Re: eap md5 and cisco 1250 ap?

2008-10-11 Thread Alan DeKok
Jonathan D. Proulx wrote: :so upward (to 2.x) and onward and straight to ttls. Are you using the 2.x configuration files, or did the install process leave the 1.x versions in place? I seem to have actually gone backward here. Local radtest is now failing with the fresh 2.1.1 install. all

Re: ldap/krb5 auth and access point Authentication methods ?

2008-10-11 Thread Alan DeKok
FM wrote: I'd like to use freeradius to auth. our users. I read that freeradius can use openldap and kerberos, so i suppose I will setup these for auth. Maybe. You are constrained by the limitations of the authentication protocols. i.e. FreeRADIUS can do a lot, but only if the

Re: problem installing freeradius

2008-10-11 Thread Alan DeKok
Tomas D wrote: I'm trying to fetch radius from git and install it on my ubuntu server. I'm having some issues compiling radius... Here's what I'm doing; ... frs_dhcp.c:183: error: 'RAD_LISTEN_DHCP' undeclared here (not in a function) OK. The module didn't have the appropriate wrappers.

Re: ldap/krb5 auth and access point Authentication methods ?

2008-10-11 Thread A . L . M . Buxey
Hi, I'd like to use freeradius to auth. our users. I read that freeradius can use openldap and kerberos, so i suppose I will setup these for auth. - or just use one of them - decide which one to use and ensure clients are configured correctly Most of my Wi-Fi users will be Windows/Mac Os and

Re: eap md5 and cisco 1250 ap?

2008-10-11 Thread Jonathan D. Proulx
On Sat, Oct 11, 2008 at 07:59:11AM +0200, Alan DeKok wrote: :Jonathan D. Proulx wrote: : :so upward (to 2.x) and onward and straight to ttls. : : Are you using the 2.x configuration files, or did the install process :leave the 1.x versions in place? The 1.x configs were in /etc/freeradius, the

Re: eap md5 and cisco 1250 ap?

2008-10-11 Thread A . L . M . Buxey
hi, if you just install eg 2.1.1 straight over 2.0.5 then it will not have changed or tocuhed any of your existing/modified files in your raddb directory. if you want to 'make sure' then 'mv raddb raddb.old', 'make install' then, edit the raddb/* files again to what you need and re-run. alan -

Re: eap md5 and cisco 1250 ap?

2008-10-11 Thread Jonathan D. Proulx
On Sat, Oct 11, 2008 at 03:10:31PM +0100, [EMAIL PROTECTED] wrote: :hi, : :if you just install eg 2.1.1 straight over 2.0.5 :then it will not have changed or tocuhed any of :your existing/modified files in your raddb directory. this is a fresh install, the previous version was 1.1.7 and located

Beginner Help Compile.

2008-10-11 Thread Jack Schneider
Hi, All I am about to compile per (freeradius 2.1.1 server) INSTALL doc on my Debian Lenny-AMD64 uptodate system. I have seen Debian put things in non-standard places. Are there any gotcha's I should be aware of -- What else should I read first? TIA, Jack - List

Re: eap md5 and cisco 1250 ap?

2008-10-11 Thread A . L . M . Buxey
Hi, add user # grep jon /usr/local/etc/raddb/usersjon Cleartext-Password := password hmmm. try editing modules/pap and change auto_header to be 'yes' alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FR 2.1.1 compile failed - Solaris 5.10 x86 64-bit

2008-10-11 Thread Chris Howley
All, FR2.1.1, Solaris 5.10 x86 64-bit ./configure --enable-developer --without-rlm_perl bash-3.00# gcc -v Reading specs from /usr/sfw/lib/gcc/i386-pc-solaris2.10/3.4.3/specs Configured with: /builds/sfw10-gate/usr/src/cmd/gcc/gcc-3.4.3/configure --prefix=/usr/sfw --with-as=/usr/sfw/bin/gas

Re: eap md5 and cisco 1250 ap?

2008-10-11 Thread Jonathan D. Proulx
On Sat, Oct 11, 2008 at 05:24:12PM +0100, [EMAIL PROTECTED] wrote: :hmmm. try editing modules/pap : :and change auto_header to be 'yes' I think I'm going to bail out on 2.1.1 for now, I reinstalled 1.1.7 generated the requisite keys and it works. I'll revisit 2.x after my current

Asking freeradius for the status

2008-10-11 Thread Michael Schwartzkopff
Hi, I am just digging into the status server of freeradius. I read man radclient and the comments of status server. But it seems I do nat have the right clue: 1) Copying the example from the man pages of radclient: $ echo Message-Authenticator = 0x00 | radclient localhost sta tus testing123

Re: Regex remove realm from username

2008-10-11 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex French wrote: 2008/10/10 Eric Martell [EMAIL PROTECTED]: Hi.. I searched thru the forums but not getting the right username after using regex. The request I am getting is : [EMAIL PROTECTED] and I need to strip everything after @ and

Re: eap md5 and cisco 1250 ap?

2008-10-11 Thread Alan DeKok
Jonathan D. Proulx wrote: I'm still seeing the odd PAP config, which is perhaps killing the athentication (noops removed for brevity): rad_recv: Access-Request packet from host 127.0.0.1 port 35273, id=127, length=55 User-Name = jon ... ++[unix] returns updated jon is in /etc/passwd.

Re: Asking freeradius for the status

2008-10-11 Thread Alan DeKok
Michael Schwartzkopff wrote: $ echo Message-Authenticator = 0x00 | radclient localhost sta tus testing123 results in: Received response ID 137, code 2, length = 20 and not, as described in the manual. What is my error? Nothing. The man page is wrong. The Reply-Message was removed quite