Re: Wireless clients, Cisco leap, Radius Samba

2003-09-20 Thread Alan DeKok
Alan Munday [EMAIL PROTECTED] wrote: Not able to find any refs to EAP-TTLS in Windows XP or Cisco's ACU wireless clients. Does this require a third party option? Unfortunately, yes. Windows XP ships with PEAP, which is an idiotic protocol. It's more complicated than TTLS, and does

Re: Wireless clients, Cisco leap, Radius Samba

2003-09-19 Thread Alan DeKok
Alan Munday [EMAIL PROTECTED] wrote: However the radius server also has Samba running on it and I want to = have the clients auth against this data. I have edited radiusd.conf to include a passwd module to use the Samba passwd file. Not according to the debug output you printed. However

RE: Wireless clients, Cisco leap, Radius Samba

2003-09-19 Thread Alan Munday
To: [EMAIL PROTECTED] Subject: Re: Wireless clients, Cisco leap, Radius Samba Alan Munday [EMAIL PROTECTED] wrote: However the radius server also has Samba running on it and I want to = have the clients auth against this data. I have edited radiusd.conf to include a passwd module to use the Samba

Re: Wireless clients, Cisco leap, Radius Samba

2003-09-19 Thread Alan DeKok
Alan Munday [EMAIL PROTECTED] wrote: 1) I currently have: passwd etc_smbpasswd { .. In the modules section of radiusd.conf. Now you have mentioned it I can see that it is not loading. But I'm not sure why not. Because you didn't tell the server where to use it. List it in the

RE: Wireless clients, Cisco leap, Radius Samba

2003-09-19 Thread Alan Munday
yet? Regards Alan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: 19 September 2003 20:57 To: [EMAIL PROTECTED] Subject: Re: Wireless clients, Cisco leap, Radius Samba Alan Munday [EMAIL PROTECTED] wrote: 1) I currently have

Re: Wireless clients, Cisco leap, Radius Samba

2003-09-19 Thread Alan DeKok
Alan Munday [EMAIL PROTECTED] wrote: Uncommenting the etc_smbpasswd causes and error on starting the daemon: radiusd.conf[772] Failed to link to module 'rlm_passwd': file not found Then build it, and install it. See 'src/modules/rlm_passwd' You probably want to do: $ ./configure

RE: Wireless clients, Cisco leap, Radius Samba

2003-09-19 Thread Alan Munday
Sent: 19 September 2003 21:42 To: [EMAIL PROTECTED] Subject: Re: Wireless clients, Cisco leap, Radius Samba Alan Munday [EMAIL PROTECTED] wrote: Uncommenting the etc_smbpasswd causes and error on starting the daemon: radiusd.conf[772] Failed to link to module 'rlm_passwd': file not found

Wireless clients, Cisco leap, Radius Samba

2003-09-18 Thread Alan Munday
Hi I think I'm starting to go around in circles. I thought a post may therefore save a bit of my sanity. I have a number of clients, XP and Pocket PC based, that I use Cisco wireless LAN adapters. I have these authenticate using leap with the WAP which in turn uses FreeRadius (0.9.1). When I put

Cisco LEAP + MS Active Directory

2003-08-14 Thread Brian Cheatham
I have downloaded and compiled the latest freeradius with the LDAP module and I am trying to configure Cisco LEAP for my wireless clients to Auth. through the freeradius server on Solaris 8to a MS Active Directory domain. First of all, am I barking up the wrong tree. Is this even possible??? I've

Re: freeradius 0.9 and LDAP and cisco LEAP

2003-08-11 Thread Fran Boon
[EMAIL PROTECTED] wrote: It's look like problem is in (configure: warning: FAILURE: rlm_ldap requires: liblber.) but i don't know what can i do. Can somebody help me ? liblber comes as part of the OpenLDAP package. Questions: When i would like to authenticate users from active directory per

freeradius 0.9 and LDAP and cisco LEAP

2003-08-07 Thread svarc
Hi all, first of all i would like to sorry my english. Well, where is a problem. I have server with debian (woody) [Linux version 2.4.20 ([EMAIL PROTECTED]) (gcc version 2.95.4 20011002 (Debian prerelease)) #2 SMP Wed Jun 11 23:16:47 CEST 2003] on this server i installed freeradius 0.9

Re: freeradius 0.9 and LDAP and cisco LEAP

2003-08-06 Thread Alan DeKok
[EMAIL PROTECTED] wrote: configure: warning: silently not building rlm_ldap. configure: warning: FAILURE: rlm_ldap requires: liblber. ... It's look like problem is in (configure: warning: FAILURE: rlm_ldap requires: liblber.) but i don't know what can i do. Can somebody help me ? Install

Re: Cisco leap problem with pre3

2003-07-19 Thread Alan DeKok
Jeremy Salch [EMAIL PROTECTED] wrote: I created it again and this time it showed up as follows ... Which is exactly the same set of error messages. I couldn't seem to make it happen in -X mode. Which makes things difficult. Try: radiusd -f Debug mode *with* threads. See which

RE: Cisco leap problem with pre3

2003-07-19 Thread Jeremy Salch
I'm using it with A MySQL backend which is on the same server I'll give that a try and report back what I find. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Saturday, July 19, 2003 9:51 AM To: [EMAIL PROTECTED] Subject: Re: Cisco

Cisco leap problem with pre3

2003-07-18 Thread Jeremy Salch
When about 12 clients are logging in using leap to a AP I get this error in the radius logfile And at the same time on the AP I get No EAP response from server and then Failed EAP-Authentication Fri Jul 18 14:33:05 2003 : Auth: Login OK: [drright] (from client GDC-T1-AP2 port 13 cli

Re: Cisco leap problem with pre3

2003-07-18 Thread Alan DeKok
Jeremy Salch [EMAIL PROTECTED] wrote: Fri Jul 18 14:33:10 2003 : Error: Discarding new request from client GDC-T1-AP2:4849 - ID: 136 due to live request 88 This has nothing to do with LEAP. Something is causing the server to block, and stop processing the request. The client re-tries, and

RE: Cisco leap problem with pre3

2003-07-18 Thread Jeremy Salch
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Friday, July 18, 2003 4:20 PM To: [EMAIL PROTECTED] Subject: Re: Cisco leap problem with pre3 Jeremy Salch [EMAIL PROTECTED] wrote: Fri Jul 18 14:33:10 2003 : Error: Discarding new request from client GDC

RE: Cisco leap problem with pre3

2003-07-18 Thread Jeremy Salch
: Cisco leap problem with pre3 Jeremy Salch [EMAIL PROTECTED] wrote: Fri Jul 18 14:33:10 2003 : Error: Discarding new request from client GDC-T1-AP2:4849 - ID: 136 due to live request 88 This has nothing to do with LEAP. Something is causing the server to block, and stop processing

RE: Cisco leap problem with pre3

2003-07-18 Thread Paul Hampson
From: Jeremy Salch Sent: Saturday, 19 July 2003 7:28 AM Well.. Actually. I spoke too soon. I tried running all of the clients through re-authentication again.. And after Having all 12 clients re-authenticate a couple of times in a relatively short time I get the following Fri Jul 18

RE: Cisco leap problem with pre3

2003-07-18 Thread Jeremy Salch
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Hampson Sent: Friday, July 18, 2003 4:42 PM To: [EMAIL PROTECTED] Subject: RE: Cisco leap problem with pre3 From: Jeremy Salch Sent: Saturday, 19 July 2003 7:28 AM Well.. Actually. I spoke too soon. I tried

RE: Cisco leap problem with pre3

2003-07-18 Thread Paul Hampson
From: Jeremy Salch Sent: Saturday, 19 July 2003 7:53 AM I created it again and this time it showed up as follows Error: Discarding new request from client GDC-T1-AP1:4370 - ID: 187 due to live request 78 Fri Jul 18 16:44:55 2003 : Error: Discarding new request from client GDC-T1-AP1:4371

Cisco Leap and Lockout

2003-05-31 Thread pcsd
Hi, I have setup freeradius cvs with LEAP on an SuSE 8.0 intel PC. Is it possible to lockout out users for a specified amount of time (say 1 hour) who type their passwords incorrectly after 3 attempts? The reenable them after that lockout period. Darren Sign up today for your Free E-mail at:

Re: Cisco LEAP and FreeRadius

2003-05-30 Thread Miroslav Petricek
On Thu, May 29, 2003 at 09:41:56PM +1000, Luke Walshe wrote: test Auth-Type := Local, User-Password == pass, Service-Type = Framed-User Try test Auth-Type := eap, User-Password == pass Service-Type = Login-User It works. Thank you. -- /* Miroslav Petricek

Cisco LEAP and FreeRadius

2003-05-29 Thread Miroslav Petricek
Hi, all I would like to configure FreeRadius to allow LEAP based authentication between Cisco client, Cisco AP350 ans FreeRadius server. My configuration: freeradius-snapshot-20030528, compiled on Red Hat Linux 7.3 raddb/users file: test Auth-Type := Local, User-Password == pass,

RE: Cisco LEAP and FreeRadius

2003-05-29 Thread Luke Walshe
: Thursday, 29 May 2003 8:49 PM To: [EMAIL PROTECTED] Subject: Cisco LEAP and FreeRadius Hi, all I would like to configure FreeRadius to allow LEAP based authentication between Cisco client, Cisco AP350 ans FreeRadius server. My configuration: freeradius-snapshot-20030528, compiled

Re: Instructions on howto setup Cisco LEAP with FreeRadius

2003-04-04 Thread Alan DeKok
david tran [EMAIL PROTECTED] wrote: So how would I set the users file so that LEAP will work since the way I am doing it is NOT what you recommended. should I configure the user to be like this: dtran Auth-Type := local, User-Password == 123456 No. You're telling it to ignore EAP, and

Re: Instructions on howto setup Cisco LEAP with FreeRadius

2003-04-03 Thread david tran
: david tran [EMAIL PROTECTED] wrote: This is the instruction on how to setup Cisco LEAP with FreeRadius. I am NOT an expert with FreeRadius so I am sure this howto has shortcomings in it. Please feel to make comments and changes to the documentation. I've taken a look at the default

Re: Instructions on howto setup Cisco LEAP with FreeRadius

2003-03-31 Thread Alan DeKok
david tran [EMAIL PROTECTED] wrote: This is the instruction on how to setup Cisco LEAP with FreeRadius. I am NOT an expert with FreeRadius so I am sure this howto has shortcomings in it. Please feel to make comments and changes to the documentation. I've taken a look at the default

Re: Cisco LEAP username and password in FreeRadius

2003-03-30 Thread michael . kopp
From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: Cisco LEAP username and password in FreeRadius Date: Sat, 29 Mar 2003 14:32:01 -0500 Reply-To: [EMAIL PROTECTED] david tran [EMAIL PROTECTED] wrote: User dtran also has a Unix account,dtran, on the FreeRadius Server and I

Re: Cisco LEAP username and password in FreeRadius

2003-03-30 Thread Alan DeKok
[EMAIL PROTECTED] wrote: LEAP uses MS-CHAP for authentication. As a result, it's impossible to combine System authentication with LEAP. ... I`d like to know is this a limitation of freeradius or of the leap protocol ? It's a limitation of MS-CHAP, as I tried to point out. See the FAQ

Re: Cisco LEAP username and password in FreeRadius

2003-03-29 Thread Alan DeKok
david tran [EMAIL PROTECTED] wrote: User dtran also has a Unix account,dtran, on the FreeRadius Server and I would like to use that account and password for Cisco LEAP instead of having to specify a different password in the users file. LEAP uses MS-CHAP for authentication. As a result

Cisco LEAP username and password in FreeRadius

2003-03-28 Thread david tran
-Password == 123456 With this configuratiion, LEAP works fine. User dtran also has a Unix account,dtran, on the FreeRadius Server and I would like to use that account and password for Cisco LEAP instead of having to specify a different password in the users file. However, if I do this: dtran Auth

Instructions on howto setup Cisco LEAP with FreeRadius

2003-03-28 Thread david tran
This is the instruction on how to setup Cisco LEAP with FreeRadius. I am NOT an expert with FreeRadius so I am sure this howto has shortcomings in it. Please feel to make comments and changes to the documentation. I just know that this instruction works for me. Last but not least, many thanks

Sample Cisco LEAP configuration file for FreeRadius

2003-03-25 Thread David Tran II
Hi All, I know that I am supposed to RTFM; however, I am still having problem with Cisco LEAP configuration. Can someone in this group posted a sample configuration for Cisco LEAP so that I can use it as a starting point? I am using the latest CVS file and I made the following changes

Re: Sample Cisco LEAP configuration file for FreeRadius

2003-03-25 Thread Alan DeKok
David Tran II [EMAIL PROTECTED] wrote: I know that I am supposed to RTFM; however, I am still having problem with Cisco LEAP configuration. Can someone in this group posted a sample configuration for Cisco LEAP so that I can use it as a starting point? There's no need. READ the debugging

Cisco LEAP

2003-03-24 Thread David Tran II
Hi Everyone, I am wondering if anyone get FreeRadius to work with Cisco LEAP. I understand that LEAP is a Cisco Proprietary; however, I think I saw a post in recent weeks that someone get it to work with Cisco LEAP. If you don't mind, can you share the configuration file and what needed

Re: Cisco LEAP

2003-03-24 Thread Alan DeKok
David Tran II [EMAIL PROTECTED] wrote: I am wondering if anyone get FreeRadius to work with Cisco LEAP. I understand that LEAP is a Cisco Proprietary; however, I think I saw a post in recent weeks that someone get it to work with Cisco LEAP. If you don't mind, can you share the configuration

Re: Cisco LEAP

2003-03-24 Thread FreeRadius
On Monday 24 March 2003 08:11 am, Alan DeKok wrote: David Tran II [EMAIL PROTECTED] wrote: I am wondering if anyone get FreeRadius to work with Cisco LEAP. I understand that LEAP is a Cisco Proprietary; however, I think I saw a post in recent weeks that someone get it to work with Cisco

Re: cisco leap

2003-03-23 Thread Alan DeKok
Lionel Gavage [EMAIL PROTECTED] wrote: Can we use leap EAP type with md5 EAP type fixed as default_eap_type ? Not right now. The EAP request doesn't specify which method it's trying to use for authentication. So the server has to pick ONE eap method for ALL eap requests. Alan DeKok. -

Re: cisco leap

2003-03-20 Thread Dmitri Belimov
Hi has anyone used cisco leap from CVS yet ? Yes, It is work fine! With my best regards, Dmitri. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: cisco leap

2003-03-20 Thread FreeRadius
Awesome! On Thursday 20 March 2003 07:06 am, Dmitri Belimov wrote: Hi has anyone used cisco leap from CVS yet ? Yes, It is work fine! With my best regards, Dmitri. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe

Re: cisco leap

2003-03-20 Thread FreeRadius
Could I See your configuration files? I can't seem to get it to work On Thursday 20 March 2003 07:06 am, Dmitri Belimov wrote: Hi has anyone used cisco leap from CVS yet ? Yes, It is work fine! With my best regards, Dmitri. - List info/subscribe/unsubscribe? See http

Re: cisco leap

2003-03-20 Thread Alan DeKok
FreeRadius [EMAIL PROTECTED] wrote: Could I See your configuration files? I can't seem to get it to work You've got to set 'default_eap_type = leap' Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

cisco leap

2003-03-18 Thread FreeRadius
has anyone used cisco leap from CVS yet ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CISCO LEAP

2002-11-15 Thread Jeremy Salch
to get Freeradius working with CISCO LEAP? It can't. Not yet anyway. LEAP is a Cisco Proprietary EAP type to cisco.. Yes. you'll have to shell out the cash for this one. I don't think that's necessarily true. Someone just have to write a FreeRADIUS module for it. There are public

Re: CISCO LEAP

2002-11-14 Thread Alan DeKok
Jeremy Salch [EMAIL PROTECTED] wrote: Does anyone know how to get Freeradius working with CISCO LEAP? It can't. . LEAP is a Cisco Proprietary EAP type to cisco.. you'll have to shell out the cash for this one. Either to buy Cisco's RADIUS server, or to pay someone to implement

CISCO LEAP

2002-11-13 Thread Mike Paneth
We are about to setup a wireless network based on CISCO 1200 APs and need to control access. Does anyone know how to get Freeradius working with CISCO LEAP? Mike Paneth Melbourne Australia

Re: CISCO LEAP

2002-11-13 Thread Jeremy Salch
On Wednesday 13 November 2002 06:52 pm, Mike Paneth wrote: We are about to setup a wireless network based on CISCO 1200 APs and need to control access. Does anyone know how to get Freeradius working with CISCO LEAP? It can't. . LEAP is a Cisco Proprietary EAP type to cisco.. you'll

Re: CISCO LEAP

2002-11-13 Thread Lars Viklund
On Wed, 2002-11-13 at 16:06, Jeremy Salch wrote: On Wednesday 13 November 2002 06:52 pm, Mike Paneth wrote: We are about to setup a wireless network based on CISCO 1200 APs and need to control access. Does anyone know how to get Freeradius working with CISCO LEAP? It can't

Radius for Cisco LEAP

2002-10-24 Thread Nikhil Chauhan
Hi: I'm in the process of implementing Cisco's LEAP protocol. I have to pick-up a Radius server which can support the same. Does Freeradius support Cisco's LEAP implementation? If yes, do we have any available "HOWTO - Configuration"/Documentation. If no, what's the best alternative Radius to

Re: Radius for Cisco LEAP

2002-10-24 Thread Jeremy Choi
thanks Jeremy Choi eMail: [EMAIL PROTECTED] Tel: 852 - 3123 1283 Fax: 852 - 2218 2212 56/F The Center 99 Queen's road central Hongkong - List info/subscribe/unsubscribe? See

Re: Radius for Cisco LEAP

2002-10-24 Thread Alan DeKok
Nikhil Chauhan [EMAIL PROTECTED] wrote: Does Freeradius support Cisco's LEAP implementation? No. If yes, do we have any available HOWTO - Configuration/Documentation. Any such docs would be distributed with the server. If no, what's the best alternative Radius to use in this case.

Re: Radius for Cisco LEAP

2002-10-24 Thread Jeremy salch
http://www.mtghouse.com On Thursday 24 October 2002 05:13 am, Nikhil Chauhan wrote: Hi: I'm in the process of implementing Cisco's LEAP protocol. I have to pick-up a Radius server which can support the same. Does Freeradius support Cisco's LEAP implementation? If yes, do we have any

Re: Cisco LEAP/EAP authentication

2002-07-03 Thread Alan DeKok
Jerry Kemp [EMAIL PROTECTED] wrote: What is the current status of FreeRadius and Cisco Leap authentication?? It's not implemented, and no one is working on it. As always, patches are welcome. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html