Re: [RADIATOR] two factor authentication

2012-02-01 Thread Heikki Vatiainen
LDAP and AuthBy OTP. Is there a way to do this? Cheers, Alex Am 2012-01-17 21:12, schrieb Mike McCauley: Hi Heikki, I wonder if he should also look at AuthBy OTP? Cheers. On Tuesday, January 17, 2012 09:39:27 PM Heikki Vatiainen wrote: On 01/17/2012 08:13 PM, Alexander Hartmaier wrote

Re: [RADIATOR] CRL reload error

2012-02-01 Thread Heikki Vatiainen
openssl crl -nextupdate command and then scheduling update based on that. A quick search for possible scripts found this candidate. Maybe it might be useful for ideas of how to do this? http://www.id.ee/11051 See 'Sample script for automatic renewal ...'. -- Heikki Vatiainen h...@open.com.au

Re: [RADIATOR] Using Storable in a hook

2012-01-25 Thread Heikki Vatiainen
it might be getting lost here. Hard to tell. I have not tried this myself. Please keep us posted how it goes. Thanks! Heikki Thanks, Jared On Jan 24, 2012, at 5:59 PM, Heikki Vatiainen wrote: On 01/24/2012 10:44 PM, Jared Watkins wrote: I'm seeing some weird errors and behavior trying

Re: [RADIATOR] Radius Feed to third party Billing Vendor

2012-01-24 Thread Heikki Vatiainen
on what other AuthBys you have and how your AuthByPolicy has been set (defaults to ContinueWhileIgnore), you may need to do accounting forwarding with the last AuthBy Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere

Re: [RADIATOR] Using Storable in a hook

2012-01-24 Thread Heikki Vatiainen
.. for development/debugging I'm attempting to serialize and store (in db field) a hash I'm creating with all the per packet name-value pairs. Hard to tell. Examples would be useful :) Thanks! Heikki -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable

Re: [RADIATOR] AuthByLDAP2 + AuthAttrDef and AuthByFILE

2012-01-20 Thread Heikki Vatiainen
, but the check just doesnt' seem to be performed right by AuthByFILE. Is this a documentation bug and it isn't intended to work that way or am I missing smth. in my configuration? Thanks a lot for your help, best regards, Kurt -- Heikki Vatiainen h...@open.com.au Radiator: the most portable

Re: [RADIATOR] Change speed rate limit for selected URL or service

2012-01-19 Thread Heikki Vatiainen
to hear from you soon. Tnx. BR, Purevbat.Ya ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible

Re: [RADIATOR] Prepaid Card solution.

2012-01-19 Thread Heikki Vatiainen
. Tnx. Хүндэтгэсэн, Я.Пүрэвбат ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator -- Heikki Vatiainen h...@open.com.au Radiator: the most portable, flexible and configurable

Re: [RADIATOR] RADSEC and Secret

2012-01-19 Thread Heikki Vatiainen
with 3.12 client and server config against 4.9 server and client config and they were able to talk when Secret was changed to radsec. With 3.12 you have to enable UseTLS explicitly. That was the other change apart from port number I had to change to make 3.12 talk to 4.9. Heikki -- Heikki Vatiainen h

<    2   3   4   5   6   7   8   9   10   >