FreeRadius authentication problems

2012-12-03 Thread Taneli Virtanen
Hello, I'm currently having some trouble with FreeRadius authentication. Posting my troubles at the Ubuntu forums didn't seem to help much, so I'm trying my hand here at the mailing lists. Here is the situation: We have recently aquired a Ruckus Zone director to manage our networks. We then

Re: I wanna post

2012-12-03 Thread Arran Cudbard-Bell
On 3 Dec 2012, at 10:49, Taneli Virtanen virtanentan...@gmail.com wrote: virtanentan...@gmail.com I want a pony, and a cessna and to eat sushi off a cute mexican girl dressed in a combination pikachu/nurses outfit. -Arran - List info/subscribe/unsubscribe? See

Re: I wanna post

2012-12-03 Thread Primož Marinšek
Please stop crapping up the mailing list. On 3 December 2012 12:12, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 3 Dec 2012, at 10:49, Taneli Virtanen virtanentan...@gmail.com wrote: virtanentan...@gmail.com I want a pony, and a cessna and to eat sushi off a cute mexican girl

Re: FreeRadius authentication problems

2012-12-03 Thread Arran Cudbard-Bell
++[pap] returns noop Found Auth-Type = Accept Auth-Type = Accept, accepting the user # Executing section post-auth from file /etc/freeradius/sites-enabled/default +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 9 to 192.168.154.12 port 1065 Finished

Re: FreeRadius authentication problems

2012-12-03 Thread Alan Buxey
Hi, Found Auth-Type = Accept Auth-Type = Accept, accepting the user RADIUS all okay I followed the plain mac auth guide to get this far, and the system sort of works, but not quite. So the configs must be out of whack somehow, but since radius doesn't give any debug info

Re: I wanna post

2012-12-03 Thread Alan Buxey
Hi, I want a pony, and a cessna and to eat sushi off a cute mexican girl dressed in a combination pikachu/nurses outfit. ...I want a way of wiping that reply from my memory...the images, the images! ;-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Redundant Freeradius

2012-12-03 Thread Fajar A. Nugraha
On Mon, Dec 3, 2012 at 6:52 PM, fknet ffkam...@conchalnet.com.br wrote: Thanks Fajar! I'm not an expertise, but I know how to work with a database, I've done this for some years. My doubt is about the replication of radacct specifically. If you're familiar with master-master replication,

Re: Redundant Freeradius

2012-12-03 Thread fknet
Thanks Fajar! I'm not an expertise, but I know how to work with a database, I've done this for some years. My doubt is about the replication of radacct specifically. I'll try to do it using the robust-proxy-accounting. best regards FAbrício Em 01/12/2012 04:15, Fajar A. Nugraha escreveu:

Re: I wanna post

2012-12-03 Thread Arran Cudbard-Bell
On 3 Dec 2012, at 11:27, Primož Marinšek pmte...@gmail.com wrote: Please stop crapping up the mailing list. But pony... :( -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius authentication problems

2012-12-03 Thread Primož Marinšek
I know a little about Ruckus. Can you SSH to the ZD and input the following enable show aaa show wlan and send me the output direclty. Maybe there is something strange there. Also tell me which FW you are using and which OS the client is using (tell me which SP if Windows) Regards On 3

Re: I wanna post

2012-12-03 Thread Scott Armitage
On 3 Dec 2012, at 11:27, Primož Marinšek pmte...@gmail.com wrote: Please stop crapping up the mailing list. Only when people stop top posting ;-) see http://freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius authentication problems

2012-12-03 Thread Taneli Virtanen
Well, I'm home right now, but tomorrow when I get back to work I'll see what I can do. Client is a Windows 7, but I can also test with XP and Win 8 clients if necessary. 2012/12/3 Primož Marinšek pmte...@gmail.com I know a little about Ruckus. Can you SSH to the ZD and input the following

RE: 802.1x Issue

2012-12-03 Thread Brekler Custodio
Have you guys hear about SecureW2 ?People from Cloudpath Networks said they can make it work MD5 hash passwords on 802.1x with TTLS-PAP.They said i can make it work aswell with EAP-TLS via certificates and PKI.Is that correct ? Have anyone tested that before ?

Re: 802.1x Issue

2012-12-03 Thread Phil Mayers
On 03/12/12 16:04, Brekler Custodio wrote: Have you guys hear about SecureW2 ? Yes. It's a supplicant (or plugin? I can't remember) with support for EAP-TTLS/PAP on older versions of windows. People from Cloudpath Networks said they can make it work MD5 hash passwords on 802.1x with

Re: 802.1x Issue

2012-12-03 Thread Alan Buxey
Hi, Have you guys hear about SecureW2 ? People from Cloudpath Networks said they can make it work MD5 hash passwords on 802.1x with TTLS-PAP. They said i can make it work aswell with EAP-TLS via certificates and PKI. Is that correct ? Have anyone tested that before ? i'll

Re: 802.1x Issue

2012-12-03 Thread Arran Cudbard-Bell
On 3 Dec 2012, at 17:17, Brekler Custodio brekle...@hotmail.com wrote: i'll repeat what was already said in this thread: Old Windows systems need an extra supplicant to do other forms of EAP such as EAP-TTLS/PAP - eg open1X or SecureW2 - Windows 8 now natively supports such EAP

Re: 802.1x Issue

2012-12-03 Thread Alan Buxey
Hi, So would you recommend ? Your opinion above looks like you wouldnt do that, since it may not work. Kinda complicated, since we are an university, and need to work with everyone. we are a university and we avoid using any extra programs/utils to perform such duties (especially as

Re: 802.1x Issue

2012-12-03 Thread Arran Cudbard-Bell
On 3 Dec 2012, at 17:31, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, So would you recommend ? Your opinion above looks like you wouldnt do that, since it may not work. Kinda complicated, since we are an university, and need to work with everyone. we are a university and we avoid

Re: 802.1x Issue

2012-12-03 Thread Alan Buxey
Hi, Most times you will be able to get the native supplicant working given enough prodding, but prodding on a large scale is unfeasable without some kind of automated tool, because students are really really bad at following instructions. oh yes, I agree with that - configuration

log detail

2012-12-03 Thread studyfordo
Hi, all if i do the following set in /site-enable/default file, I want to know whether i can see such as when user logout,login failure,user login time... accounting { detail daily sql sql_log exec (for exec-program and exec-program-wait) attr_filter.accounting_response }

Re: share variables in perl script (rlm_perl)

2012-12-03 Thread Iliya Peregoudov
Arran Cudbard-Bell wrote: On 29 Nov 2012, at 22:14, laurent.fe...@free.fr wrote: Hello, In a perl script (where authorize() and authenticate() are defined), i was able to set a global variable. when a radius request comes, the script may modify the variable, and the next request has the new

Re: FreeRadius authentication problems

2012-12-03 Thread Taneli Virtanen
User[client mac address] fails authentication too many times in a row when joining WLAN[opetus-x/opetusx] at AP[ap1https://192.168.154.12/admin/mon_ap.jsp?n=c4:01:7c:1a:50:60]. User[client mac address] is temporarily blocked from the system for [30 seconds]. Ok, after doing some searching I found