New radius user.

2004-04-05 Thread Aoun Shah
Hi all, I want to test radius for authenticating users on WLAN and ethernet. The scenario for ethernet is User(Ethernet Switch)[Radius Server] In my Scenario when a user plugs his laptop to any port of the switch.The switch asks user to

RE: PEAP w/MS-CHAPv2:: Wireless Authentication against Windows AD as user profile storage

2004-04-05 Thread Jack J
If one has Supplicant (client) configured for EAP-PEAP w/ MS-CHAPv2 and on FreeRADIUS (or any other RADIUS server) configured to terminate PEAP w/MS_CHAPv2, but user profiles are stored on Active Directory. Does FreeRADIUS support this ? If userprofile is on LDAP I think it would work since

RE: PEAP w/MS-CHAPv2:: Wireless Authentication against Windows AD as user profile storage

2004-04-05 Thread Steve OBrien
If userprofile is on LDAP I think it would work since LDAP bind/search would return userPassword attribute, where as AD does not. Thus CHAP cannnot be done in AD case. Is this true ? Does anyone know how the LDAP lookup works against AD? Does it actually get the password (doubtful) or does it

Re: PEAP w/MS-CHAPv2:: Wireless Authentication against Windows AD as user profile storage

2004-04-05 Thread Alan DeKok
Jack J [EMAIL PROTECTED] wrote: If one has Supplicant (client) configured for EAP-PEAP w/ MS-CHAPv2 and on FreeRADIUS (or any other RADIUS server) configured to terminate PEAP w/MS_CHAPv2, but user profiles are stored on Active Directory. Does FreeRADIUS support this ? Yes, but AD

Re: Proxy by realm and by IP and accounting data

2004-04-05 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I have been working with setting up proxying by realm and/or IP range. It seems to be working well. What IP range? Of the NAS? Is it possible to force that realm to be written to the detail file (and my SQL backend) when the request is proxied by IP? Don't do

Re: Cisco+FreeRadius+MySQL

2004-04-05 Thread Ciolo_-^DusT^-_WebMaster
A part for some problems in installing sqlcounter over a FreeBSD system I think that you should only follow the indication in slqcounter doc... Now I'm trying to set up other kinds of users... for example ones is a user that can navigate for 24h starting by the first login... if somebody have

Re: PEAP w/MS-CHAPv2:: Wireless Authentication against Windows AD as user profile storage

2004-04-05 Thread Steve OBrien
Question: Can FreeRADIUS use ntlm_auth from Samba to make this happen ? or Kerberos? TIA, Steve