Re: pap always returns noop for windows dialup authentication [solved]

2013-09-24 Thread paul trader
On Mon, 23 Sep 2013 at 22:03, Phil Mayers opined: PM:Carefully examine the two entries on line 1 and 172, determine what's PM:different, examine the unredacted data in the packets, and correct it. hi phil - thanks for the advice, i figured out that placement of the $INCLUDE statement (and

Proxy auth should supersede local auth

2013-09-24 Thread JB
Hi! Our setup utilizes custom SQL schemas and functions for authentication and authorization. We now want to add a roaming proxy for a certain realm. When a user logs in using this realm, our custom SQL authorization should be skipped because our functions and the roaming proxy are completely

Re: Active Directory authentication question

2013-09-24 Thread Roberto Carna
Dear, I'm advancing in the Freeradius + AD authenticationjust a short question: when I want to make the eapol_test tool, I get this error: # make eapol_test /usr/bin/ld: cannot find -lnl collect2: error: ld returned 1 exit status make: *** [eapol_test] Error 1 I've followed all the steps to

Re: pap always returns noop for windows dialup authentication [solved]

2013-09-24 Thread Alan DeKok
paul trader wrote: hi phil - thanks for the advice, i figured out that placement of the $INCLUDE statement (and user info in general) in the users file is important for windows authentication. strangely enough, it doesn't seem to matter for a linux dialup, though. That is a *terrible*

Re: Proxy auth should supersede local auth

2013-09-24 Thread Phil Mayers
On 24/09/13 12:25, JB wrote: At first glance, this seems to work but I wanted to know if there's a better or more common way to achieve this. Or is this completely stupid after all? (Why?) Looks fine to me; you're conditionally executing the rest of your policy based on earlier results. -

Re: Active Directory authentication question

2013-09-24 Thread Alan DeKok
Roberto Carna wrote: Dear, I'm advancing in the Freeradius + AD authenticationjust a short question: when I want to make the eapol_test tool, I get this error: # make eapol_test /usr/bin/ld: cannot find -lnl collect2: error: ld returned 1 exit status make: *** [eapol_test] Error 1

Re: Active Directory authentication question

2013-09-24 Thread John Dennis
On 09/24/2013 10:16 AM, Roberto Carna wrote: Dear, I'm advancing in the Freeradius + AD authenticationjust a short question: when I want to make the eapol_test tool, I get this error: # make eapol_test /usr/bin/ld: cannot find -lnl collect2: error: ld returned 1 exit status make: ***

RE: Active Directory authentication question

2013-09-24 Thread stefan.paetow
You need the following items on your Debian system to build eapol_test: libssl-dev, libnl1, libnl-dev :-) Stefan -Original Message- From: freeradius-users- bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users-

Comp128-1,2,3 support in EAP-SIM

2013-09-24 Thread Arran Cudbard-Bell
Looking for someone to test some new code (in master branch). Someone [1] has claimed to of decompiled a SIM validation program to figure out the algorithms for Comp128-2 and Comp128-3. The reason why this is particularly useful, is because Comp128-1 is horribly broken, and versions 2 and 3

message freeradius

2013-09-24 Thread María Teresa Mondragón Reyes
Hi everybody I need some help I'm new in this topic and I'm traying to configure a freeradius serve. I followed the instructions to configure freeradius plus remote mysql server and when put in debug mode freeradius -f -X i get this message. rad_recv: Accounting-Request packet from host

Re: Comp128-1,2,3 support in EAP-SIM

2013-09-24 Thread Arran Cudbard-Bell
Note: Comp128-4 (milenage) is still unknown (please contact one of the developers if you have access to it's specification), but just algorithms 1-3 are still useful. Actually it's not, it's published in the 3GGP standards, neat :) Arran Cudbard-Bell a.cudba...@freeradius.org

Re: Comp128-1,2,3 support in EAP-SIM

2013-09-24 Thread Arran Cudbard-Bell
On 24 Sep 2013, at 18:12, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: Note: Comp128-4 (milenage) is still unknown (please contact one of the developers if you have access to it's specification), but just algorithms 1-3 are still useful. Actually it's not, it's published in

Re: message freeradius

2013-09-24 Thread Phil Mayers
On 24/09/13 17:58, María Teresa Mondragón Reyes wrote: rad_recv: Accounting-Request packet from host 192.168.4.224 port 32769, id=157, length=285 Invalid packet code 4 sent to a proxy port from home server 192.168.4.224 port 32769 - ID 157 : IGNORED Ready to process requests. This should be

Re: message freeradius

2013-09-24 Thread Alan DeKok
María Teresa Mondragón Reyes wrote: I followed the instructions to configure freeradius plus remote mysql server and when put in debug mode freeradius -f -X i get this message. You don't need -f -X. Just -X is good enough. rad_recv: Accounting-Request packet from host 192.168.4.224 port

Re: pap always returns noop for windows dialup authentication [solved]

2013-09-24 Thread paul trader
On Tue, 24 Sep 2013 at 10:36, Alan DeKok opined: AD: It also contradicts your previous messages. You claimed you put the AD:users file entry at line one of the file. But now you talk about a AD:$INCLUDE statement. AD: AD: So... which is it? hi alan - well, i did both. at first the

Re: Active Directory authentication question

2013-09-24 Thread Alan Buxey
Or ask your distribution provider why they still provide wpa_supplicant package without eapol_test tool ;) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pap always returns noop for windows dialup authentication [solved]

2013-09-24 Thread Alan DeKok
paul trader wrote: hi alan - well, i did both. at first the $INCLUDE was put at the bottom of the users file, and there was 1 entry in the included file, at line 1. Why do you have a $INCLUDE? You did NOT mention it in your other posts. The help here presumes that you accurately