Re: Question about interaction Between Vmware View 5.1 and smsotp

2013-03-27 Thread Thomas Glanzmann
Hello Stéphane, can you please send a screenshot of your View Radius Configuration, your full configuration and the full debugging output which includes an authentication request from pap_challenge_request.pl and from View. Cheers, Thomas - List info/subscribe/unsubscribe? See

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Alan Buxey
What you are doing is actually okay (its one of those exceptions where auth-type needs to be present as the server has no idea to use krb5). I wonder if your server has been built with kerberos support? alan -- This smartphone uses free WiFi around the world with eduroam, now that's what I

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Iliya Peregoudov
From http://wiki.freeradius.org/modules/Rlm_krb5: Make sure the keytab is readable by the user that is used to run radiusd... On 27.03.2013 7:09, Jaap Winius wrote: rlm_krb5: verify_krb_v5_tgt: host key not found : Permission denied - List info/subscribe/unsubscribe? See

Re: Question about interaction Between Vmware View 5.1 and smsotp

2013-03-27 Thread Thomas Glanzmann
Hello Stéphane, It works. Thank you. Yes, the radiusd process listen on some multiples ports and i was wrong when i put the value 1812 on VMware View. for the list. The problem was that View was configured to port 1812 which does not do SMSOTP with my configuration, so we reconfigured it to

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Matthew Newton
On Wed, Mar 27, 2013 at 04:09:09AM +0100, Jaap Winius wrote: Quoting Phil Mayers p.may...@imperial.ac.uk: ... you should be using 2.2.0 or 2.2.1 when it's release, as the 2.1.10/11/12 releasea have a known security issue. I'll be sure to install 2.2.x as soon as a Debian package becomes

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Jaap Winius
Quoting Alan Buxey a.l.m.bu...@lboro.ac.uk: ... I wonder if your server has been built with kerberos support? Indeed it has. The machine in question not only runs Freeradius, but also the Kerberos KDC, kadmin server and Kerberos client software. That all works, and it still works with

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Phil Mayers
On 27/03/13 13:55, Jaap Winius wrote: Quoting Alan Buxey a.l.m.bu...@lboro.ac.uk: ... I wonder if your server has been built with kerberos support? Indeed it has. The machine in question not only runs Freeradius, but also the Kerberos KDC, kadmin server and Kerberos client software. That all

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Jaap Winius
Quoting Iliya Peregoudov iperegu...@cboss.ru: From http://wiki.freeradius.org/modules/Rlm_krb5: Make sure the keytab is readable by the user that is used to run radiusd... On 27.03.2013 7:09, Jaap Winius wrote: rlm_krb5: verify_krb_v5_tgt: host key not found : Permission denied You're

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Jaap Winius
Quoting Matthew Newton m...@leicester.ac.uk: For what it's worth, rolling your own FreeRADIUS packages for Debian is trivial. http://wiki.freeradius.org/building/Build#Building-Debian-packages Right you are! Very good indeed. Sure beats installing directly from source. Now I've got the

Re: Update reply to DHCP-Ack

2013-03-27 Thread Leo Combes
Works fine with this: if(ok){ update request { DHCP-Message-Type := DHCP-Ack } deselabs_dhcp_cpes.post-auth } See that I use update request instead of update reply. I don't know if is correct this way, but works. - List info/subscribe/unsubscribe? See

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Matthew Newton
On Wed, Mar 27, 2013 at 07:06:09PM +0100, Jaap Winius wrote: That's interesting, but without a copy of the debug output from radiusd -X, nobody will know where to start. I included what I thought was the most relevant output from 'freeradius -X', because the entire exchanges were about 12