Re: PEAP starting form EAP/TLS

2004-05-12 Thread Alan DeKok
BLANCA FERRERO RODRIGUEZ <[EMAIL PROTECTED]> wrote: > I have eap/tls authorization configured in my system and I would > like to know if configuring PEAP from this point would be very > difficult. It's easy. > Does anyone know any good HOWTO to help me with the configuration of > PEAP ? Unco

Re: [PATCH] Using the Experimental EAP-Type under FreeRADIUS

2004-05-12 Thread Alan DeKok
=?iso-8859-1?q?Aurelien=20Magniez?= <[EMAIL PROTECTED]> wrote: > After analyzing the FreeRADIUS sources, I observed > that only 29 methods are supported. In other words, it > seems that the EAP-Type should be included in the > interval [1; 29]. This observation doesn't allow us to > use the Experim

Re: nas and client.conf

2004-05-12 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > I have different clients with dynamic ip addresses and want enter this > in the postgressql database. And bind a user with a specific client > but the ip-address of the client is dynamic ?! Clients can't be listed in SQL. See clients.conf for examples of listing cli

ldap!

2004-05-12 Thread iceman09 iceman
everybody:    hi!    i got a problem.i want to use ldap to charge for database.The ldap is oracle internet directory.can i use the scheme which the freeradius gives ?    And i don't quite unstand the \freeradius-0.9.3\raddb\radiusd.conf file .Espetially the ldap configure section.My

Re: PEAP failure

2004-05-12 Thread Alan DeKok
=?ISO-8859-1?Q?Manuel_S=E1nchez_Cuenca?= <[EMAIL PROTECTED]> wrote: > rlm_mschap: No User-Password configured. Cannot create NT-Password. > rlm_mschap: doing MS-CHAPv2 for lolo with NT-Password > rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. PEAP (and mschap) need

Not necessarily a FreeRadius question, but maybe someone can help

2004-05-12 Thread Richard Greasley
Hello FreeRadius users, Apart from Freeside, are there any other Free/GPL software which can do statistical report on the Accounting log file? I'm currenrly using radiusContext and Freeside, but I wanted to know if there are any other tools out there that I may have missed. Thanks in advanced, Ric

problem with the ml?

2004-05-12 Thread jesk
... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Win XP Client using PEAP

2004-05-12 Thread Paul Khavkine
Hi folks. I'm trying to authenticate WinXP clients using a Vivato Wi-Fi switch using EAP-PEAP. The server configuration seems to be same as i have seen from people that say they have PEAP working with Win XP. Any clues weither it is the server misconfiguration or the AP that is not working. Th

PEAP with winXP client

2004-05-12 Thread Paul Khavkine
Hi folks. I'm trying to authenticate WinXP clients using a Vivato Wi-Fi switch using EAP-PEAP. The server configuration seems to be same as i have seen from people that say they have PEAP working with Win XP. Any clues weither it is the server misconfiguration or the AP that is not working. Th

realms

2004-05-12 Thread jesk
hi again, i got a username with realms like this: realm1/foobar%realm2 is there a way to use realm2 as proxy realm local and get realm1 stripped away? i dont want realm1 for authorizing, authentication and accounting. thanks in advance, christian - List info/subscribe/unsubscribe? See http://

PEAP starting form EAP/TLS

2004-05-12 Thread BLANCA FERRERO RODRIGUEZ
I have eap/tls authorization configured in my system and I would like to know if configuring PEAP from this point would be very difficult. Does anyone know any good HOWTO to help me with the configuration of PEAP ? thank you bfr - Mensaje original - De: Alejandro Bonilla <[EMAIL PROTEC

Re: access for eap/tls

2004-05-12 Thread Alan DeKok
BLANCA FERRERO RODRIGUEZ <[EMAIL PROTECTED]> wrote: > I'm tryng authentication with eap/tls. It works propertly but my > doubt is: if I try to connect with a user called 'proof' for example > and it is not included in my users file, should it be allowed to > connect to the network despite having a

Re: Gentoo and FreeRADIUS

2004-05-12 Thread Alan DeKok
"Jeff Bilder" <[EMAIL PROTECTED]> wrote: > I emerged just fine. I just cant get the radius server to authenticate > using PAM... Anyone do this? Thanks! Not recently, but configure the pam module, and see the "redhat" directory for example pam services entry. Alan DeKok. - List info/sub

Re: eap-peap and sql

2004-05-12 Thread Alan DeKok
"Omar Garcia" <[EMAIL PROTECTED]> wrote: > I'd like to ask you one question about the posibility of consigure > eap-peap and sql. > My idea is configure a authentication method using eap-peap and sql. Grab the latest CVS snapshot, and use it. Look for "sql" in "radiusd.conf", and un-comment the

Re: Proxy Problem with attrs and Cisco-AVPair

2004-05-12 Thread Alan DeKok
Ben Butler <[EMAIL PROTECTED]> wrote: > Just tried something out of desperation and commented out EAP in post-proxy, > and guess what, cooking with gas. It's a bug in 0.9.3, which is fixed in the latest CVS snapshots. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.

[PATCH] Using the Experimental EAP-Type under FreeRADIUS

2004-05-12 Thread Aurelien Magniez
Hi, After analyzing the FreeRADIUS sources, I observed that only 29 methods are supported. In other words, it seems that the EAP-Type should be included in the interval [1; 29]. This observation doesn't allow us to use the Experimental EAP-Type whose value is 255 thanks to the RFC 2284bis. A litt

Re: eap-peap and sql

2004-05-12 Thread Gary McKinney
Omar,   You really want to read the aaa.txt file contained in the docs directory in the freeradius installation package - it details how and what is used for authentication, authorization and other information you need!   Check it out!!   Gary McKinney   - Original Message - Fro

nas and client.conf

2004-05-12 Thread traix
Hi i am an freeradius newbi and have some problems. I have different clients with dynamic ip addresses and want enter this in the postgressql database. And bind a user with a specific client but the ip-address of the client is dynamic ?! Problem first- which entry must i do for a client in the d

username matching CN problems

2004-05-12 Thread Anthony Lopez
Hey Everyone, I have eap.conf configured with check_cert_cn = %{User-Name} But even if the username is different than the CN the user still gets access-accepted. Here are some clips of my debug show that the names don't match Mon May 10 17:47:34 2004 : Info: --> User-Name = bob Mon May 10 17:

PEAP failure

2004-05-12 Thread Manuel Sánchez Cuenca
Hello all, Can anybody tell me which means this error when using peap: rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: doing MS-CHAPv2 for lolo with NT-Password rlm_mschap: FAILED: No NT/LM-P

help!!

2004-05-12 Thread iceman09 iceman
everybody:    hi!    i got a problem.i want to use ldap to charge for database.The ldap is oracle internet directory.can i use the scheme which the freeradius gives ?    And i don't quite unstand the \freeradius-0.9.3\raddb\radiusd.conf file .Espetially the ldap configure section.My

test

2004-05-12 Thread Paul Blaich
please ignore - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[PATCH] Using the Experimental EAP-Type under FreeRADIUS

2004-05-12 Thread Aurelien Magniez
Hi, After analyzing the FreeRADIUS sources, I observed that only 29 methods are supported. In other words, it seems that the EAP-Type should be included in the interval [1; 29]. This observation doesn't allow us to use the Experimental EAP-Type whose value is 255 thanks to the RFC 2284bis. A litt