Re: eap-tls authentication with free radius 1.1.5
Quoting freeradius-users-request@lists.freeradius.org:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body \'help\' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than \"Re: Contents of Freeradius-Users digest...\"
Today\'s Topics: Hi Alan I stil havn\'t get the exact problem.Earlier i was using freeradius-snapshot-20021028 .For eap-tls i made changes in radiusd.conf,clients.conf and users file. With 1.1.5 version i didn;t change radiusd.conf. Pls tell me what are the configuration required in the radiusd.conf,eap.conf,clients.conf and users file.
Anoop
1. Re: FreeRadius crash (Alan DeKok) 2. Re: IP billing with freeradius (tnt@kalik.co.yu) 3. Re: IP billing with freeradius (Alexander V. Klepikov) 4. Re: eap-tls authentication with free radius 1.1.5 (Alan DeKok) (anoop_c@sifycorp.com) 5. Re: eap-tls authentication with free radius 1.1.5 (Alan DeKok) (anoop_c@sifycorp.com)
----------------------------------------------------------------------
Message: 1 Date: Tue, 08 May 2007 09:49:56 +0200 From: Alan DeKok <aland@deployingradius.com> Subject: Re: FreeRadius crash To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <46402BA4.7090805@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
Doug Hardie wrote:
FreeRadius 1.1.2 on FreeBSD 6.1 using libpthread.
Upgrade to 1.1.6. It has a lot of fixes that may help.
It looks like it\'s crashing when starting a new child thread. That may be a pthread issue in the underlying libraries.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
------------------------------
Message: 2 Date: Tue, 08 May 2007 09:38:19 +0100 From: <tnt@kalik.co.yu> Subject: Re: IP billing with freeradius To: \"FreeRadius users mailing list\" <freeradius-users@lists.freeradius.org> Message-ID: <CLwKM75d.1178613499.9866420.tnt@kalik.co.yu> Content-Type: text/plain; charset=ISO-8859-2
This is nothing to do with radius. Use netflow.
Ivan Kalik Kalik Informatika ISP
Dana 8/5/2007, \"satish patel\" <linuxtrap@yahoo.co.in> pi?e:
thnks for reply dear
But my requiremnt is a bit different means i explain u in depth i have datacenter in data center many customers and we are giving ip pool to our customer and terminate that pool on 6500 cisco core switch so i want bandwidth counter on that port wheather all customer server connected so that i can billing of that perticuler port means how much upload and how much download traffic of that port then i can genrate bill of that port it is not possible i can genrate traffic uage of verey servers so that i want to genrate traffic counter of that single cisco switch port you got it my point it is possibel through mrtg but i want counter values so it is possible with freeradius
tnt@kalik.co.yu wrote: If you are using sql accounting then make a sqlcounter that counts octets and send Auth-Type Reject if counter is over 10GB.
Ivan Kalik Kalik Informatika ISP
Dana 7/5/2007, \"satish patel\" pi?e:
Dear Sir
I am working in data center so i need ip base billing means which ip address useing how much bandwidth means i give 10 GB data transfer to my one customer and 10GB data transfer reached then i got mesge or i can block the port of server what ever this is example so it is possible can i accouting of data transfer through my core switch ??
Reghards
Satish Patel
$ cat ~/satish/url.txt
System administrator ( Data Center )
please visit this site
--------------------------------- Office firewalls, cyber cafes, college labs, don\'t allow you to download CHAT? Here\'s a solution!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
$ cat ~/satish/url.txt
System administrator ( Data Center )
please visit this site
--------------------------------- Office firewalls, cyber cafes, college labs, don\'t allow you to download CHAT? Here\'s a solution!
------------------------------
Message: 3 Date: Tue, 8 May 2007 11:55:01 +0300 From: \"Alexander V. Klepikov\" <klepikov_a@up.ua> Subject: Re: IP billing with freeradius To: \"FreeRadius users mailing list\" <freeradius-users@lists.freeradius.org> Message-ID: <00db01c7914e$908413c0$0301010a@klepikova> Content-Type: text/plain; format=flowed; charset=\"iso-8859-2\"; reply-type=original
Hello, tnt@kalik.co.yu! You wrote on Tue, 08 May 2007 09:38:19 +0100:
t> This is nothing to do with radius. Use netflow.
What about dot1x auth + accounting? Though it may be not so good for servers.
With best regards, Alexander V. Klepikov. E-mail: klepikov_a@up.ua
------------------------------
Message: 4 Date: Tue, 08 May 2007 15:27:49 +0600 (IST) From: anoop_c@sifycorp.com Subject: Re: eap-tls authentication with free radius 1.1.5 (Alan DeKok) To: freeradius-users@lists.freeradius.org, freeradius-users-request@lists.freeradius.org Cc: freeradius-users@lists.freeradius.org Message-ID: <1178618269.4640499db1808@mail.sifycorp.com> Content-Type: text/plain; charset=ISO-8859-1
Hi i didn\'t get the exact problem. I have gone through eap.conf. Pls make little bit clear abt the problem
Anoop
freeradius-users-request@lists.freeradius.org:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body \'help\' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than \"Re: Contents of Freeradius-Users digest...\"
Today\'s Topics:
1. Re: MySQL and postauth_query (George Embrey) 2. Re: FreeRadius crash (A.L.M.Buxey@lboro.ac.uk) 3. Re: MySQL and postauth_query (Peter Nixon) 4. Re: rlm_sqlippool in freeradius 1.1.6 (Peter Nixon) 5. Re: IP billing with freeradius (satish patel) 6. Re: IP billing with freeradius (Peter Nixon) 7. Re: eap-tls authentication with free radius 1.1.5 (Alan DeKok)
----------------------------------------------------------------------
Message: 1 Date: Tue, 08 May 2007 14:38:39 +1000 From: George Embrey <george@vmail.net.au> Subject: Re: MySQL and postauth_query To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <463FFECF.7080101@vmail.net.au> Content-Type: text/plain; charset=\"us-ascii\"
Hugh Messenger wrote:
George Embrey <george@vmail.net.au> says:
Queries to Windows MySQL servers from Linux Systems often fail
unless
the lower_case_table_names parameter is set to 0 in the my.ini file in the MySQL directory.
I\'m familiar with that issue, and I checked all the table case-ness.
The
problem seems to be with providing an empty string (\'\') as the value for an auto-incrementing integer primary index.
Yes that is true \'\' or empty strings are not nulls or integers... I suggest replacing the \'\' with the word null, this will sort out the issue based on the query you specified.
The problem with setting lower_case_table_names to 0 is that I could end up blowing away my MyISAM tables elsewhere in that server, as per the warning the service control gives, if I moof a query on those and use the \"wrong\" case:
I would rename the MyISAM tables using phpmyadmin or using SQL and sort out the Database to run case sensitive in the first place like the ANSI standard.
Or much better still mysqldump the entire MySQL server into a file \"textfilename.sql\", sort out the table names etc... using a good text editor, place a drop table if exists before each create table entry, save the file then run mysql -uroot -p < \"textfilename.sql\" to recreate all of the databases including data with tablenames in the correct case...
Maybe I am just too fussy...
\"You have forced lower_case_table_names to 0 through a command-line option, even though your file system \'E:MySQLData\' is case insensitive. This means that you can corrupt a MyISAM table by accessing it with different cases. You should consider changing lower_case_table_names to 1 or 2\"
Only if you live in an all windows world... \"Compatability is a bitch it demands the use of standards, the little things which M$ don\'t adhere to very well\" ;-)
It\'s working fine with my modifie query, so I\'m just going to put this down to \"a 5.x thing\" and live with my change. Compared to the wholesale hack and slash job I\'ve had to do on the sqlippool queries to get them to work, it\'s no Big Whoop, LOL!
But thanks for the suggestion, I appreciate your time.
-- hugh
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
George Embrey CEO / Senior Systems Architect. Vmail Internet Services Pty Ltd. 318 Shoal Point Road Shoal Point QLD 4750 Australia
Hi Anoop, could you *please* fix your quoting! Maybe <http://www.dfn.de/content/dienstleistungen/dfnroaming/workshops/wsarchiv/> (handout "Server(Freeadius)-/Client Zertifizierung durch die DFN-PCA - Wie geht das? Was ist zu beachten?" are in German language but the FreeRADIUS config part is obviously reusable. Beware that this handout will be slightly updated shortly because I sent an updated version to the maintainer of this website) or <http://www.geant2.net/upload/pdf/GN2-06-258v8-DJ5-1-5_Inter-NREN_Roaming_Infrastructure_and_Service_Support__Cookbook_1st_Version.pdf> are of interest for you. anoop_c@sifycorp.com wrote:
Hi Alan I stil havn\'t get the exact problem.Earlier i was using freeradius-snapshot-20021028 .For eap-tls i made changes in radiusd.conf,clients.conf and users file. With 1.1.5 version i didn;t change radiusd.conf. Pls tell me what are the configuration required in the radiusd.conf,eap.conf,clients.conf and users file.
-- Beste Gruesse / Kind Regards Reimer Karlsen-Masur DFN-PKI FAQ: https://www.pki.dfn.de/faqpki -- Dipl.-Inform. Reimer Karlsen-Masur (PKI Team), Phone +49 40 808077-615 DFN-CERT Services GmbH, https://www.dfn-cert.de, Phone +49 40 808077-555 Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737
participants (2)
-
anoop_c＠sifycorp.com -
Reimer Karlsen-Masur, DFN-CERT