RE: freeradius demo

2003-06-17 Thread knoesel
Good Answer to my Question! 
unfortunately i am under time pressure...
I thought in such a mailing list might be someone who know how it works and
would be so kind to help me :(


> Best practices for configuring freeradius:
> 1. Read the FAQs and the archives
> 2. Read and follow the book.
> 
> It works! then, if you have problems: 
> Best practices for finding resolution to problems: 
> 1. Read debug statements completely.
> 2. Read the FAQs and the archives
> 3. Browse your config files.
> 
> Best regards for your success.
> Tim 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 17, 2003 10:32 AM
> To: [EMAIL PROTECTED]
> Subject: RE: freeradius demo
> 
> 
> OK, but how do i configure freeradius to query a windows 2000 server 
> for
> user information?
> 
> > >
> > > Hello again!
> > > I have read the rfcs and some other articles, but I still have an
> > > comprehension problem!
> > > Following situation:
> > > 1. Company with 1000 users in different systems (unix/ads)
> > > 2. Dial-in possibility over some ISDN Routers (they are the
> > > radius clients)
> > > 3. One radius server in background
> > > how does the radius server know about the users? I made some
> > > experience (not
> > 
> > FreeRadius supports a bunch of different user databases, from the 
> original
> > "users' files to most anything you want using various modules.
> > 
> > > much at all) with Cisco ACS, and I think that acs is acting as a 
> kind of
> > > proxy like this:
> > > nas (radclient) - acs (radserver) and acs (radclient) - w2ksrv 
> (radsrv)
> 
> -- 
> +++ GMX - Mail, Messaging & more  http://www.gmx.net +++
> Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
> 
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: freeradius demo

2003-06-17 Thread Tim Rich, Jr.
Best practices for configuring freeradius:
1. Read the FAQs and the archives
2. Read and follow the book.

It works! then, if you have problems: 
Best practices for finding resolution to problems: 
1. Read debug statements completely.
2. Read the FAQs and the archives
3. Browse your config files.

Best regards for your success.
Tim 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 17, 2003 10:32 AM
To: [EMAIL PROTECTED]
Subject: RE: freeradius demo


OK, but how do i configure freeradius to query a windows 2000 server for
user information?

> >
> > Hello again!
> > I have read the rfcs and some other articles, but I still have an
> > comprehension problem!
> > Following situation:
> > 1. Company with 1000 users in different systems (unix/ads)
> > 2. Dial-in possibility over some ISDN Routers (they are the
> > radius clients)
> > 3. One radius server in background
> > how does the radius server know about the users? I made some
> > experience (not
> 
> FreeRadius supports a bunch of different user databases, from the original
> "users' files to most anything you want using various modules.
> 
> > much at all) with Cisco ACS, and I think that acs is acting as a kind of
> > proxy like this:
> > nas (radclient) - acs (radserver) and acs (radclient) - w2ksrv (radsrv)

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: freeradius demo

2003-06-17 Thread knoesel
OK, but how do i configure freeradius to query a windows 2000 server for
user information?

> >
> > Hello again!
> > I have read the rfcs and some other articles, but I still have an
> > comprehension problem!
> > Following situation:
> > 1. Company with 1000 users in different systems (unix/ads)
> > 2. Dial-in possibility over some ISDN Routers (they are the
> > radius clients)
> > 3. One radius server in background
> > how does the radius server know about the users? I made some
> > experience (not
> 
> FreeRadius supports a bunch of different user databases, from the original
> "users' files to most anything you want using various modules.
> 
> > much at all) with Cisco ACS, and I think that acs is acting as a kind of
> > proxy like this:
> > nas (radclient) – acs (radserver) and acs (radclient) – w2ksrv (radsrv)

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: freeradius demo

2003-06-17 Thread Tim McCracken


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of
> [EMAIL PROTECTED]
> Sent: Tuesday, June 17, 2003 4:26 AM
> To: [EMAIL PROTECTED]
> Subject: Re: freeradius demo
>
>
> Hello again!
> I have read the rfcs and some other articles, but I still have an
> comprehension problem!
> Following situation:
> 1. Company with 1000 users in different systems (unix/ads)
> 2. Dial-in possibility over some ISDN Routers (they are the
> radius clients)
> 3. One radius server in background
> how does the radius server know about the users? I made some
> experience (not

FreeRadius supports a bunch of different user databases, from the original
"users' files to most anything you want using various modules.

> much at all) with Cisco ACS, and I think that acs is acting as a kind of
> proxy like this:
> nas (radclient) – acs (radserver) and acs (radclient) – w2ksrv (radsrv) ?
>
> --
> +++ GMX - Mail, Messaging & more  http://www.gmx.net +++
> Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius demo

2003-06-17 Thread knoesel
Hello again!
I have read the rfcs and some other articles, but I still have an
comprehension problem!
Following situation:
1. Company with 1000 users in different systems (unix/ads)
2. Dial-in possibility over some ISDN Routers (they are the radius clients)
3. One radius server in background
how does the radius server know about the users? I made some experience (not
much at all) with Cisco ACS, and I think that acs is acting as a kind of
proxy like this:
nas (radclient) – acs (radserver) and acs (radclient) – w2ksrv (radsrv) ?

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius demo

2003-06-14 Thread Artur Hecker
hi

> primary i want to demonstrate the functionallity of radius, but the
> possibilities to demostrate it are restricted (i have just my notebook for this)...

no problem, all instances can run on the same machine.

 
> why windows? i thought that it is one benefit of radius that you have
> centralized authentication there?! so i thought it would be an idea to demonstrate
> how the radius server authenticates a user from the w2k ads and another user
> from the unix passwd file?

well, you have centralized authentication but that has nothing to do
with the fact that some radius implementation can use active directory
and others password files. that is principally independent of the
protocol definition.

 
> perhaps you can tell me about a good tutorial or another ressources where
> the features of radius are explained or demonstrated!?

you should definitely begin by reading the base radius rfc. then you'll
see what's radius in the first place and also what it is not. ietf does
not define where you get your information from or how you store it; in
the most cases ietf only defines how two hosts can exchange some data,
i.e. the protocol somehow related to ip. radius IS before all such a
protocol. there is a concept behind it. the intentions are described in
the rfc. so read it. then, there is a book too.

in order to understand the concept, look for explanations on AAA e.g. on
the web www.google.com



ciao
artur




--

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius demo

2003-06-14 Thread knoesel
primary i want to demonstrate the functionallity of radius, but the
possibilities to demostrate it are restricted (i have just my notebook for this)... 

why windows? i thought that it is one benefit of radius that you have
centralized authentication there?! so i thought it would be an idea to demonstrate
how the radius server authenticates a user from the w2k ads and another user
from the unix passwd file? 

perhaps you can tell me about a good tutorial or another ressources where
the features of radius are explained or demonstrated!?


> hi
> 
> 
> it depends on what you want to demonstrate. do you want to demonstrate
> radius or do you want to demonstrate FREEradius?
> 
> in order to demonstrate the radius functionality you will probably need
> some kind of service which a user tries to get access to. radius is
> supposed to provide aaa services and usually deals with some service.
> so, if you try to set up an impressive demonstration you should first
> think about that, than get yourself a service access point which is
> radius-enabled and demonstrate the whole, like e.g. most classic use of
> radius (how it was conceived in the first place) for a dial-up access:
> user--->nas>radiusserver.
> 
> if the people know what radius is and want to see what freeradius is,
> then you should demonstrate the extensibility of freeradius, its vast
> configuration options, its modular principle and the function in full
> debug mode, etc.
> 
> in any case, i don't see what you want to do with a windows machine. the
> whole is principally independent of the operating system. freeradius
> runs on the majority of unixes and with a little luck under some
> unix-environment of win32.
> 
> 
> ciao
> artur
> 
> 
> [EMAIL PROTECTED] wrote:
> > 
> > hi,
> > 
> > i am a student and have to make an essay about radius.
> > the problem is that i want to demonstrate how it works, but i dont have
> any
> > idea how i should do it?!
> > 
> > i thought about to use a vm on my laptop (xp) with linux on it and
> another
> > vm with w2k server... then i want to use radtest with a user account
> from the
> > ads on the w2k server? but how does it work? is this the proxy feature?
> > 
> > greetings
> > knut
> > 
> > [i use freeradius 0.5 on a suse 8.1 machine.]
> > 
> > --
> > +++ GMX - Mail, Messaging & more  http://www.gmx.net +++
> > Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
> > 
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> -- 
> Artur Hecker
> artur[at]hecker.info
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius demo

2003-06-14 Thread knoesel
primary i want to demonstrate the functionallity of radius, but the
possibilities to demostrate it are restricted (i have just my notebook for this)... 

why windows? i thought that it is one benefit of radius that you have
centralized authentication there?! so i thought it would be an idea to demonstrate
how the radius server authenticates a user from the w2k ads and another user
from the unix passwd file? 

perhaps you can tell me about a good tutorial or another ressources where
the features of radius are explained or demonstrated!?


> hi
> 
> 
> it depends on what you want to demonstrate. do you want to demonstrate
> radius or do you want to demonstrate FREEradius?
> 
> in order to demonstrate the radius functionality you will probably need
> some kind of service which a user tries to get access to. radius is
> supposed to provide aaa services and usually deals with some service.
> so, if you try to set up an impressive demonstration you should first
> think about that, than get yourself a service access point which is
> radius-enabled and demonstrate the whole, like e.g. most classic use of
> radius (how it was conceived in the first place) for a dial-up access:
> user--->nas>radiusserver.
> 
> if the people know what radius is and want to see what freeradius is,
> then you should demonstrate the extensibility of freeradius, its vast
> configuration options, its modular principle and the function in full
> debug mode, etc.
> 
> in any case, i don't see what you want to do with a windows machine. the
> whole is principally independent of the operating system. freeradius
> runs on the majority of unixes and with a little luck under some
> unix-environment of win32.
> 
> 
> ciao
> artur
> 
> 
> [EMAIL PROTECTED] wrote:
> > 
> > hi,
> > 
> > i am a student and have to make an essay about radius.
> > the problem is that i want to demonstrate how it works, but i dont have
> any
> > idea how i should do it?!
> > 
> > i thought about to use a vm on my laptop (xp) with linux on it and
> another
> > vm with w2k server... then i want to use radtest with a user account
> from the
> > ads on the w2k server? but how does it work? is this the proxy feature?
> > 
> > greetings
> > knut
> > 
> > [i use freeradius 0.5 on a suse 8.1 machine.]
> > 
> > --
> > +++ GMX - Mail, Messaging & more  http://www.gmx.net +++
> > Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
> > 
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> -- 
> Artur Hecker
> artur[at]hecker.info
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius demo

2003-06-14 Thread Artur Hecker
hi


it depends on what you want to demonstrate. do you want to demonstrate
radius or do you want to demonstrate FREEradius?

in order to demonstrate the radius functionality you will probably need
some kind of service which a user tries to get access to. radius is
supposed to provide aaa services and usually deals with some service.
so, if you try to set up an impressive demonstration you should first
think about that, than get yourself a service access point which is
radius-enabled and demonstrate the whole, like e.g. most classic use of
radius (how it was conceived in the first place) for a dial-up access:
user--->nas>radiusserver.

if the people know what radius is and want to see what freeradius is,
then you should demonstrate the extensibility of freeradius, its vast
configuration options, its modular principle and the function in full
debug mode, etc.

in any case, i don't see what you want to do with a windows machine. the
whole is principally independent of the operating system. freeradius
runs on the majority of unixes and with a little luck under some
unix-environment of win32.


ciao
artur


[EMAIL PROTECTED] wrote:
> 
> hi,
> 
> i am a student and have to make an essay about radius.
> the problem is that i want to demonstrate how it works, but i dont have any
> idea how i should do it?!
> 
> i thought about to use a vm on my laptop (xp) with linux on it and another
> vm with w2k server... then i want to use radtest with a user account from the
> ads on the w2k server? but how does it work? is this the proxy feature?
> 
> greetings
> knut
> 
> [i use freeradius 0.5 on a suse 8.1 machine.]
> 
> --
> +++ GMX - Mail, Messaging & more  http://www.gmx.net +++
> Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
Artur Hecker
artur[at]hecker.info

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


freeradius demo

2003-06-14 Thread knoesel
hi, 

i am a student and have to make an essay about radius.
the problem is that i want to demonstrate how it works, but i dont have any
idea how i should do it?!

i thought about to use a vm on my laptop (xp) with linux on it and another
vm with w2k server... then i want to use radtest with a user account from the
ads on the w2k server? but how does it work? is this the proxy feature?

greetings 
knut

[i use freeradius 0.5 on a suse 8.1 machine.]

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


freeradius demo

2003-06-14 Thread knoesel
hi, 

i am a student and have to make an essay about radius.
the problem is that i want to demonstrate how it works, but i dont have any
idea how i should do it?!

i thought about to use a vm on my laptop (xp) with linux on it and another
vm with w2k server... then i want to use radtest with a user account from the
ads on the w2k server? but how does it work? is this the proxy feature?

greetings 
knut

[i use freeradius 0.5 on a suse 8.1 machine.]

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html