Re: Testing EAP-MD5

2003-03-12 Thread Miquel Bordoy
Hi Artur, Sorry, This is the first step of our project. The last step is develop a propietary EAP Authentication Protocol, so we will need create a new windows EAP dll and we will need to program this feature in your free radius. Is it possible ? Is this code free ? Do you know something about

Re: failed logins page on dialup_admin returns blank usernames

2003-03-12 Thread Kostas Kalevras
On Wed, 11 Mar 2003, Nick Lomonte wrote: It will show an entry each time there is a failed login, but just leaves a '-' for the username. The only time it properly displays the login is when I try it from the 'check server' link and it tries to authenticate locally. I also get the address

ftp://ftp.radius.cistron.nl/pub/radius/ timeing out

2003-03-12 Thread Holger Steppke
Hi, could it be that the server is down somehow ? Can not connect anymore... with ftp.. but can connect to other public ftp sites. Bye Holger - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

clients.conf doc

2003-03-12 Thread Pedro Alvarez-Tabío
Hi, I have been asked to setup a RADIUS server and I'm getting into freeRADIUS. I was looking for information about all possible parameters that can be used in a clients.conf entry (vendor, type, ...). No man 5 clients.conf, no document in the doc directory, not too much information in Jonathan

eaptls

2003-03-12 Thread Manuel Sánchez Cuenca
Hello, when I use eaptls freeradius-0.8 show this: ** rad_recv: Access-Request packet from host 127.0.0.1:1025, id=36, length=200 User-Name = adam-ctl NAS-IP-Address = 127.0.0.1

Re: ftp://ftp.radius.cistron.nl/pub/radius/ timeing out

2003-03-12 Thread Miquel van Smoorenburg
In article [EMAIL PROTECTED], Holger Steppke [EMAIL PROTECTED] wrote: could it be that the server is down somehow ? ftp.radius.cistron.nl doesn't exist. YM ftp://ftp.cistron.nl/pub/people/miquels/radius/ Mike. -- Anyone who is capable of getting themselves made President should on no account

RE: eaptls

2003-03-12 Thread Henrik Eriksson
From: Manuel Sánchez Cuenca Sent: Wednesday, March 12, 2003 11:48 AM The only significant error message is the last one: content_type = 21 record_len = 2 TLS 1.0 Alert [length 0002], fatal certificate_expired (SSL_accept) failed in SSLv3 read client certificate A Error in SSL . 1

freeradius and avaya ap-3 problem

2003-03-12 Thread rippyml
Hi, I-m configuring a freeradius server under redhat linux, at the moment only local test are working, I mean, tried with NTradping, radcheck, and I made a simulation connection with cisco catalyst 3250 how an access point. The client windows xp, without SP1 installed, has 802.x protection

RE: ftp://ftp.radius.cistron.nl/pub/radius/ timeing out

2003-03-12 Thread Holger Steppke
Well its there: What i did: I came from http://www.freeradius.org/related/ it links to http://www.radius.cistron.nl/ and there well it links to ftp://ftp.radius.cistron.nl/pub/radius/ Maybe it is due to relative links ro something similar. Also when i go just to http://www.freeradius.org/ and

Re: Testing EAP-MD5

2003-03-12 Thread Artur Hecker
hi Miquel Sorry, This is the first step of our project. The last step is develop a propietary EAP Authentication Protocol, so we will need create a new windows EAP dll and we will need to program this feature in your free radius. Is it possible ? Is this code free ? that's all fine, freeradius

Existing detail files

2003-03-12 Thread Alan Bunch
I am looking for a script that loads old detail files into a radius schema database. I know I have seen this in the past but can't find it now. Anyone have a pointer to one of these ? TIA alabun - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

(no subject)

2003-03-12 Thread Andrey Lakhno
Hello, Is it possible with latest freeradius to write log file with AV pairs of authentication requests and responses ? Like detail for accounting packets. -- Andrey Lakhno, land-ripe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to write auth detail ?

2003-03-12 Thread Andrey Lakhno
Hello, Is it possible with latest freeradius to write log file with AV pairs of authentication requests and responses ? Like detail for accounting packets. -- Andrey Lakhno, land-ripe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: failed logins page on dialup_admin returns blank usernames

2003-03-12 Thread Nick Lomonte
Try out the dialup_admin included in the latest cvs. If that doesn't help send the corresponding radius.log line and I 'll see what I can do. Tried latest CVS, same results it looks likes. Here are some snippets from radius.log: Wed Mar 12 06:39:18 2003 : Auth: Login incorrect:

Re: failed logins page on dialup_admin returns blank usernames

2003-03-12 Thread Kostas Kalevras
On Wed, 12 Mar 2003, Nick Lomonte wrote: Try out the dialup_admin included in the latest cvs. If that doesn't help send the corresponding radius.log line and I 'll see what I can do. Tried latest CVS, same results it looks likes. Here are some snippets from radius.log: Wed Mar 12

md5 passwords

2003-03-12 Thread Vasili G. Yanov
How I can use md5 passwords with freeradius? When I try: user Auth-Type := Local, Crypt-Password == c940ff4dbb2a408e82895b3a70b1a5ba Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 192.168.200.1, Framed-IP-Netmask = 255.255.255.0,

unsubscribe

2003-03-12 Thread Bogdan Rosu
unsubscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unsubscribe

2003-03-12 Thread Kevin Bonner
On Wednesday 12 March 2003 08:31, Bogdan Rosu wrote: unsubscribe Open thine eyes and view the bottom of EVERY message sent on this list. List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See

Authentication Attributes

2003-03-12 Thread Chris Hanrahan
Greetings, I am running FreeRadius 0.8.1 and am trying to configure the users file. Are the authentication attributes, such as Auth-Type, Group, and User-Password documented anywhere ? I've checked the FAQ and the files under the doc directory of the source code and haven't found a complete list

Re: failed logins page on dialup_admin returns blank usernames

2003-03-12 Thread Nick Lomonte
OK do a cvs update on log_badlogins. It did not accept ! as a valid character Ah, works great now. Thanks! About the PHP warning 'address is not in a.b.c.d form', it doesn't appear to hurt anything, but is there something that can be done to clear the error? - List

unsubscribe

2003-03-12 Thread Miquel Bordoy
unsubscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: failed logins page on dialup_admin returns blank usernames

2003-03-12 Thread Kostas Kalevras
On Wed, 12 Mar 2003, Nick Lomonte wrote: OK do a cvs update on log_badlogins. It did not accept ! as a valid character Ah, works great now. Thanks! About the PHP warning 'address is not in a.b.c.d form', it doesn't appear to hurt anything, but is there something that can be done to

EAP-TLS authentication and Certificate Revocation List

2003-03-12 Thread Israel Cardenas Romero
Hello, I'm using FreeRADIUS and OpenSSL for EAP-TLS authentication. It's working correctly, but I don't know how to configure FreeRADIUS to enable CRL (Certificate Revocation List). I make a client's certificate signed by CA and this client can loggin. But if I revoke his certificate, he still

Re: failed logins page on dialup_admin returns blank usernames

2003-03-12 Thread Nick Lomonte
OK I 've changed all calls to gethostbyaddr so that it doesn't print any warnings. Please do a cvs update and see if it works Looks good once again. One last request and I'm done (i hope!): it looks like '@' is another character log_badlogins doesn't like (showing up as blanks in

Re: Mandrake 9.1 binaries.

2003-03-12 Thread Alan DeKok
tarvid [EMAIL PROTECTED] wrote: I wound up running freeradius as root to get around permissions on /etc/shadow. I'd appreciate suggestions on how to make that more secure. Make a 'shadow' group, and don't put anyone in it. Make /etc/shadow group shadow (chgrp), and chmod g+r. Verify

Ingress Filtering with Dynamic Addressing

2003-03-12 Thread Mark Mentovai
Hey! I'm setting up some FreeRADIUS servers as the authentication hosts for a few Lucent/Ascend MAX NAS devices to terminate dialup calls. When I've done this in the past, I assigned IP addresses statically, which made it very easy to build ingress filters specific to each user with the

Re: clients.conf doc

2003-03-12 Thread Alan DeKok
Pedro =?iso-8859-1?Q?Alvarez=2DTab=EDo?= [EMAIL PROTECTED] wrote: I have been asked to setup a RADIUS server and I'm getting into freeRADIUS. I was looking for information about all possible parameters that can be used in a clients.conf entry (vendor, type, ...). No man 5 clients.conf, no

Re: freeradius and avaya ap-3 problem

2003-03-12 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I use how nastype Other because avaya nastype there isn't in the options list. If you're not using Simultaneous-Use on that NAS, then the nastype doesn't matter. how can I make a working connection throught Avaya ap3 and freeradius server?? Read the FAQ, use

Re: Authentication Attributes

2003-03-12 Thread Alan DeKok
Chris Hanrahan [EMAIL PROTECTED] wrote: I am running FreeRadius 0.8.1 and am trying to configure the users file. Are the authentication attributes, such as Auth-Type, Group, and User-Password documented anywhere ? The User-Password is documented in the RFC's. See:

Re: Authentication Attributes

2003-03-12 Thread Chris Hanrahan
If I am running winbindd and specify Group=='vpn_users', will FreeRadius check for a group called "vpn_users" by using winbindd ? No. The 'Group' is only for Unix groups. Is there a way to configure FreeRadius such that it verifies a users's ID and password against an NT domain AND requires that

MySQL connect problem

2003-03-12 Thread Nils Rønhovde
Hi, Is this a rlm_my_sql problem, something else in the radius-server or a problem with my database: Module: Loaded SQL sql: driver = rlm_sql_mysql sql: server = 10.122.95.163 sql: port = 15022 sql: login = radius sql: password = radius sql: radius_db = radius sql: acct_table = radacct

Re: REPOST: partial realm match?

2003-03-12 Thread Robert Haskins
OK, I tried what you said but it doesn't seem to work. This is what I have in my users file: -- DEFAULT User-Name =~ @.*\.isp\.com$, Proxy-To-Realm = isp.com -- In my proxy.conf I have this: -- realm isp.com { type= radius authhost= 1.2.3.4:1645

~Re: MySQL connect problem

2003-03-12 Thread Matt Simpson
What operating system and what version are you using. I ran into a similar problem with a fresh install of RedHat 8.0 and MySQL with glibc. Aparently when you connect to MySQL via anything but localhost it crashes, so in your /etc/my.cnf file make sure you set your thread stack set to 256K in your

Re: (no subject)

2003-03-12 Thread Andrey Lakhno
Hello, On Wed, 12 Mar 2003, Alan DeKok wrote: Andrey Lakhno [EMAIL PROTECTED] wrote: Is it possible with latest freeradius to write log file with AV pairs of authentication requests and responses ? Like detail for accounting packets. It shouldn't be too hard to modify rlm_detail to do

Re: REPOST: partial realm match?

2003-03-12 Thread Kevin Bonner
DEFAULT User-Name =~ @.*\.isp\.com$, Proxy-To-Realm = isp.com Hmm...I'm not too familiar with C regexp syntax, but I wouldtry adding a \ before the @. That's about the only thing I can think of that could potentially be an issue. realm isp.com { type= radius

Re: MySQL connect problem

2003-03-12 Thread tarvid
On Wednesday 12 March 2003 14:53, Nils Rønhovde wrote: Hi, Is this a rlm_my_sql problem, something else in the radius-server or a problem with my database: Module: Loaded SQL sql: driver = rlm_sql_mysql sql: server = 10.122.95.163 sql: port = 15022 sql: login = radius sql: password

mschap auth with ldap

2003-03-12 Thread Jay Lyerly
Hi, I'm trying to set up a radius server to authenticate VPN users connecting via a WatchGuard Firebox. The only external authentication mechanism the Firebox supports is MS-CHAPv2 via Radius. I'd like to use freeradius to access data in our LDAP database. All the steps leading up to the end

Re: Working on the server

2003-03-12 Thread Toni Mueller
Hi, On Tue, Mar 11, 2003 at 05:27:33PM -0500, Alan DeKok wrote: 'make reconfig' should work. that's what I thought (ok, replacing make with gmake on BSD), but Toni Mueller [EMAIL PROTECTED] wrote: $ gmake reconfig autoheader Provide an AUTOCONF_VERSION environment variable, please

RE: REPOST: partial realm match?

2003-03-12 Thread Miranda Gomez Miguel Angel
Hi, this is a simple question, do i need the setting for the counter in the radius.conf's module section if i want to use the slqcounter module, or the last one depends of the first one ?? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

MSCHAPv2 and MSSQL?

2003-03-12 Thread Lucian D Hule
Knows anyone, hot to use freeradius with MSCHAPv2 scheme and mssql (wich is on Windows - MS SQL server, differet machine on lan network) or does anyone has any script ready to work with MSCHAPv2 scheme and mssql database (if it's possible) I need to use radius with ZyXEL ZyXAIR B-2000

hotdrive, The World's REAL Internet Hard Drive!....!

2003-03-12 Thread Ogilvy Brown
Title: HOTDRIVE: The World's Real Internet Harddrive! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authentication Attributes

2003-03-12 Thread Alan DeKok
Chris Hanrahan [EMAIL PROTECTED] wrote: Is there a way to configure FreeRadius such that it verifies a users's ID and password against an NT domain AND requires that a user be in an NT Domain group before issuing an access granted reply ? Source code modifications. See pam_winbind, or Samba

FreeRADIUS + SQL + MD5

2003-03-12 Thread Jeremy Brown
Hello, I have successfuly configured and tested FreeRADIUS with my MySQL schema, everything works great for the most part. The only part I'm having trouble with is getting FreeRADIUS to authenticate off the passwords in the database, which are a traditional (not crypt()) md5 hash. I have seen

Re: (no subject)

2003-03-12 Thread Andrey Lakhno
Hello, On Wed, 12 Mar 2003, Alan DeKok wrote: I think additional parameter should be added to struct detail_instance which point to auth detail file. And function similar to detail_accounting should be writen. Or, generalize the code if it's similar, and call one 'detail print'

RE: rlm_eap: State verification failed

2003-03-12 Thread Philip Blow
Title: Message Klemens, The problem that you are experiencing is a known bug in the Symbol AP-4131 firmware. I pestered Symbol in Australia for a fix and managed to get a fixed version of the firmware on pre-release from the US to test that the problem was fixed. If you log a support call