Accessing nas ip with rlm_python and rlm_perl

[Carl Pierre]

Hello:

Is it at all possible to access this information within these modules? I am
trying to code different behavior in my code based on IP.

Regards,
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

PEAP Password

[Carl Pierre]

Hello:

I would like to have FreeRADIUS check the user's submitted credentials
before it even allows the Tunnel to even be set up.

Is this a possibility?

Regards,

Carl
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PEAP Password

[Carl Pierre]

My lack of understanding I think, is due in part because of a
wpa_supplicant-based client I am using with PEAP/EAP-GTC.

The client asks for a username and password, sets up the tunnel and then
challenges for a Password again for the GTC stuff.

FreeRADIUS rightfully ignores the first password, but I was not completely
sure if it was even noticed by anything.

Your response pretty much confirms that this is only a quirk of the client
in question.

On Fri, Jul 13, 2012 at 1:45 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote:

  No


 (i'm not even going to ask 'why would you want to do that?')

 alan


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

PEAP/EAP_GTC

[Carl Pierre]

Hello:

Are there any clients that actually display the EAP-GTC challenge?
Essentially, I am trying to use EAP-GTC similarly to how PAP
Access-Challenge works:

Client: ---User/PassServer
Client: --Challenge Message-Server
Client: ---Challenge Response---Server
Client: ---Accept--Server

So far, I cannot seem to find documentation to suggest that I CANNOT do
this, and the spec suggests that I can, but I cannot seem to find anything
that will do this.

In addition, are there any resources that thoroughly documents EAP-GTC? The
RFCs do not provide much information.

Regards.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 Factor Authetication and EAP-GTC

[Carl Pierre]

Hello:

I have recently been made a part of a project in which we intend to use
freeradius.
So far, FR seems to be the ideal tool except for one small issue: 2-Factor
Authentication.

Try as I might, I cannot seem to find any way to set up a multi-factor
solution using PEAP.
So I suppose my question is this: has anyone had any luck using EAP and
challenging the
user to enter some sort of OTP? I know that EAP-GTC is meant to do this,
but the meager
documentation I have on it does not give too much detail.

Regards
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html