Re: 802.1x: PEAP + MS-CHAPv2

i just went through this. change: users # tester Auth-Type :=MS-CHAP, User-Password == test to Auth-Type: Local and let the radius server do its job. i got rather scolded for fiddling with the auth-type. --brian - List info/subscribe/unsubscribe? See

Cisco VoIP gw + FreeRadius + prepaid card (fwd)

Hi, ALL! anybody do whis? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Manuals and guides about Freeradius

Hi, I'm new with Freeradius, and I don't wont to write annoying message to the list :) I'm looking for pdf or manual over the internet that explain radius concept and make example freeradius oriented. I've already downloaded and printed the manual reported in the README that comes with freeradius

Re: 802.1x: PEAP + MS-CHAPv2

Brian Clarkson wrote: i just went through this. change: users # tester Auth-Type :=MS-CHAP, User-Password == test to Auth-Type: Local and let the radius server do its job. i got rather scolded for fiddling with the auth-type. --brian - List info/subscribe/unsubscribe?

Segfault with eap-tls

When I try to authenticate with a WinXP supplicant using tls I get a segfault in freeRadius. I'm using the CVS snapshot from yesterday. Here is the relevant output from gdb: (gdb) bt #0 eaptls_compose (eap_ds=0xd, reply=0xbfffda70) at eap_tls.c:537 #1 0x4004a963 in eaptls_start

Re: 802.1x: PEAP + MS-CHAPv2

I will give some aditional informations about the main objective of the setup, in hope, anybody set up it and it work. I want to use the Windows-XP and/or Windows 2000 included 802.1x Supplicant to authenticate the wireless cient's on the Radius-Server with a username and password phrase. I

Is: 802.1x EAP-TTLS + PAP Was: 802.1x: PEAP + MS-CHAPv2

Hello Christian! Christian Richter wrote: I will give some aditional informations about the main objective of the setup, in hope, anybody set up it and it work. [...] Recapitulating the following target should be reached: - 802.1x Authentication with username and password - secure

Memory Leak

Hello all: I'm running freeradius-0.9.3 on RedHat Linux 9. Recently I ran MemProf (Memory Profiler) against freeradius. It showed quite a *number* of instances of memory leak (involving ip_getaddr() ). Below is one snapshot. Leaked 0x80f85d8 (40 bytes) [0x40018809]

md5-passwords in mysql db did not work

Hi, I have problems to authenticat against md5-passwords in a mysql database. On my Redhat Box I have this config: After I created a md5-password with cryptpasswd script und put it into the usersfile the authentication was no problem. test Auth-Type := Local, Crypt-Password ==

Re: Is: 802.1x EAP-TTLS + PAP Was: 802.1x: PEAP + MS-CHAPv2

Rok Pape wrote: Hello Christian! Have you looked at EAP-TTLS + PAP with SecureW2 (WinXP and W2k): http://www.alfa-ariss.com/products/product31.htm Hi Rok, i have installed the tool and configured the radius server. The Client is running good and works well. But what configuration options have

Re: Problem with EAP/TLS

Hi, I've realized a new test with WindowXP-SP1 client, a Cisco AP1200 (IOS 12.2(11)JA) and my FreeRadius server (snapshot 2004-01-12). I've the same result : Access-Request seem Ok and come in the radius server but it's a access-Reject that is reply ! Thank for your help. Jean-Paul. See

Re: Cisco VoIP gw + FreeRadius + prepaid card (fwd)

anybody do whis? Yes =) But I'm used MCCP soft. This soft used CISCO VSA =) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_passwd usage?

Dear Dan Hollis, --Thursday, January 22, 2004, 2:15:24 AM, you wrote to [EMAIL PROTECTED]: DH If I have a flatfile of the format DH user:unix-crypted-password:someotherstuff:morestuff DH The proper format would be DH format = DH

Re: Problem: apache mod_auth_radius

Alan DeKok wrote: Alan DeKok [EMAIL PROTECTED] wrote: This is explained in the README which comes with the server. I meant apache module. How could I miss this section from README?! Thanks! Tanel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Exec-Program problem..

On Thu, 2004-01-22 at 14:25, Andrei Loukinykh wrote: SNIP What changes happens with external program execution when FR runs in debug mode? When run in debug mode, AFAIK freeradius doesn't drop root priviliges. What user/group does your freeradius run as when started without -X -- Regards,

Re: Cisco VoIP gw + FreeRadius + prepaid card (fwd)

Please what is needed to do CISCO VoIP with IVR ? Thanks --- Norguhtar [EMAIL PROTECTED] wrote: anybody do whis? Yes =) But I'm used MCCP soft. This soft used CISCO VSA =) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP methods

On Thu, 22 Jan 2004, Artur Hecker wrote: hi list if i understand correctly, FR currently does not support EAP method restrictions per user (john is to use EAP/TLS but jack is to use PEAP/CHAPv2, etc) alan, would that be difficult to integrate? are there plans to integrate this? (i know

Re: Is: 802.1x EAP-TTLS + PAP Was: 802.1x: PEAP + MS-CHAPv2

Rok Pape wrote: SecureW2 supports _only_ EAP-TTLS + PAP. For the client have a look at Alfa Ariss user guides. Yes, i know. The other settings i used only for testing purposes. Only PAP will work ! Did you disable server certificate check in SecureW2 client ? Yes, all is disabled as described

Help! Ascend-Disconnect-Cause=2 .

Hello! Using freeradius all our users fors fine, but when I try to log in with realm ([EMAIL PROTECTED]) our TNT rejects call after one second. See logs below. Description: I written my own module for registration and logging information about all events special for my database. Module

Re: Exec-Program problem..

Thu, 22 Jan 2004, Dennis Roos (): On Thu, 2004-01-22 at 14:25, Andrei Loukinykh wrote: SNIP What changes happens with external program execution when FR runs in debug mode? When run in debug mode, AFAIK freeradius doesn't drop root priviliges. What user/group does your freeradius run

Re: 802.1x: PEAP + MS-CHAPv2

Hello. In programming language, the paket from the AP to Radius will encapsulated like: RADIUS ( EAP ( MSCHAPv2 ) ) I think it will be like this: radius - eap - tls - peap - mschapv2 If anyone have set up this authentication method completely working, please post all relevant stuff, you will

freeradius with nomadix

there's somebody who already experimented freeradius with nomadix... If so... can you help me giving me suggestions in how to configure freeradius to work with nomadix in the better way? thanx a lot byez CioloWeb

Re: EAP methods

hi kostas thanks for the fast reply. Search the dictionary for the EAP-Type attribute and it's values. You can set it during the authorize phase in order to do a per user selection of the EAP method. i've searched my dictionary files for EAP and i have neither EAP-Type nor a general EAP-TLS or

Re: 802.1x: PEAP + MS-CHAPv2

Eugene Kandlen wrote: Hello. In programming language, the paket from the AP to Radius will encapsulated like: RADIUS ( EAP ( MSCHAPv2 ) ) I think it will be like this: radius - eap - tls - peap - mschapv2 authorize { preprocess may be mschap here? not needed eap files }

Re: EAP + System passwords?

[EMAIL PROTECTED] (Nathan Coraor) wrote: That was posed as a question because that was a guess. It indicated a return 1 and then didn't log anything else... that lead me to believe that was not the intended behaviour. The server told you that it was sending a challenge to the client.

Re: 802.1x: PEAP + MS-CHAPv2

Brian Clarkson [EMAIL PROTECTED] wrote: i just went through this. change: users # tester Auth-Type :=MS-CHAP, User-Password == test to Auth-Type: Local No. Do NOT set Auth-Type at all! For EAP, the server will figure it out on its own. Alan DeKok. - List

Re: EAP + System passwords?

Alan DeKok said: No. You're making a mistake. You believe you know how EAP-TLS works, so you're surprised when it doesn't work as expected. The solution is to educate yourself as to how EAP-TLS works, and then you won't be surprised. See the HOW-TO's on

Re: Proxying based on Dialed No and no Username.

Firas Shalabi [EMAIL PROTECTED] wrote: I have Radius server Ver. 0.9.3 , we want to proxy the accounting info to a remote radius based on Dialed No, no username will be sent to the radius, I managed to proxy the accounting requests but with username attribute available using the default Relam

Re: Manuals and guides about Freeradius

Master Brian [EMAIL PROTECTED] wrote: I'm looking for pdf or manual over the internet that explain radius concept and make example freeradius oriented. I've already downloaded and printed the manual reported in the README that comes with freeradius distro. There is anything else over the

Re: Exec-Program problem..

Andrei Loukinykh [EMAIL PROTECTED] wrote: I'm trying to get my external program to work ( which is in fact - a billing program for users' accounting) Which version are you using? If you're not using 0.9.3, upgrade to it, and then see if the problem persists. Alan DeKok. - List

Re: EAP methods

rtur Hecker [EMAIL PROTECTED] wrote: radius:~/freeradius-snapshot-20030212/share$ grep EAP dict* Huh? In the CVS head (not 0.9.3), you can do: bob EAP-Type == MD5-Challenge, Auth-Type := Reject Reply-Message = EAP-MD5 is insecure. Go away

Re: problem with pptpd+freeradius

Georgi Ivanov [EMAIL PROTECTED] wrote: Hello list i have freeradius+pptpd+mysql , my problem is: i was install radius plugin , but radius dont answer , no connection between radius and pptpd I could swear this was in the FAQ... Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Exec-Program problem..

Thu, 22 Jan 2004, Alan DeKok (): Andrei Loukinykh [EMAIL PROTECTED] wrote: I'm trying to get my external program to work ( which is in fact - a billing program for users' accounting) Which version are you using? If you're not using 0.9.3, upgrade to it, and then see if the problem

Re: Problem with EAP/TLS

Jean-Paul Chapalain [EMAIL PROTECTED] wrote: I've realized a new test with WindowXP-SP1 client, a Cisco AP1200 (IOS 12.2(11)JA) and my FreeRadius server (snapshot 2004-01-12). I've the same result : Access-Request seem Ok and come in the radius server but it's a access-Reject that is

Re: EAP methods

hi thanks Alan... as Kostas's already pointed out, i should update my dictionary at least once in a lifetime :-) thanks once again, it perfectly solves my problem. In the CVS head (not 0.9.3), you can do: yeah, the name of the directory was terribly misleading... sorry. ciao artur bob

Using MD5 hashed passwords

Hi, Here's what I want to do : - EAP-TTLS or PEAP authentication with login/password in the second phase (no EAP-TLS) - Users are stored in the local Freeradius Database with Crypt-password attributes (MD5 hashed, because logins and passwords come from a Unix User Database) - Authentication

Re: Using MD5 hashed passwords

Christophe Saillard [EMAIL PROTECTED] wrote: Here's what I want to do : - EAP-TTLS or PEAP authentication with login/password in the second phase (no EAP-TLS) - Users are stored in the local Freeradius Database with Crypt-password attributes (MD5 hashed, because logins and passwords come

Re: Using MD5 hashed passwords

there is no way to use CHAP - envelopped in whatever - with crypted passwords. the only remaining way is thus PAP, if you insist on hashed passwords. PEAP does not support PAP. = use EAP-TTLS/PAP and you can use crypted passwords locally. CHAP *is* already a hash. it thus needs the original

Re: Help using rlm_passwd and rlm_krb5 with a huntgroup?

Matt Garretson [EMAIL PROTECTED] wrote: My problem is for cases when a user is to be authenticated by rlm_krb5 as determined by huntgroup, but also happens to exist in the passwd file. In this case, the user's password is checked against the passwd file entry before rlm_krb gets called. This

EAP methods

hi list if i understand correctly, FR currently does not support EAP method restrictions per user (john is to use EAP/TLS but jack is to use PEAP/CHAPv2, etc) alan, would that be difficult to integrate? are there plans to integrate this? (i know that patches are always welcome :-)) anyway,

Try to Compile FreeRadius 0.9.3 On Cygwin

I am having a good deal of trouble trying to get FreeRadius 0.9.3 compiled under Cygwin on Windows 2000. I have been unable to patch the files as per the CYGWIN document, and attempted compiles keep crashing. Does anybody have the FreeRadius source already patched for Cygwin? -- Aaron Clausen

Re: Help! Ascend-Disconnect-Cause=2 .

Dear Alan! Alex Radetsky [EMAIL PROTECTED] wrote: Using freeradius all our users fors fine, but when I try to log in with realm ([EMAIL PROTECTED]) our TNT rejects call after one second. Add a reply attribute: Session-Timeout Attribute 'Session-Timeout' exist in Reply packet VPS. Can

Re: free/open NAS?

just want to ask if there are available free/open NAS NAS for dialin server: pppd,portslave NAS for pptp server: pptpd NAS for VoIP gatekeeper: gnugk What you need? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 802.1x: PEAP + MS-CHAPv2

Alan DeKok wrote: No. Do NOT set Auth-Type at all! For EAP, the server will figure it out on its own. Alan DeKok. Hi. Wich Auth-Type need to be set then, EAP? Or should i let it clear in the users file (fallthrough, DEFAULT will used), like tester User-Password == test ? Christian

Re: 802.1x: PEAP + MS-CHAPv2

Eugene Kandlen wrote: Hi! My config works fine. Do you config also work for the integrated Windows supplicant? (No use of Aegis) If you don't know, can you please test it... Thanks to all for your encouragement! - List info/subscribe/unsubscribe? See