Cross realms

2004-03-29 Thread James
Hi everybody, I'm a student doing an internship at the Politecnico di Torino. We're developing a Wi-Fi platform which makes use of freeradius for the authentication. I need some information about how the multiple domains authentication is done by freeradius. Thank you all. P.S: for the moder

RE: FreeRADIUS with Cisco hardware for VoIP

2004-03-29 Thread Arne Scheffer
Jerome, please check the radius.conf file. There is an option to support the cisco pairs: with_cisco_vsa_hack Arne. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jérôme Warnier Sent: maandag 29 maart 2004 20:04 To: freeradius-users Subject: FreeRADIUS

freeradius,eap/tls,win xp sp-1 problem

2004-03-29 Thread rinaldo.bergamini
II'm trying to set up a eap/tls system, I followed howtos and docs on freeradius website, but I get is that error from the eap module. My system: -freeradius 0.9.3 (tarball release) -cisco 350 series AP -pcmcia cisco aironet 350 on a windows xp sp1 supplicant I'm mostly sure that certificates set

Re: fast connect support in Free Radius {Scanned}

2004-03-29 Thread AMDAAT SYSTEM ADMINISTRATOR
Sorry please disregard my last post. I replied to the wrong email.     - Original Message - From: Htin Hlaing To: [EMAIL PROTECTED] Sent: Tuesday, March 30, 2004 11:11 AM Subject: fast connect support in Free Radius {Scanned} Hi,   I am wondering if

Re: fast connect support in Free Radius {Scanned}

2004-03-29 Thread AMDAAT SYSTEM ADMINISTRATOR
Not sure. I just set it up and let it run.   - Original Message - From: Htin Hlaing To: [EMAIL PROTECTED] Sent: Tuesday, March 30, 2004 11:11 AM Subject: fast connect support in Free Radius {Scanned} Hi,   I am wondering if FreeRadius EAP_TLS has

fast connect support in Free Radius

2004-03-29 Thread Htin Hlaing
Hi,   I am wondering if FreeRadius EAP_TLS has support for session reuse or does it always have to restart from scratch for reauthentications?   Thanks, Htin

OK what's the best way....

2004-03-29 Thread Steve OBrien
I have a user database in microsoft AD, I can currently use ldaps to validate users for VPN and ssh but I can't seem to get around the wireless thing.  Right now we use LEAP with Cisco ACS for wireless authentication.  I am not against moving to PEAP or EAP-TLS or Kerberos.  Any one know which of

Is multi-factor authentication possible?

2004-03-29 Thread Dan
Config: Windows XP Pro SP1 (Supplicant) Linksys WAP54G v2.06 WPA (Radius)/AES (Authenticator) Solaris 8 w/ OpenSSL 0.9.7d w/ Freeradius snapshot 20040328 (Authentication server) I have EAP-TLS working fine, and client CRL also works! Woo-hoo! I then tried EAP-PEAP, and that also works. Yes! I

Funk Odessey 802.1x Supplicant

2004-03-29 Thread Paul Hampson
Has anyone had any luck making this client work? I couldn't get it to work using EAP-TTLS, although as soon as I instead tried SecureW2 (Alfa & Ariss), the client got in fine... Sadly, Alfa & Ariss only provides WPA for Windows XP, so I'm wondering if there's an EAP-TTLS/negotiated WPA key solutio

Re: R: MySQL accounting and Cisco-AVPair

2004-03-29 Thread Jérôme Warnier
Le ven 26/03/2004 à 11:24, Pugnaloni Federico a écrit : > I've found an old patch to cisco_vsa_hack > http://lists.cistron.nl/pipermail/freeradius-devel/2001-August/001181.html This patch (well, a modified version) has already been applied to the 0.9.2 version in Debian Sarge/Sid. I rebuild FreeRAD

RE: single RADIUS server <---> two NASes

2004-03-29 Thread Jeremy Davis
> Hi! > > I'm already running RADIUS together with: mpd(pptp vpn server), > users are checked against smbpasswd, required fields are taken from > "users", accounting is stored in PostgreSQL database. > > what I want to do: > > I want to implement two VPN servers, different Framed-IP-Address > for

RE: single RADIUS server <---> two NASes

2004-03-29 Thread Jeremy Davis
Why do you need the logging to go to 2 different databases. Can't you just pull records based on the NAS device, or is there another reason for doing this? Jeremy > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Ilia E. > Chipitsine > Sent: Monday, Ma

FreeRADIUS with Cisco hardware for VoIP

2004-03-29 Thread Jérôme Warnier
I'm searching for FreeRADIUS with Cisco hardware for VoIP. Specifically, I'm having trouble with the cisco-av-pair stuff. I read somewhere that Peter Nixon had experience in this, but can't find him. Thanks to help. -- Jérôme Warnier Consultant BeezNest http://beeznest.net - List info/subscrib

linking to rlm_exec under Cygwin

2004-03-29 Thread Sandra McConathy
I'm running Cygwin version 1.5.9-1 and freeradius-0.9.3 or freeradius-snapshot-20040326. The reason for the snapshot version is to have all of the eap flavors available. Freeradius configures and makes cleanly but when I run radiusd.exe -X I get the following error: Radiusd.conf[1241] Failed to

Re: Help with LDAP authorization using groupOfNames and huntgroups

2004-03-29 Thread Casey Forbes
On Mon, 29 Mar 2004, Kostas Kalevras wrote: > > rad_recv: Access-Request packet from host 127.0.0.1:40092, id=100, > > length=59 > > User-Name = "cforbes" > > User-Password = > > NAS-IP-Address = 255.255.255.255 > > > Huntgroup matching with this value for NAS-IP-Address wi

Re: LDAP LEAP and Freeradius

2004-03-29 Thread Steve OBrien
Well I am using MS Active Directory and am able to get LDAP authentication to work, but I don't think it stores clear text passwords in AD. Thanks, Steve Kostas Kalevras <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 03/29/2004 07:18 AM Please respond to [EMAIL PROTECTED] To [EMAIL

writing a c++ module

2004-03-29 Thread Aurelien Magniez
Hi, I'm working on a new module which is written in C++. I found a old thread about writing module in c++ and freeradius : http://lists.cistron.nl/pipermail/freeradius-devel/2002-July/003181.html It seems that freeradius allows c++ modules now ? So, I tried to compile it using g++. It appears for

Re: Help with LDAP authorization using groupOfNames and huntgroups

2004-03-29 Thread Kostas Kalevras
On Fri, 26 Mar 2004, Casey Forbes wrote: > Hello, > > I'm having a lot of trouble getting my freeradius (CVS snap 20040323) > to Allow/Deny access based on membership in LDAP groups (where the > group names are associated with huntgroups). rlm_ldap docs and the mailing > list archive didn't help m

Re: LDAP LEAP and Freeradius

2004-03-29 Thread Kostas Kalevras
On Fri, 26 Mar 2004, Steve OBrien wrote: > Is it possible to use LDAP to authenticate LEAP clients? If so does anyone have the > particulars? > TIA, > Steve > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > If you have clear text passwords in your ldap and set

Re: [solved] FreeRADIUS + Extreme Networks: no administrative login :(

2004-03-29 Thread JG
hi, just for the archive, i found the problem after hours of trying/debugging and then with the help of this site: http://www.extremenetworks.com/services/documentation/ExtremeWareUser622-Chapter03.asp#pgfId-27130 everything was setup fine and correctly, but the users-file had an incorrect synta

Re: how to specify MSCHAP users passwrod is stored in LDAP

2004-03-29 Thread Kostas Kalevras
On Mon, 29 Mar 2004, Sayantan Bhowmick wrote: > hi > please someone tell me how someone can specify that MSCHAP password are > stored in a LDAP directory. > thanks > sayantan bhowmick > you just need to extract the user clear text password from the corresponding ldap entry in the authrize section

Re: FOR FREERADIUS DEVELOPERS: Building FreeRADIUS under Cygwin

2004-03-29 Thread Frank Seesink
Alan DeKok wrote: Frank Seesink <[EMAIL PROTECTED]> wrote: Good news: FreeRADIUS BUILDS UNDER CYGWIN!!! With NO modifications! That's nice to hear. Bad news: 'make install' fails. That shouldn't be much of a problem. I've copy/pasted the end of the output at the end of this message. It

single RADIUS server <---> two NASes

2004-03-29 Thread Ilia E. Chipitsine
Hi! I'm already running RADIUS together with: mpd(pptp vpn server), users are checked against smbpasswd, required fields are taken from "users", accounting is stored in PostgreSQL database. what I want to do: I want to implement two VPN servers, different Framed-IP-Address for each VPN server. A

Re: start freeradius on boot

2004-03-29 Thread Marc Werner
which linux-distribution do you use? Marc Am Montag, 29. März 2004 13:51 schrieb Sander Groenhaut: > Hello, > > I would like FreeRadius to boot automatically when the system starts, > but I don't get it. Does anybody know > how to make it? > > Sander > > Encuentra lo que buscas en la Guía de

start freeradius on boot

2004-03-29 Thread Sander Groenhaut
Hello, I would like FreeRadius to boot automatically when the system starts, but I don't get it. Does anybody know how to make it? Sander Encuentra lo que buscas en la Guía de Empresas y Profesionales LYCOS-QDQ http://qdq.lycos.es/buscador.cfm?pCliente=lycos

Answer Time: "Waking up in 16 seconds..."

2004-03-29 Thread Miguel Diez
We've freeradius as proxy server, and I see 2 problems: 1) When we receive an Access-Request from a client with incorrect password/invalid user, freeradius proxy sends it to the final radius and the final answer an Access-Reject very quick, but the freeradius proxy delays the answer to the client

how to specify MSCHAP users passwrod is stored in LDAP

2004-03-29 Thread Sayantan Bhowmick
hiplease someone tell me how someone can specify that MSCHAP password are stored in a LDAP directory.thankssayantan bhowmick

eap-sim config?

2004-03-29 Thread Alex Wang
hi guys~ I have installed the snapshot-20040322. I don't know how to config the eap_sim in eap.conf. is there anyone kindly give me any suggestion or an example about that? thanks in advance   alex

Re[2]: rlm_perl detaches when radius runs out of memory

2004-03-29 Thread Aivis Olsteins
Hello Boian, thank you very much for information. I think attachment did not go through. Can you please repost it or mail to [EMAIL PROTECTED] thank you. Monday, March 29, 2004, 11:28:40 AM, you wrote: BJ> On Sun, Mar 28, 2004 at 08:09:56PM +0300, Aivis Olsteins wrote: >> Hello, >> >> I would

Re: rlm_perl detaches when radius runs out of memory

2004-03-29 Thread Boian Jordanov
On Sun, Mar 28, 2004 at 08:09:56PM +0300, Aivis Olsteins wrote: > Hello, > > I would like to ask if anybody could explain how detaching works with > perl module. We had following entry in log file, after which radius > was running but not responding to any requests. > > Sat Mar 27 16:04:00 2004 :