Re: PPTP + RADIUS+LDAP

2005-02-25 Thread Alan DeKok 
Anderson Alves de Albuquerque [EMAIL PROTECTED] wrote:
  I have freeradius with LDAP to do users authentication, now I need to use 
 VPN (pptp) connect freeradius to do users authetication. Is this possible?

  Yes.

  I am doing the steps in 
 http://poptop.sourceforge.net/dox/radius_mysql.html, but I have problems 
 with authentication.
 
  Does someone  known like help me?

  If you're not going to post any information about what's wrong (see
the FAQ), then it is impossible for anyone to help you.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PPTP + RADIUS+LDAP

2005-02-25 Thread Anderson Alves de Albuquerque 


 My RAdius show me this:


rad_recv: Access-Request packet from host 146.164.247.230:32776, id=41, 
length=70
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = marcelo
Calling-Station-Id = X.X.Y.198
NAS-IP-Address = X.X.Y.230
NAS-Port = 0
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 3
  modcall[authorize]: module digest returns noop for request 3
rlm_realm: No '@' in User-Name = marcelo, looking up realm NULL
rlm_realm: No such realm NULL
  modcall[authorize]: module suffix returns noop for request 3
rlm_ldap: - authorize
rlm_ldap: performing user authorization for marcelo
radius_xlat:  '(uid=marcelo)'
radius_xlat:  'dc=domain,dc=com'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in dc=domain,dc=com, 
with filter (uid=marcelo)
rlm_ldap: Added password teste in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: Adding radiusAuthType as Auth-Type, value CHAP  op=21
rlm_ldap: looking for reply items in directory...
rlm_ldap: Adding Cisco-AVPair as Cisco-AVPair, value 
h323-ivr-in=terminal-alias:marcelo,025983355  op=11
rlm_ldap: user marcelo authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module ldap returns ok for request 3
modcall: group authorize returns ok for request 3
  rad_check_password:  Found Auth-Type CHAP
auth: type CHAP
  Processing the authenticate section of radiusd.conf
modcall: entering group Auth-Type for request 3
rlm_ldap: - authenticate
rlm_ldap: Attribute User-Password is required for authentication.
  modcall[authenticate]: module ldap returns invalid for request 3
ERROR: No Digest-Nonce: Cannot perform Digest authentication
  modcall[authenticate]: module digest returns invalid for request 3
rlm_chap: Attribute CHAP-Password is required for authentication.
  modcall[authenticate]: module chap returns invalid for request 3
  rlm_mschap: No MS-CHAP-Challenge in the request
  modcall[authenticate]: module mschap returns reject for request 3
modcall: group Auth-Type returns reject for request 3
auth: Failed to validate the user.
-



 PS: My radius is okay whith GNUGK authentication.








On Fri, 25 Feb 2005, Alan DeKok wrote:

 Anderson Alves de Albuquerque [EMAIL PROTECTED] wrote:
   I have freeradius with LDAP to do users authentication, now I need to use 
  VPN (pptp) connect freeradius to do users authetication. Is this possible?
 
   Yes.
 
   I am doing the steps in 
  http://poptop.sourceforge.net/dox/radius_mysql.html, but I have problems 
  with authentication.
  
   Does someone  known like help me?
 
   If you're not going to post any information about what's wrong (see
 the FAQ), then it is impossible for anyone to help you.
 
   Alan DeKok.
 
 
 - 
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
 


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PPTP + RADIUS+LDAP

2005-02-25 Thread Alan DeKok 
Anderson Alves de Albuquerque [EMAIL PROTECTED] wrote:
  My RAdius show me this:


  Use radiusd -X, as suggested in the README, FAQ, and everywhere else.

 auth: type CHAP
   Processing the authenticate section of radiusd.conf
 modcall: entering group Auth-Type for request 3
 rlm_ldap: - authenticate
 rlm_ldap: Attribute User-Password is required for authentication.

  To me, that looks like you've drastically edited the default
radiusd.conf, and done some very curious things to it.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

PPTP + RADIUS+LDAP

2005-02-24 Thread Anderson Alves de Albuquerque 


 I have freeradius with LDAP to do users authentication, now I need to use 
VPN (pptp) connect freeradius to do users authetication. Is this possible?

 I am doing the steps in 
http://poptop.sourceforge.net/dox/radius_mysql.html, but I have problems 
with authentication.

 Does someone  known like help me?

 My poptop (pptp) is okay when I use config without plugins radius.so, 
then VPN read chap-secret file in /etc/ so find users and password. But I 
need to use LDAP and freeradius to do users authentication.



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html