Re: EAP (PEAP) MS-CHAPv2b how to

2007-09-23 Thread tnt
>And why use :=? Not == (more secure)?
>

Because Cleartext-Password is an internal server attribute that doesn't
exist in the request. You are "telling" the server what's the
password, not comparing it with something that is in the request.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP (PEAP) MS-CHAPv2b how to

2007-09-23 Thread Piero Giobbi

Hi riky.

I had exactly the same problem, upgrading to 1.1.7 solved my problem  
(debian package is only at 1.1.3, didn't get Cleartext-Password to  
work there either).


Just upgrade, all of you whos not running 1.1.7!!

: )

And why use :=? Not == (more secure)?

Thx.


On Sep 21, 2007, at 4:36 PM, freeradius-users- 
[EMAIL PROTECTED] wrote:



From: "riky.none" <[EMAIL PROTECTED]>
Date: September 21, 2007 3:03:18 PM GMT+02:00
To: FreeRadius users mailing list [EMAIL PROTECTED]>

Subject: Re: EAP (PEAP) MS-CHAPv2b how to
Reply-To: FreeRadius users mailing list [EMAIL PROTECTED]>



Alan DeKok ha scritto:

riky.none wrote:


I configure freeradius on basic autentication mode (using file
/etc/freeradius/users)

paperino Auth-Type := Local, User-Password == "paperino"

topolino Auth-Type := EAP, User-Password == "topolino"



  (1) DO NOT SET AUTH-TYPE
  (2) Use Cleartext-Password := ...
  NOT User-Password ==



rlm_eap: No such EAP type peap



  Read eap.conf.



I want use autentication without certificate



  If you're using PEAP, you need a server certificate.


HOW TO configuration WIFI (cliente xp) and freeradius using EAP/ 
PEAP ???




  See the Wiki.  This is covered there.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/ 
list/users.html


.



not hangry Alan

I feel really stupid now...

i insert in users file:

myuser   Cleartext-Password := "somepass"

run freeradius -X
/etc/freeradius/users[219]: Parse error (check) for entry myuser:  
Unknown attribute "Cleartext-Password"


eap config is not easy to read (for newbie)

There is one basic howto to configure freeradius using TTLS???

in wiki i not find one basic howto EAP-TTSL


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP (PEAP) MS-CHAPv2b how to

2007-09-21 Thread riky.none

Alan DeKok ha scritto:

riky.none wrote:
  

run freeradius -X
/etc/freeradius/users[219]: Parse error (check) for entry myuser:
Unknown attribute "Cleartext-Password"




eap config is not easy to read (for newbie)



  Do you have a question about something?

  

There is one basic howto to configure freeradius using TTLS???



  1) Configure EAP-TLS
  2) uncomment the "ttls" section in eap.conf.

  

in wiki i not find one basic howto EAP-TTSL



  There is very little effort needed to get EAP-TTLS to work.

  In 2.0-pre2, all you have to do is start the server as root.  PEAP
will work, EAP-TLS will work, and EAP-TTLS will work.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

.

  

ubuntu freeradius deb:
FreeRADIUS Version 1.1.3, for host i486-pc-linux-gnu, built on Mar 30 
2007 at 22:44:3


i will install the 2.0 pre for testing(i m play with freeradius )

grazie
p.s.
you are very patient with newbie



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP (PEAP) MS-CHAPv2b how to

2007-09-21 Thread Alan DeKok
riky.none wrote:
> run freeradius -X
> /etc/freeradius/users[219]: Parse error (check) for entry myuser:
> Unknown attribute "Cleartext-Password"

  You aren't using the latest version.  Why not?

> eap config is not easy to read (for newbie)

  Do you have a question about something?

> There is one basic howto to configure freeradius using TTLS???

  1) Configure EAP-TLS
  2) uncomment the "ttls" section in eap.conf.

> in wiki i not find one basic howto EAP-TTSL

  There is very little effort needed to get EAP-TTLS to work.

  In 2.0-pre2, all you have to do is start the server as root.  PEAP
will work, EAP-TLS will work, and EAP-TTLS will work.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP (PEAP) MS-CHAPv2b how to

2007-09-21 Thread A . L . M . Buxey
Hi,

> I feel really stupid now...
> 
> i insert in users file:
> 
> myuser   Cleartext-Password := "somepass"
> 
> run freeradius -X 
> 
> /etc/freeradius/users[219]: Parse error (check) for entry myuser: Unknown 
> attribute "Cleartext-Password"

sounds like you are running an ol dversion. you will not get full support
from most folk unless you are running a recent release - eg 1.1.6/1.1.7 or
2.0pre2

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP (PEAP) MS-CHAPv2b how to

2007-09-21 Thread riky.none

Alan DeKok ha scritto:

riky.none wrote:
  

I configure freeradius on basic autentication mode (using file
/etc/freeradius/users)

paperino Auth-Type := Local, User-Password == "paperino"

topolino Auth-Type := EAP, User-Password == "topolino"



  (1) DO NOT SET AUTH-TYPE
  (2) Use Cleartext-Password := ...
  NOT User-Password ==

  

rlm_eap: No such EAP type peap



  Read eap.conf.

  

I want use autentication without certificate



  If you're using PEAP, you need a server certificate.

  

HOW TO configuration WIFI (cliente xp) and freeradius using EAP/PEAP ???



  See the Wiki.  This is covered there.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

.

  

not hangry Alan

I feel really stupid now...

i insert in users file:

myuser   Cleartext-Password := "somepass"

run freeradius -X 


/etc/freeradius/users[219]: Parse error (check) for entry myuser: Unknown attribute 
"Cleartext-Password"

eap config is not easy to read (for newbie)

There is one basic howto to configure freeradius using TTLS???

in wiki i not find one basic howto EAP-TTSL










-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP (PEAP) MS-CHAPv2b how to

2007-09-17 Thread Alan DeKok
riky.none wrote:
> I configure freeradius on basic autentication mode (using file
> /etc/freeradius/users)
> 
> paperino Auth-Type := Local, User-Password == "paperino"
> 
> topolino Auth-Type := EAP, User-Password == "topolino"

  (1) DO NOT SET AUTH-TYPE
  (2) Use Cleartext-Password := ...
  NOT User-Password ==

> rlm_eap: No such EAP type peap

  Read eap.conf.

> I want use autentication without certificate

  If you're using PEAP, you need a server certificate.

> HOW TO configuration WIFI (cliente xp) and freeradius using EAP/PEAP ???

  See the Wiki.  This is covered there.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


EAP (PEAP) MS-CHAPv2b how to

2007-09-17 Thread riky.none
I configure freeradius on basic autentication mode (using file 
/etc/freeradius/users)


paperino Auth-Type := Local, User-Password == "paperino"

topolino Auth-Type := EAP, User-Password == "topolino"


in local mode and in wired network freerarius test (with user local 
paperino) is ok
in WI mode test failed (i not insert any directive in 
/etc/freeradius/EAP) using paperino and topolino


( freeradius debug mode)

…..

auth: No User-Password or CHAP-Password attribute in the request
auth: Failed to validate the user.
Login incorrect: [paperino/] (from client 
dlink port 1 cli 00-15-E9-2B-D2-10)


rlm_eap: No such EAP type peap

rlm_eap: Failed in EAP select

modcall[authenticate]: module "eap" returns invalid for request 1

modcall: leaving group authenticate (returns invalid) for request 1

auth: Failed to validate the user.

Login incorrect: [topolino/] (from client 
dlink port 1 cli 00-15-E9-2B-D2-10)This


This is the AP configuration


I want use autentication without certificate

HOW TO configuration WIFI (cliente xp) and freeradius using EAP/PEAP ???
grazie




-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html