Re: Everything lookslike it works, but PC is not authentified

2006-09-02 Thread Alexandros Gougousoudis
Hi, Stefan Winter schrieb: this list, is that the server cert doesn't have the MS TLS Web Server Authentication OID in the cert. Please read the various documentation about Nope, the cert has this extension. I checked that again and again. Server is in DNS and the CN of the cert is the FQDN

Re: Everything lookslike it works, but PC is not authentified

2006-09-02 Thread Alexandros Gougousoudis
Hi, K. Hoercher schrieb: 1. Don't set Auth-Type. See http://deployingradius.com/documents/configuration/auth_type.html Thanks to your reply. The problem is, there are now a lot of partial howtos in the net, but not even one covers all. I did that, because it was in an howto... I'll try

Regarding handling of threads

2006-09-02 Thread Ravi S M
Hi I have some doubts regarding free radius server. 1) When we run server parent exits by spawning a child to handle clients requests, so during this time purify also exits but shows 95 leaks. (leak report shows from src/main/modules.c from line num 207) My doubt is whether

Re: Everything lookslike it works, but PC is not authentified

2006-09-02 Thread Alan DeKok
Alexandros Gougousoudis [EMAIL PROTECTED] wrote: vinfo-t1 is the netbiosname of the client, the realm(?) host/ comes from Windows or the AP, I don't know. Probably it breaks the cert, because the name differs and this bothers EAP/TLS. But I don't know how to handle or shorten this. Maybe

Re: Regarding handling of threads

2006-09-02 Thread Alan DeKok
Ravi S M [EMAIL PROTECTED] wrote: 1) When we run server parent exits by spawning a child to handle client's requests, so during this time purify also exits but shows 95 leaks. (leak report shows from src/main/modules.c from line num 207) If the leaks happen when the program exits, they

Proxy IP Address

2006-09-02 Thread Doug Hardie
I have a situation where all my authentication requests are proxied to me. I have 4 different groups of users that require unique local polieies and have been using a fairly complicated parsing of the Called ID phone number and a couple other fields to figure out which group a request is

Re: Proxy IP Address

2006-09-02 Thread Alan DeKok
Doug Hardie [EMAIL PROTECTED] wrote: It would be real easy to distinguish the group from the IP address that the proxy request is being sent from. However, I have not been able to find a variable that contains that information. Have I missed it? The proxies look like normal NASes to

Re: Proxy IP Address

2006-09-02 Thread Doug Hardie
On Sep 2, 2006, at 11:44, Alan DeKok wrote: Doug Hardie [EMAIL PROTECTED] wrote: It would be real easy to distinguish the group from the IP address that the proxy request is being sent from. However, I have not been able to find a variable that contains that information. Have I missed it?