Re: access-challenge question

2004-11-04 Thread Alan DeKok
"Matt" <[EMAIL PROTECTED]> wrote:
> Ok, I will look elsewhere for client info.  But what about my server
> question?  In freeradius, how do I set the RADIUS packet code to 11?

  If you're trying to send a challenge for the same reasons as your
last message, the answer is you're wasting your time.
Access-Challenge doesn't work that way.

  If you want to challenge the client as part of an authentication
protocol, the answer is that the protocol is already supported in
FreeRADIUS, and you don't have to do anything additional to make the
server send challenges.

  If you're trying to write your own authentication protocol using
Access-Challenge, then I suggest discussing that, first.  Once the
protocol is designed correctly, then you can configure the server to
use it.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: access-challenge question

2004-11-04 Thread Matt
Ok, I will look elsewhere for client info.  But what about my server
question?  In freeradius, how do I set the RADIUS packet code to 11? So that
when a client contacts the server, an access-challenge will be issued?  Can
you help me with the correct syntax?  I assume it is done in the users file.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok
Sent: Wednesday, November 03, 2004 10:45 PM
To: [EMAIL PROTECTED]
Subject: Re: access-challenge question 

"Matt" <[EMAIL PROTECTED]> wrote:
> First, I am new to the RADIUS protocol, and appreciate your help.  I'm
> working with a python web-interface and a remote server running
> freeradius-current.  Using the web-interface, I'm trying to get the client
> to print very verbose information about the transaction with the server
(as
> verbose as possible).

  I suggest asking the authors of the python code how to get debugging
information from the client.  This has nothing to do with FreeRADIUS.

> I believe I need to print more detail about the client side.

  So... fix the client, or ask the people who wrote the client to fix
it.

> Any advise on getting more verbose/complete output from the client
> side is much appreciated.

  Ask the people who wrote the client.  Don't ask here, I doubt anyone
here can help you.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: access-challenge question

2004-11-03 Thread Alan DeKok
"Matt" <[EMAIL PROTECTED]> wrote:
> First, I am new to the RADIUS protocol, and appreciate your help.  I'm
> working with a python web-interface and a remote server running
> freeradius-current.  Using the web-interface, I'm trying to get the client
> to print very verbose information about the transaction with the server (as
> verbose as possible).

  I suggest asking the authors of the python code how to get debugging
information from the client.  This has nothing to do with FreeRADIUS.

> I believe I need to print more detail about the client side.

  So... fix the client, or ask the people who wrote the client to fix
it.

> Any advise on getting more verbose/complete output from the client
> side is much appreciated.

  Ask the people who wrote the client.  Don't ask here, I doubt anyone
here can help you.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


access-challenge question

2004-11-03 Thread Matt








Hello,

 

First, I am new to the RADIUS protocol, and appreciate your
help.  I’m working with a python web-interface and a remote server
running freeradius-current.  Using the web-interface, I’m trying to
get the client to print very verbose information about the transaction with the
server (as verbose as possible).  I have tried putting the following along
with the username and password (in the users file):

 

Reply-Message  = "%Z"

 

This does print verbose output, but only from the
server.  I have also tried putting the server in debug mode.  I
believe I need to print more detail about the client side.  Is it possible
to get more by responding to access-request with a access-challenge?  I don’t
know how to specify an access-challenge, rather than the default access-accept. 
The RFC stated that setting the “code to 11” would result in an
access-challenge.   How do you set the code to 11?  Any advise
on getting more verbose/complete output from the client side is much
appreciated.