Problems with using Customize table schema

2008-03-05 Thread johnson elangbam
hi, I am using Free radius 2.0 and Ms Sql 2000.I need to used my own customised table schema rather than the default table which comes along with the radius server in schema.conf. To do so is it necessary to connect through rlm_perl and deactivate the sql module in the sites-enabled/default.

Re: NTLM in MSCHAP

2008-03-05 Thread Alan DeKok
David Hláčik wrote: Hi, I have working configuration of PPTPD (Windows VPN) trought Radius to LDAP stored users. The think is ,that it accepts only plain text stored passwords in ldap becouse of very well known NT-Password for MSCHAPv2 ... Exec-Program: /usr/bin/ntlm_auth --request-nt-key

Can't compile on Centos 5.1 x86_64

2008-03-05 Thread Sergio Belkin
Hi, I can't compile freeradius-2.0.2 on Centos 5.1 x86_64. It outputs: /usr/lib/libltdl.so: could not read symbols: File in wrong format collect2: ld returned 1 exit status I tried with no success with export CFLAGS=-m64 any idea? thanks in advance!! -- -- Open Kairos

TTLS and TLS

2008-03-05 Thread Wolfgang Burger
Hi again, I am trying to configure FreeRadius to require a Certificate AND a username/password to accept a User. My clients are Macs (10.4.11). I want TTLS to require a certificate so I've set: EAP-TLS-Require-Client-Cert := Yes in the control items of the request. If I configure the

Re: TTLS and TLS

2008-03-05 Thread Wolfgang Burger
Am 05.03.2008 um 16:35 schrieb Wolfgang Burger: Hi again, Hi stupid me, The Client does'nt send the certificate. My wild speculation, which is a pure guess of a newbie: Is the Client in some sort of TTLS-Mode, where he can't send a client-certificate, because Sending Access-Challenge

Re: TTLS and TLS

2008-03-05 Thread Alan DeKok
Wolfgang Burger wrote: I am trying to configure FreeRadius to require a Certificate AND a username/password to accept a User. My clients are Macs (10.4.11). I want TTLS to require a certificate so I've set: EAP-TLS-Require-Client-Cert := Yes in the control items of the request. That

RE: ClearText-Password?

2008-03-05 Thread Dean, Barry
Hi, rad_recv: Access-Request packet from host 138.253.XXX.XXX port 47032, id=195, length=49 User-Name = user User-Password = passwd NAS-IP-Address = 138.253.XXX.XXX There. No MS-CHAP-Challenge. You are not supposed to process this packet with the rlm_mschap module. Why

about log users

2008-03-05 Thread Héctor Isidro Sánchez Medina
Hallow Mister, I´m network admin I need to know how edit de src files of freeradius-1.0.x to not log certains login matching with my username ´s friends, please help me in that. excuse my poor english. thanks before it.

Re: TTLS and TLS

2008-03-05 Thread Wolfgang Burger
Am 05.03.2008 um 17:13 schrieb Alan DeKok: Wolfgang Burger wrote: I am trying to configure FreeRadius to require a Certificate AND a username/password to accept a User. My clients are Macs (10.4.11). I want TTLS to require a certificate so I've set: EAP-TLS-Require-Client-Cert := Yes in

SQL setting auth-type return codes

2008-03-05 Thread Phil Mayers
I was going to knock out a quick concept patch but I see it's not a trivial patch; before I make the effort to code it I thought I'd check: It seems useful for the sql module to set the return code to RLM_MODULE_REJECT if the Auth-Type gets set to reject - the specific use case I have is an

Re: Can't compile on Centos 5.1 x86_64

2008-03-05 Thread Sergio Belkin
2008/3/5, Matt Garretson [EMAIL PROTECTED]: Sergio Belkin wrote: I can't compile freeradius-2.0.2 on Centos 5.1 x86_64. It outputs: /usr/lib/libltdl.so: could not read symbols: File in wrong format collect2: ld returned 1 exit status You might try using your system's own libtool. Try

Re: SQL setting auth-type return codes

2008-03-05 Thread Alan DeKok
Phil Mayers wrote: I was going to knock out a quick concept patch but I see it's not a trivial patch; before I make the effort to code it I thought I'd check: It seems useful for the sql module to set the return code to RLM_MODULE_REJECT if the Auth-Type gets set to reject - the specific use

Re: Can't compile on Centos 5.1 x86_64

2008-03-05 Thread Donny Jekels
That because its a 32bit file; change the libs to /usr/lib64 On 3/5/08, Sergio Belkin [EMAIL PROTECTED] wrote: Hi, I can't compile freeradius-2.0.2 on Centos 5.1 x86_64. It outputs: /usr/lib/libltdl.so: could not read symbols: File in wrong format collect2: ld returned 1 exit status I

EAP-TTL Proxy LDAP

2008-03-05 Thread amarquez001
At first, goodevening to eveone. I am simulating an authentication plataform. The situation is this one: PC 1: Supplicant.Access by networkManager. The crendential are: login= [EMAIL PROTECTED] passwd=david EAP=TTLS phase2=PAP PC 2: HostAP. It's correctly configured and works fine. PC 3: Proxy

Re: EAP-TTL Proxy LDAP

2008-03-05 Thread A . L . M . Buxey
Hi, PC 1: Supplicant.Access by networkManager. The crendential are: login= [EMAIL PROTECTED] passwd=david EAP=TTLS phase2=PAP PC 2: HostAP. It's correctly configured and works fine. PC 3: Proxy Freeradius. It has got a realm i2t defined, and proxyes the access requests to de PC4. PC 4:

about logs freeradius

2008-03-05 Thread Héctor Isidro Sánchez Medina
Hallow everyone, I´m network admin I need to know how edit de src files of freeradius-1.0.x to not log certains login matching with my username ´s friends, please help me in that. excuse my poor english. thanks before it. __ LLama

Re: Problems with using Customize table schema

2008-03-05 Thread Ivan Kalik
hi, I am using Free radius 2.0 and Ms Sql 2000.I need to used my own customised table schema rather than the default table which comes along with the radius server in schema.conf. To do so is it necessary to connect through rlm_perl and deactivate the sql module in the sites-enabled/default.

Re: Can't compile on Centos 5.1 x86_64

2008-03-05 Thread Matt Garretson
Sergio Belkin wrote: I can't compile freeradius-2.0.2 on Centos 5.1 x86_64. It outputs: /usr/lib/libltdl.so: could not read symbols: File in wrong format collect2: ld returned 1 exit status You might try using your system's own libtool. Try these configure options:

Re: Problems with 1.0.6-2.0.1 connecting to OpenLDAP 2.3.33

2008-03-05 Thread Zach Lowry
On Mar 4, 2008, at 7:12 AM, Zach Lowry wrote: On Mar 4, 2008, at 12:08 AM, Alan DeKok wrote: Zach Lowry wrote: Sorry to reply to my own post, just curious if anyone had a chance to take a glance at this. I'm still stumped and starting to suspect that my OpenLDAP is borked somehow, due

Re: TTLS and TLS

2008-03-05 Thread Alan DeKok
Wolfgang Burger wrote: So I enable TLS and configure it to use the valid certificate that is already installed. Then I enable TTLS also and configure it to use PAP as internal identification method. That does NOT enable TTLS with client certificates. What I'm triying to do is to have a

Re: Problems with 1.0.6-2.0.1 connecting to OpenLDAP 2.3.33

2008-03-05 Thread Alan DeKok
Zach Lowry wrote: I think I may have gotten a little bit closer to uncovering my problem. I installed FreeRadius 1.1.7 on a FreeBSD SPARC64 machine, and got some debugging output. I then tried it again on my OpenBSD SPARC64 machine with the debugging turned all the way up: ...