Thanks Alan. But maybe you can update me with the out date of the RPM in 2.1.10? I would like to upgrade from the RPM. I don't want to make a ./configure to install the FreeRadius. Thanks Eric B. -----Original Message----- From: freeradius-users-bounces+eric.belliere=mail.mobistar.be@lists.freeradius.org [mailto:freeradius-users-bounces+eric.belliere=mail.mobistar.be@lists.freera dius.org] On Behalf Of freeradius-users-request@lists.freeradius.org Sent: Tuesday 3 August 2010 16:53 To: freeradius-users@lists.freeradius.org Subject: Freeradius-Users Digest, Vol 64, Issue 10 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: Freeradius 2.1.9 digest authentication problem (Alan Buxey) 2. Re: Tag and Untag a port in several VLAN (fcombernous@kezia.com) 3. Re: Freeradius 2.1.9 stop working (Alan DeKok) 4. Re: Freeradius 2.1.9 digest authentication problem (Nicolas Goutte) 5. Re: Freeradius 2.1.9 digest authentication problem (Alan Buxey) 6. Re: Freeradius 2.1.9 digest authentication problem (alexb@arctel.ru) 7. Re: Freeradius 2.1.9 digest authentication problem (Alan DeKok) 8. Re: Tag and Untag a port in several VLAN (Fabien COMBERNOUS) 9. Re: Freeradius 2.1.9 digest authentication problem (Nicolas Goutte) ---------------------------------------------------------------------- Message: 1 Date: Tue, 3 Aug 2010 13:26:27 +0100 From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <20100803122627.GD16747@lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi,

Tried Cleartext-Password := "test", Cleartext-Password == "test", Cleartext-Password = "test", result is the same.

and remember - if you are changing the users file and not doing anything funky, you will have to restart the server! alan ------------------------------ Message: 2 Date: Tue, 3 Aug 2010 14:34:47 +0200 (CEST) From: fcombernous@kezia.com Subject: Re: Tag and Untag a port in several VLAN To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <e90578a477a443c9f260c2f6b6fc8b28.squirrel@kezia.com> Content-Type: text/plain;charset=iso-8859-1

On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote:

...

Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ?

Just convert 0x320007 to decimal??

No. Just a correct example in hexa to untag in vlan 7. I'll translate in decimal. Thank you for your help. ------------------------------ Message: 3 Date: Tue, 03 Aug 2010 14:35:34 +0200 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Freeradius 2.1.9 stop working To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4C580D16.6000006@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 BELLIERE Eric wrote:

Then if it is a bug I will have to upgrade? or do you have a patch? you send me the link for GIT.freeradius.org but what must I do to correct this problem?

Try using the v2.1.x branch from http://git.freeradius.org. i.e. download it and install it. The instructions are on that web page. Go read them.

For the log rotate I will add kill -HUP `cat /var/run/radiusd/radiusd.pid` in postrotate. Like this : /var/log/radius/radius.log { daily rotate 4 create missingok postrotate kill -HUP `cat /var/run/radiusd/radiusd.pid` compress }

Must I put this KILL -HUP for each log to rotate? (/var/log/radius/radacct/*/detail, /var/log/radius/checkrad.log, ...) or only for radius.log ?

Only for radius.log. Alan DeKok. ------------------------------ Message: 4 Date: Tue, 3 Aug 2010 14:42:44 +0200 From: Nicolas Goutte <nicolas.goutte@extragroup.de> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <B32493C2-246D-4FED-B43E-C163AF85802C@extragroup.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes Am 03.08.2010 um 14:25 schrieb Alan Buxey:

Hi,

...

Tried Cleartext-Password := "test", Cleartext-Password == "test", Cleartext-Password = "test", result is the same.

why? why did you do that?

Cleartext-Password := "test"

is the only correct way. you just compl;eted ignored the information/ help given by the actual author of FreeRADIUS. you dont trust him to know how the code works??

Alan Cox's email was sent only minutes later.

alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Have a nice day. Nicolas Goutte extragroup GmbH - Karlsruhe Waldstr. 49 76133 Karlsruhe Germany Gesch?ftsf?hrer: Lars Busch Registergericht: Amtsgericht M?nster / HRB: 5624 Steuer Nr.: 337/5903/0421 / UstID: DE 204607841 ------------------------------ Message: 5 Date: Tue, 3 Aug 2010 14:24:44 +0100 From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <20100803132444.GC16890@lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi,

Alan Cox's email was sent only minutes later.

Alan Cox? wow. RedHat finally taking development to new levels...... you meant Alan DeKok I assume? Too many Alan's for you? ;-) alan ------------------------------ Message: 6 Date: Tue, 3 Aug 2010 17:36:46 +0400 From: alexb@arctel.ru Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <20100803133646.GB4282@arctel.ru> Content-Type: text/plain; charset=us-ascii On Tue, Aug 03, 2010 at 01:56:48PM +0200, Alan DeKok wrote:

alexb@arctel.ru wrote:

...

trying to test digest authentication (freeradius 2.1.9). After uncommenting 'digest' in sites-available/default 'radiusd -X' starts fine. but after I added (according to 'man rlm_digest') to users file:

test Auth-Type := Digest, User-Password = "test" Reply-Message = "Hello, test with digest"

(1) Don't force Auth-Type (2) Use: Cleartext-Password := 'test" Not: User-Password = "test"

Ok, it works as expected (according test procedure in 'man rlm_digest') with this config: test Cleartext-Password := "test" Reply-Message = "Hello, test with digest" i.e. without Auth-Type attrubute. I MUST NOT use Auth-Type?

(3) search for "digest" in raddb/sites-available/default

found and uncommented "digest" in "authorize" and "authenticate" sections already (before posting here).

(4) READ the comments (5) enable digest as instructed

Thank You -- Alexander Belov ------------------------------ Message: 7 Date: Tue, 03 Aug 2010 15:58:17 +0200 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4C582079.9010506@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 alexb@arctel.ru wrote:

i.e. without Auth-Type attrubute. I MUST NOT use Auth-Type?

No. It has VERY limited uses. Nearly everyone who tries to use it gets it wrong. Ignore all of the third-party web sites that say to set Auth-Type. They're wrong, and they've been wrong for about 5 years. Alan DeKok. ------------------------------ Message: 8 Date: Tue, 03 Aug 2010 16:01:46 +0200 From: Fabien COMBERNOUS <fcombernous@kezia.com> Subject: Re: Tag and Untag a port in several VLAN To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4C58214A.2090206@kezia.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Alan DeKok wrote:

Fabien COMBERNOUS wrote:

...

I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with sql backend.

...

...

But when i plug the equipment radius give this debug : [sql1] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'test' ORDER BY id rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute Egress-VLANID

What am i missing or misunderstanding ?

The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later.

Or, change the hex number to a decimal number.

So i used the other possibility with Egress-VLAN-Name instead of Egress-VLANID. It is easier to understand the meaning of the value and it works with my version of FreeRadius. Thank you for your help. -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com <http://www.kezia.com/> *Tel: +33 (0) 467 992 986* Kezia Group ------------------------------ Message: 9 Date: Tue, 3 Aug 2010 16:53:01 +0200 From: Nicolas Goutte <nicolas.goutte@extragroup.de> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <885F2DEE-D290-4F30-A78F-96EBFA2075FE@extragroup.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Am 03.08.2010 um 15:24 schrieb Alan Buxey:

Hi,

...

Alan Cox's email was sent only minutes later.

Alan Cox? wow. RedHat finally taking development to new levels......

you meant Alan DeKok I assume? Too many Alan's for you? ;-)

Sorry for the mistyping.

alan - List info/subscribe/unsubscribe? See

http://www.freeradius.org/list/users.html Nicolas Goutte extragroup GmbH - Karlsruhe Waldstr. 49 76133 Karlsruhe Germany Gesch?ftsf?hrer: Lars Busch Registergericht: Amtsgericht M?nster / HRB: 5624 Steuer Nr.: 337/5903/0421 / UstID: DE 204607841 ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 64, Issue 10 ************************************************