Hi All,
Thanks for the reply. I have setup EAP. Even then It was not working.



On Wed, 2003-12-17 at 19:00, [EMAIL PROTECTED]
wrote:
> Send Freeradius-Users mailing list submissions to
>       [EMAIL PROTECTED]
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>       http://lists.cistron.nl/mailman/listinfo/freeradius-users
> or, via email, send a message with subject or body 'help' to
>       [EMAIL PROTECTED]
> 
> You can reach the person managing the list at
>       [EMAIL PROTECTED]
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
> 
> 
> Today's Topics:
> 
>    1. RE: There are no DB handles to use! skipped 0, tried to connect 0 (Ripunjay 
> Bararia)
>    2. Please help me (It is very Urgent) (Shashidhara S Bapat)
>    3. Re: PEAP problem - HELP PLEASE ([EMAIL PROTECTED])
>    4. Problem with rlm_ippool & PW_STATUS_ACCOUNTING_ON/OFF (suxiang)
>    5. migrate PAP to CHAP for LDAP (Rohaizam Abu Bakar)
>    6. Re: Please help me (It is very Urgent) (Julius Igugu)
>    7. CVP3000 VSA Dictionary (Spetzler, Arne (DZ-SH))
> 
> --__--__--
> 
> Message: 1
> From: "Ripunjay Bararia" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: RE: There are no DB handles to use! skipped 0, tried to connect 0
> Date: Wed, 17 Dec 2003 11:53:39 +0530
> Reply-To: [EMAIL PROTECTED]
> 
> hi,
> thanks for the great feedback,
> 
> now all tables are InnoDB
> everything was working fine, till I upgraded to the latest CVS src of
> 16-Dec-2003, and ran ground....
> just to check
> now the radius keeps on dying on me.. have not been able to check it out but
> 
> some of the interesting thing that I found in radiusd.log
> 
> Wed Dec 17 01:29:50 2003 : Error: Dropping conflicting packet from client
> XXXXXXXXX:52730 - ID: 234 due to unfinished request 76121
> 
> above message repeating about 40-50 times and then the radiusd died
> 
> now I have downgraded to 0.9.3 and trying to find out if the problem still
> exists
> no changes were done in any configuration files
> 
> Ripunjay
> 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Kostas
> > Kalevras
> > Sent: Tuesday, December 16, 2003 1:53 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: There are no DB handles to use! skipped 0, tried to connect
> > 0
> >
> >
> > On Tue, 16 Dec 2003, Ripunjay Bararia wrote:
> >
> > > thanks Alan, for the comment,
> > >
> > > My SQL server and FR are running on the same box,
> > > will separating them be a good idea,
> > > I need to do AAA for about 1500 concurrent users
> > > what kind of a machine would I need for FR
> > > and how much load will it put on the MySQL server
> > > so that I can scale both of the machines accordingly
> > >
> > > currently both are running on
> > >
> > > P-IV 2.6
> > > Intel 856 based board
> > > 512MB DDR 266Mhz
> > > 9.1GB X 2 SCSI disks
> >
> > The hardware is more than adequate. And there's no need to separate them.
> >
> > Read doc/tuning_guide and especially the section on the sql module.
> > In general for mysql EXPLAIN SELECT is your friend. Run all the
> > SELECT queries
> > (and also transform all the UPDATE queries to corresponding
> > SELECT queries)
> > through an EXPLAIN SELECT statement to see how many candidate
> > rows are there.
> > Example outputs:
> >
> > mysql> explain select * from radacct where acctstoptime is null;
> > +---------+------+---------------+--------------+---------+-------
> > +------+-------------+
> > | table   | type | possible_keys | key          | key_len | ref
> > | rows | Extra
> > |
> > +---------+------+---------------+--------------+---------+-------
> > +------+-------------+
> > | radacct | ref  | AcctStopTime  | AcctStopTime |       8 | const
> > |  315 | Using
> >
> > ^^^^^^^^^^^^^
> > where |
> > +---------+------+---------------+--------------+---------+-------
> > +------+-------------+
> > 1 row in set (0.02 sec)
> >
> > mysql> explain select * from radacct where acctstoptime =
> > '2003-12-15 21:00:00';
> > +---------+------+---------------+--------------+---------+-------
> > +------+-------------+
> > | table   | type | possible_keys | key          | key_len | ref
> > | rows | Extra
> > |
> > +---------+------+---------------+--------------+---------+-------
> > +------+-------------+
> > | radacct | ref  | AcctStopTime  | AcctStopTime |       8 | const
> > |    1 | Using
> >
> > ^^^^^^^^^^^^^
> > where |
> > +---------+------+---------------+--------------+---------+-------
> > +------+-------------+
> >
> >
> > The rows and possible_keys columns are important. If you see that
> > the candidate
> > rows are more than a few, or that an index is never used (for example:
> >
> > mysql> explain select * from radacct where acctterminatecause =
> > 'User-Request';
> > +---------+------+---------------+------+---------+------+--------
> > +-------------+
> > | table   | type | possible_keys | key  | key_len | ref  | rows   | Extra
> > |
> > +---------+------+---------------+------+---------+------+--------
> > +-------------+
> > | radacct | ALL  | NULL          | NULL |    NULL | NULL | 971518
> > | Using where
> > |
> > +---------+------+---------------+------+---------+------+--------
> > +-------------+
> > 1 row in set (0.00 sec)
> >
> > then you should either rearrange your queries to use a proper
> > index (like using
> > the acctuniqueid column in the accounting_stop query) or add a
> > corresponding
> > index.
> >
> > If you are using MySQL 3.X maybe you should think of moving to
> > 4.X and to the
> > InnoDB tables (instead of MyISAM which have global instead of per
> > row locking).
> >
> > Hope the above was helpful.
> >
> > >
> > >
> > > thanks
> > > Ripunjay Bararia
> > >
> > > > -----Original Message-----
> > > > From: [EMAIL PROTECTED]
> > > > [mailto:[EMAIL PROTECTED] Behalf Of
> > Alan DeKok
> > > > Sent: Monday, December 15, 2003 10:19 PM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Re: There are no DB handles to use! skipped 0, tried
> > to connect
> > > > 0
> > > >
> > > >
> > > > "Ripunjay Bararia" <[EMAIL PROTECTED]> wrote:
> > > > > --- radius.log begin ---
> > > > > Mon Dec 15 12:30:23 2003 : Info: rlm_sql (sql): There are no DB
> > > > handles to
> > > > > use! skipped 0, tried to connect 0
> > > >
> > > >   Find out why your SQL database is slow.
> > > >
> > > >   Alan DeKok.
> > > >
> > > > -
> > > > List info/subscribe/unsubscribe? See
> > > > http://www.freeradius.org/list/users.html
> > > >
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> 
> --
> Kostas Kalevras               Network Operations Center
> [EMAIL PROTECTED]     National Technical University of Athens, Greece
> Work Phone:           +30 210 7721861
> 'Go back to the shadow'       Gandalf
> 
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> 
> 
> --__--__--
> 
> Message: 2
> Subject: Please help me (It is very Urgent)
> From: Shashidhara S Bapat <[EMAIL PROTECTED]>
> To: Free Radius Mailing group <[EMAIL PROTECTED]>
> Organization: Envision Network Technologies Private ltd
> Date: 17 Dec 2003 12:43:09 +0530
> Reply-To: [EMAIL PROTECTED]
> 
> Hello All,
> I am a new user to this mailing list. I am using Radius server to see
> how does it authenticate.
> I am running freeradius on Linux machine and it is connected to a AP600
> (Access Point) through which users are connected. Users are running on
> Windows 2000 Professional. Following are the configuration I have done:
> 
> file - "clients.conf":
> # 192.168.100.7 is the IP address of my Access Point (wireless) (AP600)
> # which supports RADIUS.
> 192.168.100.7/24 {
>         secret          = abcde
>         shortname       = AP-600LAB
> }
> 
> file - "users":
> # TECH4 is the name of the wireless client (machine name) which is 
> # running on Windows.
> TECH4           Auth-Type := EAP, User-Password == "password"
>                 Reply-Message = "Hello, %u"
> 
> 
> I think the problem is with the 'user' part. I dont know which
> 'Auth-Type' I have to use. Please help me in my settings.
> Please let me know what modifications I have to do to make it working.
> 
> FYI: The 'radtest' is working fine.
> 
> -- 
> =-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=
> --Best Regards,
>   Shashi.
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> 
> 
> 
> --__--__--
> 
> Message: 3
> Date: Wed, 17 Dec 2003 09:36:57 +0100 (MET)
> Subject: Re: PEAP problem - HELP PLEASE
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Reply-To: [EMAIL PROTECTED]
> 
> Thanks everyone for your help,
> yes Brian, you are right, i made a mistake when I wrote my users entry in
> the last mail! I wanted to say:
> 
> ourson     User-password = "testtest"
> 
> In fact your right for the = which is better to be renplaced by == here.
> But in reallity, I didn't put any space on my user paswword....
> I tried to put this entry:
> 
> ourson          User-Password == "a"
>                 Reply-Message = " YYYYYEEEESSSSSSSSSS, %u"
> 
> With this, I tought that if authentication were bad, my reply message
> won't appear, isn't it right?
> But in fact, I have already the same error, but in response I have my
> reply message! It's very strange.
> here are my last logs :
> 
> ....
>  rad_check_password:  Found Auth-Type EAP
> auth: type "EAP"
> modcall: entering group authenticate for request 0
> rlm_eap: Identity does not match User-Name, authentication failed.
>   rlm_eap: Failed in handler
>   modcall[authenticate]: module "eap" returns invalid for request 0
> modcall: group authenticate returns invalid for request 0
> auth: Failed to validate the user.
> Login incorrect: [ourson/<no User-Password attribute>] (from client AP1
> port 37 cli 000af49c507f)Delaying request 0 for 1 seconds
> Finished request 0
> Going to the next request
> --- Walking the entire request list ---
> Waking up in 1 seconds...
> --- Walking the entire request list ---
> Waking up in 1 seconds...
> --- Walking the entire request list ---
> Sending Access-Reject of id 113 to 192.168.1.2:3186
>         Reply-Message = " yyyyyyyyyyyyyyyyyyyyyyyyyyyyyeeeeeessssssssss!!!!"
> Waking up in 4 seconds...
> --- Walking the entire request list ---
> Cleaning up request 0 ID 113 with timestamp 3fdf0ed2
> Nothing to do.  Sleeping until we see a request.
> 
> I really don't understand how radiusd can say : "Identity does not match
> User-Name, authentication failed" and [ourson/<no User-Password
> attribute>] ... It seems that no password is sent from my supplicant..??
> 
> I tried to do radtest from another unix machine and it works :
> 
> ...
> rad_recv: Access-Request packet from host 192.168.1.1:32769, id=85, length=58
>         User-Name = "ourson"
>         User-Password = "a"
>         NAS-IP-Address = 255.255.255.255
>         NAS-Port = 10
> modcall: entering group authorize for request 6
>   modcall[authorize]: module "preprocess" returns ok for request 6
>   modcall[authorize]: module "chap" returns noop for request 6
>   rlm_eap: No EAP-Message, not doing EAP
>   modcall[authorize]: module "eap" returns noop for request 6
>     rlm_realm: No '@' in User-Name = "ourson", looking up realm NULL
>     rlm_realm: No such realm "NULL"
>   modcall[authorize]: module "suffix" returns noop for request 6
>     users: Matched ourson at 97
>   modcall[authorize]: module "files" returns ok for request 6
>   modcall[authorize]: module "mschap" returns noop for request 6
> modcall: group authorize returns ok for request 6
> auth: type Local
> auth: user supplied User-Password matches local User-Password
> radius_xlat:  ' YYYYYEEEESSSSSSSSSS, ourson'
> Sending Access-Accept of id 85 to 192.168.1.1:32769
>         Reply-Message = " YYYYYEEEESSSSSSSSSS, ourson"
> Finished request 6
> Going to the next request
> --- Walking the entire request list ---
> Cleaning up request 5 ID 170 with timestamp 3fdf22be
> Waking up in 6 seconds...
> 
> I think that freeradius is well configured and it must be a windows or
> Access Point problem, don't you think so?
> Please if someone knows or just have an idea, tell me !!
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 4
> Date: Wed, 17 Dec 2003 16:43:39 +0800
> From: suxiang <[EMAIL PROTECTED]>
> To:  [EMAIL PROTECTED]
> Subject: Problem with rlm_ippool & PW_STATUS_ACCOUNTING_ON/OFF
> Reply-To: [EMAIL PROTECTED]
> 
> When radiusd received a request of accounting on/off from NAS, ippool
> cannot free IP that have been allocated to radclient via NAS.
> I see the file rlm_ippool.c and find it doesn't deal with this request
> of accounting on/off.
> Why? And How can I free those pathetic IP?
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 5
> From: "Rohaizam Abu Bakar" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: migrate PAP to CHAP for LDAP
> Date: Wed, 17 Dec 2003 18:21:12 +0800
> Reply-To: [EMAIL PROTECTED]
> 
> This is a multi-part message in MIME format.
> 
> ------=_NextPart_000_0097_01C3C4CA.8CF7E500
> Content-Type: text/plain;
>       charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
> 
> How can i migrate PAP authentication method to CHAP using existing LDAP =
> data ??
> 
> Tested below:
> 
> - In radiusd.conf under ldap module:
> 
> password_header =3D "{clear}"
> password_attribute =3D radiusCHAPPassword         [mapped to =
> CHAP-Password]
>         =3D> added radiusCHAPPassword in LDAP entry=20
> 
> 
> Although at first its detect Auth-Type =3D CHAP...  then rlm_ldap still =
> complaining needing "User-Password"
> 
> 
> 
> 
> ######### debug MODE####################
> 
> rad_recv: Access-Request packet from host 10.1.1.1:16941, id=3D30, =
> length=3D51
>         User-Name =3D "haizamchap"
>         CHAP-Password =3D 0xf47dcdd9b0c307fc682539df2704ac6a20
> modcall: entering group authorize for request 0
>   modcall[authorize]: module "preprocess" returns ok for request 0
>   rlm_chap: Setting 'Auth-Type :=3D CHAP'
>   modcall[authorize]: module "chap" returns ok for request 0
>     rlm_realm: No '@' in User-Name =3D "haizamchap", looking up realm =
> NULL
>     rlm_realm: Found realm "NULL"
>     rlm_realm: Adding Stripped-User-Name =3D "haizamchap"
>     rlm_realm: Proxying request from user haizamchap to realm NULL
>     rlm_realm: Adding Realm =3D "NULL"
>     rlm_realm: Authentication realm is LOCAL.
>   modcall[authorize]: module "suffix" returns noop for request 0
>     users: Matched DEFAULT at 43
>   modcall[authorize]: module "files" returns ok for request 0
>   modcall[authorize]: module "mschap" returns noop for request 0
> rlm_ldap: - authorize
> rlm_ldap: performing user authorization for haizamchap
> radius_xlat:  '(uid=3Dhaizamchap)'
> radius_xlat:  'ou=3DPeople,dc=3Djaring,dc=3Dmy'
> ldap_get_conn: Got Id: 0
> rlm_ldap: attempting LDAP reconnection
> rlm_ldap: (re)connect to 127.0.0.1:389, authentication 0
> rlm_ldap: bind as =
> cn=3DSysadmin,ou=3DApplications,dc=3Djaring,dc=3Dmy/xxxxxxxx to =
> 127.0.0.1:389
> rlm_ldap: waiting for bind result ...
> rlm_ldap: performing search in ou=3DPeople,dc=3Djaring,dc=3Dmy, with =
> filter (uid=3Dhaizamchap)
> rlm_ldap: checking if remote access for haizamchap is allowed by =
> dialupAccess
> rlm_ldap: Password header not found in password haizamchap for user =
> haizamchap
> rlm_ldap: looking for check items in directory...
> rlm_ldap: Adding radiusCHAPPassword as CHAP-Password, value haizamchap & =
> op=3D21
> rlm_ldap: looking for reply items in directory...
> rlm_ldap: Adding radiusFramedCompression as Framed-Compression, value =
> Van-Jacobson-TCP-IP & op=3D11
> rlm_ldap: Adding radiusFramedMTU as Framed-MTU, value 1500 & op=3D11
> rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & =
> op=3D11
> rlm_ldap: Adding radiusServiceType as Service-Type, value Framed-User & =
> op=3D11
> rlm_ldap: user haizamchap authorized to use remote access
> ldap_release_conn: Release Id: 0
>   modcall[authorize]: module "ldap1" returns ok for request 0
> modcall: group authorize returns ok for request 0
>   rad_check_password:  Found Auth-Type LDAP
> auth: type "LDAP"
> modcall: entering group Auth-Type for request 0
> rlm_ldap: - authenticate
> rlm_ldap: Attribute "User-Password" is required for authentication. =
> Cannot use "CHAP-Password".
>   modcall[authenticate]: module "ldap1" returns invalid for request 0
> modcall: group Auth-Type returns invalid for request 0
> auth: Failed to validate the user.
> 
> 
> 
> 
> --haizam
> ------=_NextPart_000_0097_01C3C4CA.8CF7E500
> Content-Type: text/html;
>       charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META http-equiv=3DContent-Type content=3D"text/html; =
> charset=3Diso-8859-1">
> <META content=3D"MSHTML 6.00.2800.1126" name=3DGENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=3D#ffffff>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>How can i migrate PAP authentication =
> method to CHAP=20
> using existing LDAP data ??</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>Tested below:</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>- In radiusd.conf under ldap =
> module:</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>password_header =3D =
> "{clear}"<BR>password_attribute =3D=20
> radiusCHAPPassword &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; [mapped to=20
> CHAP-Password]</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; =
> =3D&gt; added=20
> radiusCHAPPassword in LDAP entry </FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>Although at first its detect Auth-Type =
> =3D=20
> CHAP...&nbsp; then rlm_ldap still complaining needing=20
> "User-Password"</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>######### debug=20
> MODE####################</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>rad_recv: Access-Request packet from =
> host=20
> 10.1.1.1:16941, id=3D30, =
> length=3D51<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> User-Name =3D "haizamchap"<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
> 
> CHAP-Password =3D 0xf47dcdd9b0c307fc682539df2704ac6a20<BR>modcall: =
> entering group=20
> authorize for request 0<BR>&nbsp; modcall[authorize]: module =
> "preprocess"=20
> returns ok for request 0<BR>&nbsp; rlm_chap: Setting 'Auth-Type :=3D=20
> CHAP'<BR>&nbsp; modcall[authorize]: module "chap" returns ok for request =
> 
> 0<BR>&nbsp;&nbsp;&nbsp; rlm_realm: No <A href=3D"mailto:'@'">'@'</A> in =
> User-Name=20
> =3D "haizamchap", looking up realm NULL<BR>&nbsp;&nbsp;&nbsp; rlm_realm: =
> Found=20
> realm "NULL"<BR>&nbsp;&nbsp;&nbsp; rlm_realm: Adding Stripped-User-Name =
> =3D=20
> "haizamchap"<BR>&nbsp;&nbsp;&nbsp; rlm_realm: Proxying request from user =
> 
> haizamchap to realm NULL<BR>&nbsp;&nbsp;&nbsp; rlm_realm: Adding Realm =
> =3D=20
> "NULL"<BR>&nbsp;&nbsp;&nbsp; rlm_realm: Authentication realm is =
> LOCAL.<BR>&nbsp;=20
> modcall[authorize]: module "suffix" returns noop for request=20
> 0<BR>&nbsp;&nbsp;&nbsp; users: Matched DEFAULT at 43<BR>&nbsp;=20
> modcall[authorize]: module "files" returns ok for request 0<BR>&nbsp;=20
> modcall[authorize]: module "mschap" returns noop for request =
> 0<BR>rlm_ldap: -=20
> authorize<BR>rlm_ldap: performing user authorization for=20
> haizamchap<BR>radius_xlat:&nbsp; =
> '(uid=3Dhaizamchap)'<BR>radius_xlat:&nbsp;=20
> 'ou=3DPeople,dc=3Djaring,dc=3Dmy'<BR>ldap_get_conn: Got Id: =
> 0<BR>rlm_ldap: attempting=20
> LDAP reconnection<BR>rlm_ldap: (re)connect to 127.0.0.1:389, =
> authentication=20
> 0<BR>rlm_ldap: bind as =
> cn=3DSysadmin,ou=3DApplications,dc=3Djaring,dc=3Dmy/xxxxxxxx to=20
> 127.0.0.1:389<BR>rlm_ldap: waiting for bind result ...<BR>rlm_ldap: =
> performing=20
> search in ou=3DPeople,dc=3Djaring,dc=3Dmy, with filter =
> (uid=3Dhaizamchap)<BR>rlm_ldap:=20
> checking if remote access for haizamchap is allowed by =
> dialupAccess<BR>rlm_ldap:=20
> Password header not found in password haizamchap for user=20
> haizamchap<BR>rlm_ldap: looking for check items in =
> directory...<BR>rlm_ldap:=20
> Adding radiusCHAPPassword as CHAP-Password, value haizamchap &amp;=20
> op=3D21<BR>rlm_ldap: looking for reply items in =
> directory...<BR>rlm_ldap: Adding=20
> radiusFramedCompression as Framed-Compression, value Van-Jacobson-TCP-IP =
> &amp;=20
> op=3D11<BR>rlm_ldap: Adding radiusFramedMTU as Framed-MTU, value 1500 =
> &amp;=20
> op=3D11<BR>rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, =
> value PPP=20
> &amp; op=3D11<BR>rlm_ldap: Adding radiusServiceType as Service-Type, =
> value=20
> Framed-User &amp; op=3D11<BR>rlm_ldap: user haizamchap authorized to use =
> remote=20
> access<BR>ldap_release_conn: Release Id: 0<BR>&nbsp; modcall[authorize]: =
> module=20
> "ldap1" returns ok for request 0<BR>modcall: group authorize returns ok =
> for=20
> request 0<BR>&nbsp; rad_check_password:&nbsp; Found Auth-Type =
> LDAP<BR>auth: type=20
> "LDAP"<BR>modcall: entering group Auth-Type for request 0<BR>rlm_ldap: - =
> 
> authenticate<BR>rlm_ldap: Attribute "User-Password" is required for=20
> authentication. Cannot use "CHAP-Password".<BR>&nbsp; =
> modcall[authenticate]:=20
> module "ldap1" returns invalid for request 0<BR>modcall: group Auth-Type =
> returns=20
> invalid for request 0<BR>auth: Failed to validate the user.</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>--haizam</FONT></DIV></BODY></HTML>
> 
> ------=_NextPart_000_0097_01C3C4CA.8CF7E500--
> 
> 
> 
> 
> --__--__--
> 
> Message: 6
> Date: Wed, 17 Dec 2003 02:36:06 -0800 (PST)
> From: Julius Igugu <[EMAIL PROTECTED]>
> Subject: Re: Please help me (It is very Urgent)
> To: [EMAIL PROTECTED]
> Reply-To: [EMAIL PROTECTED]
> 
> --0-1052063747-1071657366=:64870
> Content-Type: text/plain; charset=us-ascii
> 
> did you setup eap?
> 
> Shashidhara S Bapat <[EMAIL PROTECTED]> wrote:
> Hello All,
> I am a new user to this mailing list. I am using Radius server to see
> how does it authenticate.
> I am running freeradius on Linux machine and it is connected to a AP600
> (Access Point) through which users are connected. Users are running on
> Windows 2000 Professional. Following are the configuration I have done:
> 
> file - "clients.conf":
> # 192.168.100.7 is the IP address of my Access Point (wireless) (AP600)
> # which supports RADIUS.
> 192.168.100.7/24 {
> secret = abcde
> shortname = AP-600LAB
> }
> 
> file - "users":
> # TECH4 is the name of the wireless client (machine name) which is 
> # running on Windows.
> TECH4 Auth-Type := EAP, User-Password == "password"
> Reply-Message = "Hello, %u"
> 
> 
> I think the problem is with the 'user' part. I dont know which
> 'Auth-Type' I have to use. Please help me in my settings.
> Please let me know what modifications I have to do to make it working.
> 
> FYI: The 'radtest' is working fine.
-- 
=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=
--Best Regards,
  Shashi.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to