Send a message to the dialup user

Hi all, Can a message be sent to the end user trying to logon while the authentocation is done by the server (or while the user is connected) ? We have two types of end user connections, (1) Dialup from MW-WIndows dialer. (2) DSL connections. many thanks Ayman Alashquar - List

EAP-TTLS-EAP-*

Howdie, I am trying to get EAP-TTLS-EAP-* working... but I keep running into the following with any EAP type within EAP-TTLS. rlm_eap_tls: Length Included eaptls_verify returned 11 eaptls_process returned 7 rlm_eap_ttls: Session established. Proceeding to decode tunneled attributes.

FreeRADIUS, MySQL, IP Pools

Hi All, My first post so please be gentle :) We've been having a few problems with pupils joining our LAN using their own kit. Although we'd like to allow this at some stage (under our rules obviously) we'd like this to be done in a sensible, secure way. Now I have set up a FreeRADIUS box on

Re: FreeRADIUS, MySQL, IP Pools

The answer depends on your dhcp server (and not) ;) I think. Did you check in your DHCP server manuals if it supports this type of attribute? What is your DHCP server? By the way, it is usually possible that your pupils might give an IP manually, it is not so secure to trust only to the DHCP

I want add mac address authentication to my radius config.

Hi all, I've a single and simple question. I hope u can help me. I'm using Freeradiud and Cisco Cat series switch. I've done the configuration between freeradios and switch. Now using username password auth. everythings is ok. But I want to check client's macaddress at radius server. Username

RE: EAP-TTLS-EAP-*

Ok, I have had a look at the code and as far as I can see the following occurs: - TTLS handshake successful - TTLS tunnels decrypt inner EAP-Identity message - EAP-Identity is sent to inner EAP-MD5 Module - Inner EAP-MD5 module generates EAP Access-Challenge message - The EAP-TTLS module looks

Wireless

Hello, from Romania. Does anyone knows if AEGIS client software works with freeradius EAP server? I know that there is a free client (alpha stage?) on linux, but how about windows? Thank you. o ~ // // / __ \ // \ //

Re: Wireless

It does. I tested it with eap-ttls and it worked ok. Julius Igugu SouthWork Co. LtdHoria Chirculescu [EMAIL PROTECTED] wrote: Hello, from Romania.Does anyone knows if AEGIS client software works with freeradiusEAP server? I know that there is a free client (alpha stage?) on linux,but how about

RE: EAP-TTLS-EAP-*

Ok, I changed a few thing in the code and got it working for inner EAP-MD5. But EAP-MSCHAPV2 is giving me trouble but I think this is because the EAP-MSCHAPV2 is quite different as it generates it's own MPPE keys and so forth which might be screwing up the connection... All I really want to

denying access to a NULL realm

Hello devel :) Most of my users will be able to migrate between different realms, thus I want to force them to use full [EMAIL PROTECTED] string as User-Name. I found the notrealm parameter that is documented as this: - notrealm: By default if a realm is matched, it will be proxied to the

expiration feature

Is it possible to send additional radius attributes for expired accounts other than simply rejecting them? What I want to do is to send a special radius attribute (cisco access list) that I will only let the user to connect to account renewal page if the account of user is expired. Any

help about Accounting message

Hello, I have searched this file radclient but I didn't find it. I look up to this file : /freeradius-0.9.3/raddb/clients.conf /freeradius-0.9.3/raddb/clients And i didn't find anything Could you tell me more ? My problem : I want to know if it is possible to send accounting_start and

Re: Wireless

Horia Chirculescu [EMAIL PROTECTED] wrote: Hi, JuliusCan you please be more specific? What was actually your setup/hardwarethat you used? Freeradius CVS version on redhat 9.0 (compiled with experimental modules) What type of Wireless AP did you use, YDI's AP+ Access Point (confidured 802.1x

Re: EAP-TTLS-EAP-*

Tom Rixom [EMAIL PROTECTED] wrote: I am trying to get EAP-TTLS-EAP-* working... but I keep running into the following with any EAP type within EAP-TTLS. ... I took a quick look at the EAP-TTLS module, and discovered some curious things. I think I've fixed them, so if you could grab the

Re: EAP-TTLS-EAP-*

Tom Rixom [EMAIL PROTECTED] wrote: - The EAP-TTLS module looks at the Access-Challenge and generates a = RLM_MODULE_HANDLED return code - The EAP-TTLS module looks at the return code, and because = RLM_MODULE_HANDLED is not handled=20 it generates an error and the authentication fails...

Snapshot 226 of FreeRadius - Segmentation fault on ldap bind

While attempting to do an ldap bind FreeRadius seg faulted. Can anyone help ? Has anyone else seen this ? Thanks, Ron. modcall[authorize]: module backslash returns noop for request 5 rlm_realm: Request already proxied. Ignoring. modcall[authorize]: module realmpercent

Re: Problem with mschapv2

Badger David [EMAIL PROTECTED] wrote: I am attempting to authorise/authenticate xp supplicant to an NT4 domain through a cisco AP. The server doesn't support that. Freeradius-snapshot-20040302 is compiled with experimental modules and eap is configured to utilise the rlm_smb module,

Re: peap + freeradius093 + Windows XP : module eap returns handled

Wilfried QUET [EMAIL PROTECTED] wrote: Now it's better with the Nt-Hash password with 0x in preffix but I've got a TLV failure ... as pretty much the last line in the debug log. The point of having the debug messages is to READ ALL OF IT. If you're only reading the last few lines, you'll

Re: PEAP : FAILED: MS-CHAP2-Response is incorrect

Wilfried QUET [EMAIL PROTECTED] wrote: In users file : totoAuth-Type :=3D EAP, User-Password === 0x7666F0D93535E6C2F6A3DDAD29A7EF55 Are you *sure* that's the user's password? It looks like something else to me, like a hashed password. Alan DeKok. - List

Re: help about Accounting message

On Fri, Mar 05, 2004, Bruno JEREMIE wrote: My problem : I want to know if it is possible to send accounting_start and accounting_stop messages with freeradius. I have to send accounting_start and accounting_stop messages to a cisco router called csg. In order to do this, I use NatPing.

Re: Any Reviews of Free Radius?

Prasenjit Medhi [EMAIL PROTECTED] wrote: Are there any good web reviews on FreeRadius? I don't know. Try Google. And does FreeRadius have a web/gui based admin and configuration tool? Yes... see the server archive. And how good is Free Radius in comparison to say IC Radius? IC Radius

users file parse error

I am trying to bring up verion 0.9.3 on linux and I am having a problem with the users file. I used create-users.pl 1 to create a users file and I am getting the following error msg when starting radiusd: Module: Loaded files files: usersfile = /usr/local/etc/raddb/users files:

Re: help about Accounting message

You can use the program radclient to send an accounting message. Do a man radclient. On Fri, 5 Mar 2004, Bruno JEREMIE wrote: Hello, I have searched this file radclient but I didn't find it. I look up to this file : /freeradius-0.9.3/raddb/clients.conf /freeradius-0.9.3/raddb/clients

RE: Snapshot 226 of FreeRadius - Segmentation fault on ldap bind

Looks like its a problem when FR tries to talk on port 636 SSL to an ldap server. -Original Message- From: Ron Wahler Sent: Friday, March 05, 2004 11:50 AM To: [EMAIL PROTECTED] Subject: Snapshot 226 of FreeRadius - Segmentation fault on ldap bind While attempting

UPCASE all incoming passwords

Title: UPCASE all incoming passwords All, Has anyone ever configured the server to UPCASE all incoming access-request etc. The database I am using was all in UPCASE so I want to UPCASE all incoming to match the DB Dave

Re: expiration feature

On Fri, Mar 05, 2004 at 05:26:40PM +0200, Evren Yurtesen wrote: Is it possible to send additional radius attributes for expired accounts other than simply rejecting them? What I want to do is to send a special radius attribute (cisco access list) that I will only let the user to connect to

Re: I want add mac address authentication to my radius config.

You will want something like this in your /usr/local/etc/raddb/users file. testuser Auth-Type := Local, User-Password == testuser, Calling-Station-Id == 00-20-A6-4D-10-33 Session-Timeout = 600, Trapeze-VLAN-Name = corp,

Re: users file parse error

Victor Valencia wrote: I was not able to find any ideas from the archive although one other user had experienced this issue but did not get a response. Any suggestions on what I should look at?? victor and i have been having a sidebar discussion since i was the user that didn't get a

Re: Any Reviews of Free Radius?

- Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, March 06, 2004 2:03 AM Subject: Re: Any Reviews of Free Radius? And does FreeRadius have a web/gui based admin and configuration tool? Yes... see the server archive. Thanks for taking

Radius - segmentation fault

Hello! After a couple of time that I have tried to setup radius and windows xp for PEAP - mschapv2 communication with no success, I decided to try the EAP/TLS with client certificate and so on. There is also the eap/tls howto so I was thinking this can be done, if the PEAP not :|. But it

PEAP + windows XP

Hello! :( Can someone, who has configured Windows XP using PEAP - MS-CHAPv2 and freeradius send me the radius.conf, users files and describe the windows xp config? And a sample radiusd -X output of saccessful authentification. Thanx a lot!!! P.Zibrita :| - List info/subscribe/unsubscribe?