Re: RADIUS + LDAP + TLS

2003-06-22 Thread Owen DeLong
> Hiya, > > I'm bit confused. I'd like to use, as I mentioned, RADIUS + LDAP over > encripted comunications (TLS). > > I order to user RADIUS + LDAP I've compiled FreeRadius, but I haven't > installed any OpenLDAP SDK. Then I've configured radiusd.conf as mentioned > in past messages. > > I t

RE: RADIUS + LDAP + TLS

2003-06-20 Thread Kostas Kalevras
On Fri, 20 Jun 2003, Francisco Orozco/Upcnet wrote: > Hiya, > > > StartTLS is an extended operation for starting TLS while connecting to > the > > normal ldap port (389). I would suggest > > start_tls=yes,tls_mode=no and port=389 > > > > I think that the tls_mode directive should go away completel

RE: RADIUS + LDAP + TLS

2003-06-20 Thread Francisco Orozco/Upcnet
Hiya, > StartTLS is an extended operation for starting TLS while connecting to the > normal ldap port (389). I would suggest > start_tls=yes,tls_mode=no and port=389 > > I think that the tls_mode directive should go away completely and > start_tls only > be allowed if we don't use the ldaps por

Re: RADIUS + LDAP + TLS

2003-06-20 Thread Kostas Kalevras
On Fri, 20 Jun 2003, Kostas Kalevras wrote: > On Wed, 18 Jun 2003, Owen DeLong wrote: > > > I don't know how to get TLS to work, but you should be able to do > > SSL by specifying that the LDAP port to use is 669 (LDAPs) in > > your radius.conf. I'm, however, having a similar problem in that > >

RE: RADIUS + LDAP + TLS

2003-06-20 Thread Kostas Kalevras
On Fri, 20 Jun 2003, Francisco Orozco/Upcnet wrote: > Hiya, > > I'm bit confused. I'd like to use, as I mentioned, RADIUS + LDAP over > encripted comunications (TLS). > > I order to user RADIUS + LDAP I've compiled FreeRadius, but I haven't > installed any OpenLDAP SDK. Then I've configured radius

Re: RADIUS + LDAP + TLS

2003-06-20 Thread Kostas Kalevras
On Wed, 18 Jun 2003, Owen DeLong wrote: > I don't know how to get TLS to work, but you should be able to do > SSL by specifying that the LDAP port to use is 669 (LDAPs) in > your radius.conf. I'm, however, having a similar problem in that > I am unable to get it to work because of a complaint abo

RE: RADIUS + LDAP + TLS

2003-06-19 Thread Francisco Orozco/Upcnet
Hiya, I'm bit confused. I'd like to use, as I mentioned, RADIUS + LDAP over encripted comunications (TLS). I order to user RADIUS + LDAP I've compiled FreeRadius, but I haven't installed any OpenLDAP SDK. Then I've configured radiusd.conf as mentioned in past messages. I try it and It works g

RE: RADIUS + LDAP + TLS

2003-06-19 Thread Owen DeLong
I think there must have been some sort of LDAP library on the system where you built FreeRadius. I don't know about TLS. As I said, I was using SSL. I get a different error, telling me that it doesn't like the self-signed certificate. As to installing the CA certificate, that depends on the TLS/S

RE: RADIUS + LDAP + TLS

2003-06-19 Thread Francisco Orozco/Upcnet
Hiya, > When you built rlm_ldap, you needed some sort of LDAP library for > it. Usually, this is OpenLDAP. If you used something else, I'm not > sure what to tell you. In my case, I built FreeRadius and the rlm_ldap > module at the same time. I don't know what you did. I didn't install > a ce

RE: RADIUS + LDAP + TLS

2003-06-18 Thread Owen DeLong
Wednesday, June 18, 2003 10:28 AM To: [EMAIL PROTECTED] Subject: RE: RADIUS + LDAP + TLS No... The OpenLDAP libraries used to build Freeradius already handle all of that for you. At least in my case, it just worked, except for that niggling issue of the self-signed certificate. If your LDAP se

RE: RADIUS + LDAP + TLS

2003-06-18 Thread Ron Wahler
: Wednesday, June 18, 2003 10:28 AM To: [EMAIL PROTECTED] Subject: RE: RADIUS + LDAP + TLS No... The OpenLDAP libraries used to build Freeradius already handle all of that for you. At least in my case, it just worked, except for that niggling issue of the self-signed certificate. If your LDAP server

RE: RADIUS + LDAP + TLS

2003-06-18 Thread Owen DeLong
, June 18, 2003 9:55 AM To: [EMAIL PROTECTED] Subject: RE: RADIUS + LDAP + TLS Yes... Don't remember exactly where I found it, but, if you have LDAP working, then it's just a matter of adding a port=669 phrase to the configuration file (radiusd.conf) where you specify the ldap server. Owen

RE: RADIUS + LDAP + TLS

2003-06-18 Thread Ron Wahler
Yes, but how do you set up the SSL tunnel and get the certificates to validate to the LDAP server? are you using stunnel ? Ron. -Original Message- From: Owen DeLong [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 9:55 AM To: [EMAIL PROTECTED] Subject: RE: RADIUS + LDAP + TLS

RE: RADIUS + LDAP + TLS

2003-06-18 Thread Owen DeLong
ECTED]> wrote: Is there a description someplace that would show how to setup an SSL connection from Freeradius to an external LDAP database. Thanks, Ron. -Original Message- From: Owen DeLong [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 9:05 AM To: [EMAIL PROTECTED] Subject: R

RE: RADIUS + LDAP + TLS

2003-06-18 Thread Ron Wahler
+ LDAP + TLS I don't know how to get TLS to work, but you should be able to do SSL by specifying that the LDAP port to use is 669 (LDAPs) in your radius.conf. I'm, however, having a similar problem in that I am unable to get it to work because of a complaint about a self-signed certificat

Re: RADIUS + LDAP + TLS

2003-06-18 Thread Owen DeLong
I don't know how to get TLS to work, but you should be able to do SSL by specifying that the LDAP port to use is 669 (LDAPs) in your radius.conf. I'm, however, having a similar problem in that I am unable to get it to work because of a complaint about a self-signed certificate. If you have any id

RADIUS + LDAP + TLS

2003-06-18 Thread Francisco Orozco/Upcnet
Hello to all, I've been using FreeRadius for a year, but now I'd like to implement RADIUS with LDAP authentication, I've test it and It works great. Now I'd like to protect radius - ldap server comunication using TLS. But I'm not able to do it. My LDAP server is Notes Domino and I've been ab