RE: unable to find user

2004-02-03 Thread Cristian Hesselman
I was editing the wrong users file. Beginner's mistake :-( Thanks, Cristian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: maandag 2 februari 2004 20:25 To: [EMAIL PROTECTED] Subject: Re: unable to find user Cristian

Compile error for Cygwin

2004-02-03 Thread Manuel Ricca
When trying to compile freeradius 0.9.3 for Cygwin I get this error: rlm_ippool_tool.o(.text+0x26f): In function `addip': /cygdrive/d/freeradius-0.9.3/src/modules/rlm_ippool/rlm_ippool_tool.c:115: undefined reference to `_inet_pton' collect2: ld returned 1 exit status make[6]: ***

wireless hotspot radius solution

2004-02-03 Thread Manohar Pradhan
Hi all, I am using DLink DSA3100 for hotspot solution and configured this to use RADIUS authentication. I gather I will need to use EAP/TLS for this to deploy complete HOTSPOT concept:"to allow users browse only defined number of hours" and get them authnticated ony using

RE: Compile error for Cygwin

2004-02-03 Thread Manuel Ricca
After all I was able to solve this problem. I had to edit rlm_ippool_tool.c and replace, at line 115: if (inet_pton(AF_INET, ipaddress, ipaddr) == 0) with if (inet_aton(ipaddress, ipaddr) == 0) It should work the same way, as aton() is a specific implementation of pton() for

RE: Radius-2-LDAP

2004-02-03 Thread Dustin Doris
What does it say in your authorization and authentication section? For example, authorize { preprocess suffix files ldap { notfound = return } } authenticate { Auth-Type LDAP { ldap } } On Mon, 2 Feb 2004, Tre

Re: Prefix and Suffix

2004-02-03 Thread Alan DeKok
Doug Hardie [EMAIL PROTECTED] wrote: It may seem like cut paste to you as you are very familiar with the inner workings. It's not just that I'm more familiar with FreeRADIUS, it's that my *methods* mean I take things a step at a time, and follow the included examples. I do this for

Re: Compile error for Cygwin

2004-02-03 Thread Alan DeKok
Manuel Ricca [EMAIL PROTECTED] wrote: After all I was able to solve this problem. I had to edit rlm_ippool_tool.c and replace, at line 115: if (inet_pton(AF_INET, ipaddress, ipaddr) == 0) with if (inet_aton(ipaddress, ipaddr) == 0) Added, thanks. BTW, I'm still getting some errors at

RE: Radreply Implementation Question

2004-02-03 Thread Deramus, Chris
Title: RE: Radreply Implementation Question Chris, I am seeing the following information on incoming Access-Request packets: rad_recv: Access-Request packet from host X.X.X.X:1486, id=14, length=109 User-Name = user.name User-Password = password NAS-Port = 6981 Service-Type =

Re: pooped with PEAP

2004-02-03 Thread Alan DeKok
kartzman [EMAIL PROTECTED] wrote: i'm having trouble getting freeradius server to talk to my WinXP client. I followed the instructions in the HOWTO but it doesn't work. here's the entry in the users file: DOM\\Ewu Auth-Type := EAP , User-Password == password Ok.. Now in the tunneled

RE: clean_radacct integration

2004-02-03 Thread Andrew Staples
We use a national dialup provider, thus they are the passthrough for all radius info between our server and a given NAS. The documentation for naspasswd states that I don't need entries in that file unless I'm using non-smtp queries, but I don't know if that applies in this case. Can anyone make

Re: clean_radacct integration

2004-02-03 Thread Alan DeKok
Andrew Staples [EMAIL PROTECTED] wrote: We use a national dialup provider, thus they are the passthrough for all radius info between our server and a given NAS. The documentation for naspasswd states that I don't need entries in that file unless I'm using non-smtp queries, but I don't know if

Re: Problem with machine authentication on Windows 2000 using freeradius, eap-tls, wireless

2004-02-03 Thread Michael Griego
Take a look in your Certificates MMC for the Local Computer account. If you don't have a certificate in the personal section, what you're trying to do won't work. In other words, the machine itself has to have a certificate as well if you want the wireless interface to come up before you

Re: pooped with PEAP

2004-02-03 Thread Michael Griego
On Tue, 2004-02-03 at 14:50, Michael Gernoth wrote: I think the peap-module needs to use the username without the domain for authentication. Not true... The PEAP module (Especially if you're using EAP-MSCHAPv2 as the inner EAP method) MUST use the full Identity/UserName as sent by the

Re: pooped with PEAP

2004-02-03 Thread Michael Griego
Oh, and as a side note, you need to be using today's snapshot. There was a fix in the rlm_mschap module on Jan 27th that fixed it trying to use the Stripped-User-Name attribute when there was one. Then, there was a typo fix yesterday. Compile today's snapshot and see if it starts working for

RE: Problem with machine authentication on Windows 2000 usingfreeradius, eap-tls, wireless

2004-02-03 Thread Michael Griego
Yup... I have... Works great Based on where you're getting in the authentication, it really looks like you don't have a proper certificate in the computer section... Oh... you're using Win2K... does the certificate CN match the machine name? I discovered that Windows 2000 actually seems to

RE: Problem with machine authentication on Windows 2000usingfreeradius, eap-tls, wireless

2004-02-03 Thread Wieck, Owen
-Original Message- From: Michael Griego [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 03, 2004 4:35 PM To: [EMAIL PROTECTED] Subject: RE: Problem with machine authentication on Windows 2000usingfreeradius, eap-tls, wireless Yup... I have... Works great Based on where

Re: pooped with PEAP

2004-02-03 Thread Michael Gernoth
On Tue, Feb 03, 2004 at 03:21:21PM -0600, Michael Griego wrote: On Tue, 2004-02-03 at 14:50, Michael Gernoth wrote: I think the peap-module needs to use the username without the domain for authentication. Not true... The PEAP module (Especially if you're using EAP-MSCHAPv2 as the inner

RE: Problem with machine authentication on Windows 2000usingfreeradius, eap-tls, wireless

2004-02-03 Thread Wieck, Owen
Just wanted to follow up on this and say thank you! You're answer was right on the money. Machine and user authentication now work as they should. Sadly this means individual certs for each machine which we were trying to avoid for simplicity's sake. Ah, well... I'll be using this as an

Radius Authentication based on realm and IP address only

2004-02-03 Thread [EMAIL PROTECTED]
Hi, I am running freeradius 0.9.3 on redhat 9.0. Our radius servers are used primarily for proxying to other ISP's radius servers. I have one customer who would like to be able to authenticate using realm and the NAS-IP address only. If the realm and NAS-IP address match then an access-accept