RE: Configuring Server for Access-Challenge Response

2004-03-23 Thread amekrani

Hi Joseph,
         Just
a question from urs mail ? When u say Auth-Type = "example"  then
the authentication for that user will go to a module named example, 

similarly

Auth-Type="CHAP"
means the same

The thing is i want to configure the
Server for challenge response, please can u let me know how ?

Thanks in advance ?
Asif










"Eng, Joseph"
<[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
03/17/04 06:43 AM



Please respond to
[EMAIL PROTECTED]





To
"'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]>


cc



Subject
RE: Configuring Server for
Access-Challenge Response








Appreciate the help. It's working fine now.

-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 16, 2004 2:16 PM
To: [EMAIL PROTECTED]
Subject: Re: Configuring Server for Access-Challenge Response 


"Eng, Joseph" <[EMAIL PROTECTED]> wrote:
> Per previous suggestion I'm trying to use the rlm_example module to
> implement a challenge-response. However, I'm not quite sure how to
> configure the users file to invoke this modules on a certain user
> name. For example, what does one use for "Auth-Type :="?

  "example"

> I don't see any obvious Auth-Type definitions in dictionary file for
> this.

  Because the names are automatically created at run-time, based on
the module names.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Configuring Server for Access-Challenge Response

2004-03-16 Thread Alan DeKok
"Eng, Joseph" <[EMAIL PROTECTED]> wrote:
> Appreciate the help. It's working fine now.

  You're welcome.

  I do suggest, however, changing the module name to something other
than "example".  If it's a module which may be useful to others, you
may want to submit it for inclusion in the server.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Configuring Server for Access-Challenge Response

2004-03-16 Thread Eng, Joseph
Appreciate the help. It's working fine now.

-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 16, 2004 2:16 PM
To: [EMAIL PROTECTED]
Subject: Re: Configuring Server for Access-Challenge Response 


"Eng, Joseph" <[EMAIL PROTECTED]> wrote:
> Per previous suggestion I'm trying to use the rlm_example module to
> implement a challenge-response. However, I'm not quite sure how to
> configure the users file to invoke this modules on a certain user
> name. For example, what does one use for "Auth-Type :="?

  "example"

> I don't see any obvious Auth-Type definitions in dictionary file for
> this.

  Because the names are automatically created at run-time, based on
the module names.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Configuring Server for Access-Challenge Response

2004-03-16 Thread Alan DeKok
"Eng, Joseph" <[EMAIL PROTECTED]> wrote:
> Per previous suggestion I'm trying to use the rlm_example module to
> implement a challenge-response. However, I'm not quite sure how to
> configure the users file to invoke this modules on a certain user
> name. For example, what does one use for "Auth-Type :="?

  "example"

> I don't see any obvious Auth-Type definitions in dictionary file for
> this.

  Because the names are automatically created at run-time, based on
the module names.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Configuring Server for Access-Challenge Response

2004-03-16 Thread Eng, Joseph
Per previous suggestion I'm trying to use the rlm_example module to implement a 
challenge-response. However, I'm not quite sure how to configure the users file to 
invoke this modules on a certain user name. For example, what does one use for 
"Auth-Type :="? I don't see any obvious Auth-Type definitions in dictionary file for 
this. I added an entry "example {}" in the modules section of the radiusd.conf file to 
load the example library, but I 'm not sure what to do next. Any help would be 
appreciated.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Configuring Server for Access-Challenge Response

2004-03-11 Thread Alan DeKok
"Eng, Joseph" <[EMAIL PROTECTED]> wrote:

> How does one configure the server to generate an Access-Challenge
> response when it gets an Access-Request from the client?

  It's automatically defined by the protocol you're using.

> I do not want to use CHAP or MS-CHAP or any extentions like
> EAP. Basically, I have a situation where I want the Radius client to
> accept a user name and password and sends an Access-Request message
> to the server, using the User-Password attribute. The server would
> then send an Access-Challenge response with some message in the
> Reply-Message attribute. The Radius client uses this message to
> prompt the user and send the new result to the server with another
> Access-Request message. Based on the new info, the server would
> would return accept or reject.

  See rlm_example, which is an example module which does exactly this.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html