Re: Spaces in the end of User-Name.

2011-01-19 Thread Alan DeKok
admin wrote: Something of type such this? if (%{User-Name}=~/([a-zA-Z0-9_.]+)\s+$/i) { %{User-Name}=%{1} } Not quite... if (User-Name =~ /(.+)\s+$/i) { update request { User-Name := %{1} } } See man unlang.

Re: Freeradiusd 2.1.8

2011-01-19 Thread Alan DeKok
Brian Carpio wrote: No one was on the box doing anything… I was looking into this issue with google and came across a thread back in Nov 2009 about an issue a user was experiencing with radiusd 2.1.8, and this user send some gdb dumps to the development team… I can’t seem to recreate the issue

Re: Proxying authentication from FreeRadius to Cisco ACS

2011-01-19 Thread Alan DeKok
Erisan Nyamutenha wrote: ... In the failed attempts logs on the ACS it says bad username or password. i'm pretty sure im using the correct password. Is there any reason why this should not work? I've posted my logs below:- See the logs from ACS. Looking at the logs from FreeRADIUS is

Re: Call for 2.1.11

2011-01-19 Thread Alan DeKok
Johan Meiring wrote: I still think this might make alot of questions go away. http://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00357.html At this point, I agree. Adding the EAP warning in 2.1.10 just meant that a bunch of people posted the message to the list,

Re: Freeradius 2.1.10

2011-01-19 Thread Alan DeKok
Samuel Isaias Barriga Perez wrote: I'm working on setting it up to authenticate users (windows XP) to our wireless network which I succesfully completed, when I run radiusd -X (debug) my output is as follow: ... I tried everything and according to the debug output this is what I am getting,

Re: Storing of salt in freeradius

2011-01-19 Thread Mark
Hi Fajar, How did you generate that hash? md5sum of testpass doesn't return that value for me. On 19-Jan-2011, at 3:07 PM, Fajar A. Nugraha wrote: On Wed, Jan 19, 2011 at 12:39 PM, Mark m...@edgewire.sg wrote: Hi folks, Been trying to look for information on this but haven't been able to

Re: Proxying authentication from FreeRadius to Cisco ACS

2011-01-19 Thread Alexander Clouter
Erisan Nyamutenha erisan.nyamute...@uct.ac.za wrote: I am setting up an Eduroam authentication server using FreeRadius 2.1.1 on Suse Linux 12. Do you mean 2.1.10? If not, upgrade to 2.1.10. I am proxying authentication requests to a Cisco ACS. When testing using radtest from the

Re: Call for 2.1.11

2011-01-19 Thread Alexander Clouter
Johan Meiring jmeir...@pcservices.co.za wrote: I think the updfromto fixes should go in, if I can figure out how to make it work on Linux *and* other systems. I still think this might make alot of questions go away.

Re: Spaces in the end of User-Name.

2011-01-19 Thread Alexander Clouter
admin b...@iptv.by wrote: What i must to specify in a config file of freeradius2 that in each request before its further handling it automatically deleted spaces in the end of %{User-Name}? You need to write a custom rule in unlang. Something of type such this? if

Re: Storing of salt in freeradius

2011-01-19 Thread Mark
Nevermind this, found the solution. http://blog.sam-pointer.com/2010/01/26/md5sum-vs-phps-md5-function Thanks all. On 19-Jan-2011, at 3:07 PM, Fajar A. Nugraha wrote: On Wed, Jan 19, 2011 at 12:39 PM, Mark m...@edgewire.sg wrote: Hi folks, Been trying to look for information on this but

Re: Storing of salt in freeradius

2011-01-19 Thread Fajar A. Nugraha
On Wed, Jan 19, 2011 at 4:05 PM, Mark m...@edgewire.sg wrote: Hi Fajar, How did you generate that hash? md5sum of testpass doesn't return that value for me. the MD5-password? Probably due to new line effect. I created it using php's md5 function (http://php.net/manual/en/function.md5.php)

Re: Storing of salt in freeradius

2011-01-19 Thread Alexander Clouter
Fajar A. Nugraha l...@fajar.net wrote: How did you generate that hash? md5sum of testpass doesn't return that value for me. the MD5-password? Probably due to new line effect. I created it using php's md5 function (http://php.net/manual/en/function.md5.php) ...the rest of us use the unlang

Re: Spaces in the end of User-Name.

2011-01-19 Thread admin
Alexander Clouter a...@digriz.org.uk писал(а) в своём письме Wed, 19 Jan 2011 10:54:11 +0200: Ideally you should do something like: authorization { [snipped] if (User-Name =~ /^\s/ || User-Name =~ /\s$/) { update reply {

Re: Proxying authentication from FreeRadius to Cisco ACS

2011-01-19 Thread Alan Buxey
Hi, as per message previously sent, 'eduroam' SSID must be all lowercase. and thats a MUST. SSID are case sensitive...if you have Eduroam then all visiting clients will need to be reconfigured to use it. Suse Linux 12. I am proxying authentication requests to a Cisco ACS. When testing

Request information for EAP TTLS

2011-01-19 Thread Aman Arneja
Hi I am new to Free Radius and was just wondering if some1 can help me out. I am planning to implement an EAP TTLS client and was wondering the following about Free Radius for my testing. 1.) Does Free Radius Implementation of EAP TTLS Support the following a.) Client auth during phase 1

Re: Spaces in the end of User-Name.

2011-01-19 Thread Alan DeKok
admin wrote: This unlang-code doesn't work too sigh See the FAQ for it doesn't work. Also, try reading the documentation, and using the previous examples as the basis for experimentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help needed with user authentication

2011-01-19 Thread Luke Hammond
Thanks for that... I dounf coovachilli and installed it, now my freeradius wont start.. when i type: radiusd -X i get a whole lot of errors, any ideas where i could have gone wrong? We have a cisco 2800 or 2850 on its way from the company we have purchased our internet link from, so i am not

force_check_config - how to use?

2011-01-19 Thread William Bulley
About twenty months ago, a commit to src/main/modules.c occurred with the following comment: Allow administrators to force_check_config There is a check inside find_module_instance() in that file for a value pair of that name with a value of yes: cp = cf_pair_find(cs, force_check_config);

Re: Problem with iPods/iTouches

2011-01-19 Thread Terry Simons
Hi Rob, Can you please do the following: Install the iPhone Configuration Utility (if you don't already have it you can get it here: http://www.apple.com/support/iphone/enterprise/). Connect an iOS device to the system that has iPhone Configuration Utility installed and open the application.

Re: force_check_config - how to use?

2011-01-19 Thread William Bulley
According to Alan DeKok al...@deployingradius.com on Wed, 01/19/11 at 13:57: I *think* it's something you can add to a module configuration to force it to instantiate itself. Normally, when radiusd -C is used, the SQL module is skipped, because checking the config doesn't mean opening 50

Issue with local authentication of MS-ChapV2

2011-01-19 Thread Hanavan, John (John)
I am trying to get PEAP/MS-ChapV2 working on my Radius Server. The version I am using is FreeRadius 2.1.8. I already have EAP-TLS working between a FreeRadius Server and an XP supplicant, so I am pretty sure that my certificates are configured correctly on the FreeRadius Server as well as the

[no subject]

2011-01-19 Thread Mark Jones
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radping Works Wireless fails

2011-01-19 Thread mjonesmcne
Hi all I am trying to setup freeradius on an OES2 server to authenticate via ldap to edir. I have been following the document freeradius-edir from here http://www.novell.com/coolsolutions/assets/freeradius-edir.pdf , but now i am stuck. Radping works shown as the first login, but wireless fails

RE: Issue with local authentication of MS-ChapV2

2011-01-19 Thread Hanavan, John (John)
Hi All, We solved the issue in house. Regards, John -Original Message- From: freeradius-users-bounces+jhanavan=avaya@lists.freeradius.org [mailto:freeradius-users-bounces+jhanavan=avaya@lists.freeradius.org] On Behalf Of Hanavan, John (John) Sent: Wednesday, January 19, 2011

RE: Issue with local authentication of MS-ChapV2

2011-01-19 Thread Sallee, Stephen (Jake)
Glad to hear you solved it, care to share so we can all benefit ? Jake Sallee Godfather Of Bandwidth Network Engineer Fone: 254-295-4658 Phax: 254-295-4221 From: freeradius-users-bounces+jake.sallee=umhb@lists.freeradius.org