Re: Cisco LEAP and FreeRadius

2003-05-30 Thread Miroslav Petricek
On Thu, May 29, 2003 at 09:41:56PM +1000, Luke Walshe wrote:
 
  test  Auth-Type := Local, User-Password == pass,
Service-Type = Framed-User
 
 Try
 
 test  Auth-Type := eap, User-Password == pass
   Service-Type = Login-User
 

It works. Thank you.

-- 
/* Miroslav Petricek [EMAIL PROTECTED]
   UNIS COMPUTERS, spol. s r.o.  Systemovy inzenyr - UNIX
-- http://www.petricek.cz/ -- ICQ: 56183467  --

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Cisco LEAP and FreeRadius

2003-05-29 Thread Miroslav Petricek
Hi, all

I would like to configure FreeRadius to allow LEAP based
authentication between Cisco client, Cisco AP350 ans FreeRadius 
server.

My configuration:

freeradius-snapshot-20030528, compiled on Red Hat Linux 7.3

raddb/users file:

test  Auth-Type := Local, User-Password == pass,
  Service-Type = Framed-User


raddb/clients.conf file:

client 127.0.0.1 {
secret  = pass
shortname   = localhost
nastype = other
}

client 192.168.1.254 {
secret  = pass
shortname   = ap350
nastype = cisco
}

I have default_eap_type = leap in the eap section of the radiusd.conf.

When I try to connect to the radius server, everything seems to be
working fine:

# radtest test pass localhost 1813 pass
Sending Access-Request of id 100 to 127.0.0.1:1812
User-Name = test
User-Password = pass
NAS-IP-Address = rambo.uniscomp.cz
NAS-Port = 1813
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=100, length=32
Service-Type = Framed-User
Framed-IP-Netmask = 255.255.255.0

But when I try to connect from Cisco 350 NAS, i'm getting following:

Auth: Login OK: [test/no User-Password attribute] (from client ap350 port 37 cli 
000c304c1aa0)
Info: rlm_eap_leap: No User-Password or NT-Password configured for this user

How should I correctly specify User-Password?

-- 
/* Miroslav Petricek [EMAIL PROTECTED]
   UNIS COMPUTERS, spol. s r.o.  Systemovy inzenyr - UNIX
-- http://www.petricek.cz/ -- ICQ: 56183467  --

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html