Re: Virtual Server not setting attributes on reply

2009-12-22 Thread Timothy
well, looking from the log, your virtual_server doesnt appear to set any attribute in its post-auth stage. calling the right thing or SQL table? post-auth, yes, see the virtual server config below. Remember TEST1 and TEST2 are the same virtual server, just proxying to them via different

Re: Compile freeradius with wimax support

2009-12-22 Thread Alan DeKok
Drazen Milosevic wrote: Hello all, I'm trying to compile freeradius with wimax support but no success. Perhaps you could try posting the error messages that are produced. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Compile freeradius with wimax support

2009-12-22 Thread Drazen Milosevic
On Tuesday 22 December 2009 11:39:18 Alan DeKok wrote: Drazen Milosevic wrote: Hello all, I'm trying to compile freeradius with wimax support but no success. Perhaps you could try posting the error messages that are produced. Alan DeKok. There are no errors, configure just ends

Re: Compile freeradius with wimax support

2009-12-22 Thread Alan DeKok
Drazen Milosevic wrote: There are no errors, configure just ends with all modules included except rlm_wimax? Why didn't you say that the first time? The version of freeradius is 2.1.7. do: $./configure --with-experimental-modules ... Alan DeKok. - List info/subscribe/unsubscribe?

Re: Compile freeradius with wimax support

2009-12-22 Thread Drazen Milosevic
Freeradius get's compiled and installed with make install. But when I uncomment wimax in sites-enabled and start radius -X I get /usr/local/freeradius/etc/raddb/modules/wimax[92]: Failed to link to module 'rlm_wimax': rlm_wimax.so: cannot open shared object file: No such file or directory

ttls+eap-md5

2009-12-22 Thread anyi_9
Hello,Alan DeKok!Thank you very much for the clear answer. Now i encounter a new problem and would be very appreciated if you could give me some advice. My problem:The authentication is failed.Part of the information from freeradius server is: ... [eap]Handler failed in

check_crl = yes leads to verify error:num=3:unable to get certificate CRL

2009-12-22 Thread Vieri
Hi, I'm doing something wrong with my Certificate Revocation List but I can't seem to understand what. I'm using freeradius 2.1.7 and openssl 0.9.8k. I'm self-signing the certificates. With check_crl = no everything works well. However, authentication does not work with check_crl = yes and I

Re: ttls+eap-md5

2009-12-22 Thread Alan DeKok
anyi_9 wrote: Hello,Alan DeKok!Thank you very much for the clear answer. Now i encounter a new problem and would be very appreciated if you could give me some advice. My problem:The authentication is failed.Part of the information from freeradius server is: ...

Re: Compile freeradius with wimax support

2009-12-22 Thread Drazen Milosevic
On Tuesday 22 December 2009 11:57:05 Alan DeKok wrote: Drazen Milosevic wrote: There are no errors, configure just ends with all modules included except rlm_wimax? Why didn't you say that the first time? The version of freeradius is 2.1.7. do: $./configure

FR 2.1.7 and Hints File

2009-12-22 Thread Bruce Nunn
The problem I'm trying to solve relates to Windows users who leave that Automatically use my Windows login name and password property checked. At my site, we authenticate with PEAPv0/MSCHAPv2 with usernames and mschapv2 password hashes stored in an ldap database, not in a Windows Domain. I'd

NTLM, Kerberos 5 or LDAP

2009-12-22 Thread Difan Zhao
Greetings, I am trying to authenticate my network against Windows 2003 Active Directory. With help from Ivan Kalik, I was able to use NTLM to communicate with Windows 2003 server and authenticate EAP clients. On the EAP side I am using PEAP since they are mostly windows XP clients and I don't

Re: ttls+eap-md5

2009-12-22 Thread Alan Buxey
Hi, Hello,Alan DeKok!Thank you very much for the clear answer. Now i encounter a new problem and would be very appreciated if you could give me some advice. My problem:The authentication is failed.Part of the information from freeradius server is: your problem is you havent supplied the

David Suarez De Lis/UN24956/OPERACION Y MANTENIMIENTO /TSM está ausente de la oficina.

2009-12-22 Thread david . suarezdelis
Estaré ausente de la oficina desde el 22/12/2009 y no volveré hasta el 28/12/2009. Responderé a su mensaje cuando regrese. Si tiene alguna emergencia, puede contactar con accesos_...@telefonica (900 111 245 opción 3, 2)o Jose Manuel Gomez Perez (jmgo...@telefonica.es)

Re: MAC authentication bypass --- How am I supposed to?edit?theusersfile to include multiple MAC addresses??

2009-12-22 Thread Difan Zhao
So..., Alan suggested using unlang. I am actually reading un-language (5). If I use it, where or what file do I put your script in? =Script that Alan wrote authorise { if(%{User-Name} =~ /[0-9a-z]{12}/i

Re: NTLM, Kerberos 5 or LDAP

2009-12-22 Thread tnt
I am trying to authenticate my network against Windows 2003 Active Directory. With help from Ivan Kalik, I was able to use NTLM to communicate with Windows 2003 server and authenticate EAP clients. On the EAP side I am using PEAP since they are mostly windows XP clients and I don't think

Re: MAC authentication bypass --- How am I supposed to?edit?theusersfile to include multiple MAC addresses??

2009-12-22 Thread tnt
Alexander, I did read the links you gave me very carefully and I guess I understand the logic... However it seems that I have to edit many files. I am new to the FreeRadius and I don't have any programming experience... Is there a document which can tell me briefly what these files are for

Re: Virtual Server not setting attributes on reply

2009-12-22 Thread tnt
post-auth, yes, see the virtual server config below. Remember TEST1 and TEST2 are the same virtual server, just proxying to them via different methods. That's why I was getting confused, They behave differently if you proxy to them in different ways. my initial thought was your attr_filter

escape in the radius accept

2009-12-22 Thread Ning Shi
hello folks, I am working on a EAP issue. the user could authenticated ok. however, if the username is like this: edu\nntest (wihch is ' 45 44 55 5c 6e 6e 74 65 73 74) then in the radius accept, the username changed to edu'0x0a'ntest (45 44 55 0a 6e 74 65 73 74) so the '\n' has been converted to

Re: escape in the radius accept

2009-12-22 Thread Alan DeKok
Ning Shi wrote: hello folks, I am working on a EAP issue. the user could authenticated ok. however, if the username is like this: edu\nntest (wihch is ' 45 44 55 5c 6e 6e 74 65 73 74) then in the radius accept, the username changed to edu'0x0a'ntest (45 44 55 0a 6e 74 65 73 74) so the

How to set servers file in radiusclient-ng install ?

2009-12-22 Thread Zhang Shukun
hi friend, i see the tutorial in the url http://svn.dd-wrt.com:8000/dd-wrt/browser/src/router/asterisk/doc/radius.txt it says : Each line contains hostname of a RADIUS server and shared secret used in communication with that server. is that say i must set the hostname of a RADIUS