RE: freeradius and tls

2002-11-11 Thread Jeffery Huang
Thank you for your help! I have resolve this problem now! :)

¦b ¶g¤@, 2002-11-11 23:35, McKay, Raymond ¼g¹D¡G
> 
> > I use certificate to authorize user! why it become  auth: type "system"?
> > and I have use certificate! why I need password?  :(
> 
> It looks like you may have some configuration information missing in your
> configuration files.  You need to enable EAP-TLS in the radiusd.conf file.
> See http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm sections 7 and 8
> for configuration and testing.
> 
> Hope this helps.
> 
> 
> 
> Raymond McKay
> IT Manager / Network Administrator
> Funnybone Interactive
> Vivendi Universal Games
> 
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- 

Regard,
Jeffery Huang
iMining Technology Inc.,
8F-4, No.432, Sec.1 Keelung Rd.,
Taipei,Taiwan
Tel:886-2-27235122 ext 20
Fax:886-2-27232287
http://www.imining.com.tw
email:[EMAIL PROTECTED]
w


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



freeradius and tls

2002-11-11 Thread Jeffery Huang
Hi! guys,

  I use freeradius via certificate got the following error message:

./radiusd: relocation error:
/usr/local/radiusd/lib/rlm_eap_tls-0.8-pre.so: undefined symbol:
SSL_set_msg_callback

Why it occur! how do I resolve the problem!
-- 

Regard,
Jeffery Huang
iMining Technology Inc.,
8F-4, No.432, Sec.1 Keelung Rd.,
Taipei,Taiwan
Tel:886-2-27235122 ext 20
Fax:886-2-27232287
http://www.imining.com.tw
email:[EMAIL PROTECTED]
w


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: freeradius and tls

2002-11-11 Thread Alan DeKok
Jeffery Huang <[EMAIL PROTECTED]> wrote
>   modcall[authorize]: module "suffix" returns noop
> users: Matched DEFAULT at 153
>   modcall[authorize]: module "files" returns ok
> modcall: group authorize returns updated
>   rad_check_password:  Found Auth-Type System
> auth: type "System"
...
> I use certificate to authorize user! why it become  auth: type "system"?

  Because you told it to?

  READ the output of debugging mode.  That's what it's there for.

> and I have use certificate! why I need password?  :(

  You don't.  Fix your local configuration and it will work.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: freeradius and tls

2002-11-11 Thread McKay, Raymond

> I use certificate to authorize user! why it become  auth: type "system"?
> and I have use certificate! why I need password?  :(

It looks like you may have some configuration information missing in your
configuration files.  You need to enable EAP-TLS in the radiusd.conf file.
See http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm sections 7 and 8
for configuration and testing.

Hope this helps.



Raymond McKay
IT Manager / Network Administrator
Funnybone Interactive
Vivendi Universal Games


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



freeradius and tls

2002-11-10 Thread Jeffery Huang
Hi! guys,
  I try to use certificate on freeradius! But I got the following message.

rad_recv: Access-Request packet from host 192.10.10.149:6001, id=169,
length=132
User-Name = "test-client"
NAS-IP-Address = 192.10.10.149
Called-Station-Id = "00-02-2d-48-21-7e"
Calling-Station-Id = "00-02-2d-1c-5a-b2"
NAS-Identifier = "avaya"
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = "\002\205\000\020\001test-client"
Message-Authenticator = 0xf0a44f01f0b971fd0a29f50d6897e8f6
modcall: entering group authorize
  modcall[authorize]: module "preprocess" returns ok
rlm_chap: Could not find proper Chap-Password attribute in request
  modcall[authorize]: module "chap" returns noop
  modcall[authorize]: module "mschap" returns notfound
  modcall[authorize]: module "eap" returns updated
rlm_realm: No '@' in User-Name = "test-client", looking up realm NULL
rlm_realm: No such realm NULL
  modcall[authorize]: module "suffix" returns noop
users: Matched DEFAULT at 153
  modcall[authorize]: module "files" returns ok
modcall: group authorize returns updated
  rad_check_password:  Found Auth-Type System
auth: type "System"
modcall: entering group authenticate
rlm_unix: Attribute "User-Password" is required for authentication.
  modcall[authenticate]: module "unix" returns invalid
modcall: group authenticate returns invalid
auth: Failed to validate the user.
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 169 to 192.10.10.149:6001
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 169 with timestamp 3dcf3bdd
Nothing to do.  Sleeping until we see a request.

I use certificate to authorize user! why it become  auth: type "system"?
and I have use certificate! why I need password?  :(
-- 
Regard,
Jeffery Huang
iMining Technology Co.,Ltd.
886-2-2723-5122-11
886-2-27232287
http://www.imining.com.tw
email:[EMAIL PROTECTED]


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html