May 2006 - Freeradius-Users - lists.freeradius.org

What printer [tested] for FreeRadius + WPA (EAP/TLS) WLAN network?
by Krzysztof Stelmach 17 May '06

17 May '06

Hello, I use FreeRadius with WPA (EAP/TLS) in my wireless network. Recently I was asked to select and buy wireless printer (with wireless print server built-in). And here is a problem: Does anybody know what printer supports WPA with EAP/TLS? I'm talking about models tested in WPA EAP/TLS-enabled WLAN network (we have HP DeskJet 5850 but it doesn't work - it's theoretically WPA-compatible, I can install certificates but it doesn't log to network, In WEP-only environment it works great). Regards, Krzysztof Stelmach

1 0

RE: getting Freeradius to recorde login failure, etc
by Jamal Taweel 17 May '06

17 May '06

You should write in PL/SQL the following: CREATE FUNCTION + the statements which they were sent. BR, -----Original Message----- From: freeradius-users-bounces+jamal.taweel=paltel.net(a)lists.freeradius.org [mailto:freeradius-users-bounces+jamal.taweel=paltel.net@lists.freeradiu s.org] On Behalf Of Jeremy ohara Sent: Wednesday, May 17, 2006 12:17 PM To: FreeRadius users mailing list Subject: RE: getting Freeradius to recorde login failure, etc Importance: High i done all but i'm lost where you have * Create a function in the database (called "fails"). The main statements which you should write are how do i do this? Jeremy -----Original Message----- From: "Jamal Taweel" <jamal.taweel(a)paltel.net> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Wed, 17 May 2006 12:40:43 +0200 Subject: RE: getting Freeradius to recorde login failure, etc Hi Jeremy, In order to apply what wants, you should do the following: * Create a table in the radius schema (called "fails_log") to include three columns: trial_date, username, password. * Create a function in the database (called "fails"). The main statements which you should write are " fails ( username1 in out char, password1 in char) return char is v_user char:=''; v_password:=''; begin select username , value into v_user from radcheck where attribute='password' and username= username1 and password=password1; if v_user = '' then insert into fails_log values (sysdate,username1,password1); else return v_user; end if; end; " * Update authorize_ceck_query module in sql.conf file to be as follows: authorize_check_query = "SELECT id,Username,Attribute,Value,op FROM ${authcheck_table} WHERE Username =(select fails('%{SQL-User-Name}','%{Use r-Password}') from dual) ORDER BY id" That is all. Then you can find all failed logs inside the new created table fails_log. Best Regards, Jamal -----Original Message----- From: freeradius-users-bounces+jamal.taweel=paltel.net(a)lists.freeradius.org [mailto:freeradius-users-bounces+jamal.taweel=paltel.net@lists.freeradiu s.org] On Behalf Of Jeremy ohara Sent: Wednesday, May 17, 2006 6:32 AM To: FreeRadius users mailing list Subject: Re: getting Freeradius to recorde login failure, etc Hi there i dont want to sound rude, etc but your not really answering my question. you only answered half of it what do i wite for the sql statement, etc Jeremy -----Original Message----- From: "Duane Cox" <duanec(a)mail.illicom.net> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Tue, 16 May 2006 22:28:12 -0500 Subject: Re: getting Freeradius to recorde login failure, etc post-auth { # # If you want to have a log of authentication replies, # un-comment the following line, and the 'detail reply_log' # section, above. # reply_log sql Post-Auth-Type REJECT { sql } } ----- Original Message ----- From: Jeremy ohara <mailto:Admin@jemisp.com> To: FreeRadius users mailing list <mailto:freeradius-users@lists.freeradius.org> Sent: Tuesday, May 16, 2006 9:13 PM Subject: Re: getting Freeradius to recorde login failure, etc where and how do i do it and what do i write??? jeremy -----Original Message----- From: "Duane Cox" <duanec(a)mail.illicom.net> To: "FreeRadius users mailing list" < freeradius-users(a)lists.freeradius.org <mailto:freeradius-users@lists.freeradius.org> > Date: Tue, 16 May 2006 18:17:26 -0500 Subject: Re: getting Freeradius to recorde login failure, etc yes, there is a subsection under the post_auth section for such a thing... ----- Original Message ----- From: Jeremy ohara <mailto:Admin@jemisp.com> To: FreeRadius users mailing list <mailto:freeradius-users@lists.freeradius.org> Sent: Tuesday, May 16, 2006 3:24 PM Subject: getting Freeradius to recorde login failure, etc hi there is there a way to get Freeradius 1.0.5 with Mysql to record login-failure, incorrect password or incorrect username into the mysql table? i can see its possbile. but when you login with wrong details it doesnt get to record the login failure, etc. and i dont knwo what code to use and how to make freeradius to record it Jeremy ------------------------------------------------------------------------ ---- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ------------------------------------------------------------------------ ---- _____ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------ ---- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ------------------------------------------------------------------------ ---- _____ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------ ---- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ------------------------------------------------------------------------ ---- ------------------------------------------------------------------------ ---- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ------------------------------------------------------------------------ ----

2 2

adding field to dialup_admin
by David Antognini 17 May '06

17 May '06

Hi Guys, I want to add the attribute WISPr-Bandwidth-Max-Down to the user "edit" page in dialup_admin. I added "WISPr-Bandwidth-Max-Down" to the bottom of the user_edit.attrs file. Then I manually went in and added the attribute into the radreply table and it works fine, and in dialup admin I can see the values, but when I go to edit the values, it doesn't work...Any tips on how to get this working? Dave

2 1

RE: getting Freeradius to recorde login failure, etc
by Jamal Taweel 17 May '06

17 May '06

Hi Jeremy, In order to apply what wants, you should do the following: * Create a table in the radius schema (called "fails_log") to include three columns: trial_date, username, password. * Create a function in the database (called "fails"). The main statements which you should write are " fails ( username1 in out char, password1 in char) return char is v_user char:=''; v_password:=''; begin select username , value into v_user from radcheck where attribute='password' and username= username1 and password=password1; if v_user = '' then insert into fails_log values (sysdate,username1,password1); else return v_user; end if; end; " * Update authorize_ceck_query module in sql.conf file to be as follows: authorize_check_query = "SELECT id,Username,Attribute,Value,op FROM ${authcheck_table} WHERE Username =(select fails('%{SQL-User-Name}','%{Use r-Password}') from dual) ORDER BY id" That is all. Then you can find all failed logs inside the new created table fails_log. Best Regards, Jamal -----Original Message----- From: freeradius-users-bounces+jamal.taweel=paltel.net(a)lists.freeradius.org [mailto:freeradius-users-bounces+jamal.taweel=paltel.net@lists.freeradiu s.org] On Behalf Of Jeremy ohara Sent: Wednesday, May 17, 2006 6:32 AM To: FreeRadius users mailing list Subject: Re: getting Freeradius to recorde login failure, etc Hi there i dont want to sound rude, etc but your not really answering my question. you only answered half of it what do i wite for the sql statement, etc Jeremy -----Original Message----- From: "Duane Cox" <duanec(a)mail.illicom.net> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Tue, 16 May 2006 22:28:12 -0500 Subject: Re: getting Freeradius to recorde login failure, etc post-auth { # # If you want to have a log of authentication replies, # un-comment the following line, and the 'detail reply_log' # section, above. # reply_log sql Post-Auth-Type REJECT { sql } } ----- Original Message ----- From: Jeremy ohara <mailto:Admin@jemisp.com> To: FreeRadius users mailing list <mailto:freeradius-users@lists.freeradius.org> Sent: Tuesday, May 16, 2006 9:13 PM Subject: Re: getting Freeradius to recorde login failure, etc where and how do i do it and what do i write??? jeremy -----Original Message----- From: "Duane Cox" <duanec(a)mail.illicom.net> To: "FreeRadius users mailing list" < freeradius-users(a)lists.freeradius.org <mailto:freeradius-users@lists.freeradius.org> > Date: Tue, 16 May 2006 18:17:26 -0500 Subject: Re: getting Freeradius to recorde login failure, etc yes, there is a subsection under the post_auth section for such a thing... ----- Original Message ----- From: Jeremy ohara <mailto:Admin@jemisp.com> To: FreeRadius users mailing list <mailto:freeradius-users@lists.freeradius.org> Sent: Tuesday, May 16, 2006 3:24 PM Subject: getting Freeradius to recorde login failure, etc hi there is there a way to get Freeradius 1.0.5 with Mysql to record login-failure, incorrect password or incorrect username into the mysql table? i can see its possbile. but when you login with wrong details it doesnt get to record the login failure, etc. and i dont knwo what code to use and how to make freeradius to record it Jeremy ------------------------------------------------------------------------ ---- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ------------------------------------------------------------------------ ---- _____ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------ ---- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ------------------------------------------------------------------------ ---- _____ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------ ---- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ------------------------------------------------------------------------ ----

2 1

Syntax Error
by Lakshmi Jayaraman 17 May '06

17 May '06

Hi, I am using the latest version of freeRadius. The version is 1.1.1. When I try to run the server it gives a lot of syntax error. Kindly let me know how to proceed with the same. Thanks Lakshmi The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s)and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender or administrator(a)tataelxsi.co.in

2 1

Error running free-radius
by Jordi Soriano Terol 16 May '06

16 May '06

Hi all! I´ve encountered an error message while including the file eap.conf during the running of free-radius radiusd -X. The error is .../eap.conf(290) "Unexpected end of file". I´ve tried even with the original file but the error is still there. Can someone help me? Thanks.

3 4

How to use time period
by ludovic cailleau 16 May '06

16 May '06

Good morning!! I would like to authorize connection to the users to one time period stored in Ldap base. Example: The user Steeve can be connecting between 8h and 12h. So at the time of the request for connection, freeradius will have to check if the time of connection is between this time period. If its true freeradius send accept but if it is wrong he send reject. Does freedius manage that? Because I be not found information in connection with that. Thanks Ludovic Cailleau --------------------------------- Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Cliquez ici.

4 5

Dialup Admin
by Jeremy ohara 16 May '06

16 May '06

Wondering if anyone can help me with Dialup Admin. what the current problem is. when i look at online users. it shows the nas server but saying noone is online. and when i go to view the user who is online it says they are not online can anyone help me here. if you need more info plz tell me Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------

2 1

rlm_sqlcounter developer required
by Mark Lovatt 16 May '06

16 May '06

Hi, I'm using rlm_sqlcounter to limit the amount of time my users can stay connected to a NAS, which works very well, as you know, it SUMS the amount of time a users has been online by querying the radacct table then returns a Session-Timeout attribute. My NAS supports Max-Input_octets and Max-Output-Octets attributes, I'd like to perform an SQL SUM on AccInputOctets and AccOutputOctets during the authorize phase then return these two attributes to set the max amount of bandwidth a user can use. I've spent all day reading about rlm_sqlcounter, this functionality isn't available but has been talked about previously, what I'm really asking for, since my C knowledge is a little rusty and I'm a bit pressed for time is for one of you guys to patch this module for me, for a price of course. R Mark

2 3

Re: Mysql with freeradius Error again
by Abul Monsur Mannan 16 May '06

16 May '06

Many thanks for quick reply.I'll do and try then must inform U about the result. Thanks again. On 5/16/06, cknipe(a)savage.za.org <cknipe(a)savage.za.org> wrote: > Quoting Abul Monsur Mannan <monsurc1(a)gmail.com>: > > > how can I configure freeradius to accept request from mysql ? I'm > > using Freeradius1.1.1 on Redhat Enterprise4.Should I populate the > > tables 'redrely' as well as 'redgroup' with others? > > You need to populate all the tables except accounting with the correct > information. Spend 10 minutes on google and search for a freeradius+mysql > tutorial, there's plenty arround explaining what goes in what tables, with > examples etc. > > -- > Chris > > > >

1 0