Re: Problem with sending challenge response

2004-05-17 Thread Alan DeKok
=?iso-8859-1?q?SANDEEP=20KHANNA?= <[EMAIL PROTECTED]> wrote: > Now I want to know how this freh request will be sent > .If I sent it the same way , server takes it as a > normal password and send me a challenge again. Please read the RADIUS RFC's. Specifically, the use of the "State" attribute.

Re: freeradius with dhcp

2004-05-17 Thread Alan DeKok
ro0ot <[EMAIL PROTECTED]> wrote: > Can I configure the system to let freeradius works with dhcp? No, sorry. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius Segmentation Fault on LDAP Bind

2004-05-17 Thread Alan DeKok
Paul Bender <[EMAIL PROTECTED]> wrote: > However, I use OpenLDAP as a central store for account information for > all other services (unix, samba, email, etc). Therefore, I would like > freeradius to get account information from the LDAP server as well. > However, when I configure freeradius to

Re: missing radius.log file

2004-05-17 Thread Graeme Hinchliffe
On Fri, 14 May 2004 13:38:01 -0600 "Evan Stenmark" <[EMAIL PROTECTED]> wrote: > yes, I did a locate radius.log (with a current locate database) as > well as a root directory find but nothing comes up This is very > strange you have to enable it in the configuration file for FreeRADIUS. Graeme >

Access to multiple subdomains via radius apache module

2004-05-17 Thread Robert Szelepcsenyi
Hi, I need to provide access to several web sites on our Intranet to traveling users on the Internet. I have set up a reverse proxy (Apache) and I use the radius module to authenticate users coming from the Internet. The radius module is great, becuase upon successful authentication it puts a

Re: freeradius with dhcp

2004-05-17 Thread M Singh
Why not ? My university implements something that looks like that. A laptop first gets a DHCP lease, and can address a single IP which is presumably the address of the server. Then I fire up the Cisco VPN client that authenticates via an encryption algorithm and then the laptop can access the i

Re: freeradius with dhcp

2004-05-17 Thread Alan DeKok
M Singh <[EMAIL PROTECTED]> wrote: > Why not ? Because "freeradius working with dhcp" means "freeradius knows about dhcp". > My university implements something that looks like that. A laptop first > gets a DHCP lease, and can address a single IP which is presumably the > address of the server

wireless card 802.1x-capable well supported under Linux?

2004-05-17 Thread Ippoliti Giuliano
Hi list, I'm trying to set up a wireless network based on radius authentication for my enterprise. I've successfully tested freeradius with a windows XP client, now I'd like to test it with a Linux client. Could you suggest me a 802.1x-capable wireless card with *stable* drivers under Linux.

Auth-Problem

2004-05-17 Thread Markus Ebel
Hi, i´v e got a authentication-problem with a MAX2000 and freeradius. Connetions-profiles configured on freeradius with CLID a working very well. Only those with username and passwort are making trouble: -- freeradius Debug -- rad_recv: Access-Request packet from

Moving away from Safeword

2004-05-17 Thread Robert Szelepcsenyi
Due to licensing policy of Secure Computing, which forced me to upgrade to deploy a separate machine running just their AAA server, I have decided to move away from their product Safeword Premier Access. I am looking for some replacement for their system of dynamic passwords and tokens. Freerad

Re: Problem with sending challenge response

2004-05-17 Thread SANDEEP KHANNA
Sir thanks ver much for your response, but I have already read the rfc before sending my question. Could u please tell me the exact syntax on sending request with State attribute like I am using radtest to send the original request . thanks --- Alan DeKok <[EMAIL PROTECTED]> wrote: > =?iso-

Re: Problem with sending challenge response

2004-05-17 Thread SANDEEP KHANNA
Sir thanks very much for your response, but I have already read the rfc before sending my question. Could u please tell me the exact syntax on sending request with State attribute like I am using radtest to send the original request . thanks --- Alan DeKok <[EMAIL PROTECTED]> wrote: > =?iso

Re: Problem with sending challenge response

2004-05-17 Thread Alan DeKok
=?iso-8859-1?q?SANDEEP=20KHANNA?= <[EMAIL PROTECTED]> wrote: > Could u please tell me the exact syntax on sending > request with State attribute like I am using > radtest Don't use radtest. Use radclient. READ "radtest". It's just a shell script. Alan DeKok. - List info/subscribe/unsub

Re: wireless card 802.1x-capable well supported under Linux?

2004-05-17 Thread Alan DeKok
"Ippoliti Giuliano" <[EMAIL PROTECTED]> wrote: > Could you suggest me a 802.1x-capable wireless card with > *stable* drivers under Linux. This is more of a question for the client side. Try open1x.org, where they have a Linux wireless client. Alan DeKok. - List info/subscribe/unsubscrib

Reg configuring challenge response

2004-05-17 Thread Barath kumar
Hi, How to configure the free RADIUS server to send an Challenge response to an access request. In other words, what are the configurations to be done on the free RADIUS server such that it sends an challenge response to an access request. By default, will the free RADIUS server send an challe

Re: Moving away from Safeword

2004-05-17 Thread Alan DeKok
Robert Szelepcsenyi <[EMAIL PROTECTED]> wrote: > Due to licensing policy of Secure Computing, which forced me to > upgrade to deploy a separate machine running just their AAA server, > I have decided to move away from their product Safeword Premier > Access. I am looking for some replacement for th

Re: Reg configuring challenge response

2004-05-17 Thread Alan DeKok
Barath kumar <[EMAIL PROTECTED]> wrote: > How to configure the free RADIUS server to send an Challenge response to > an access request. In other words, what are the configurations to be > done on the free RADIUS server such that it sends an challenge response > to an access request. By default,

Re: Moving away from Safeword

2004-05-17 Thread Robert Szelepcsenyi
Hi, Sorry, I was not precise enough in my query. I am looking for a system of *synchronous* dynamic passwords, which use tokens with an internal counter without any chalenge. The password has to be entered before a call is made (either VPN or dialup), so there is no opportunity to recieve a ch

Re: freeradius with dhcp

2004-05-17 Thread ro0ot
Yep, thats what I mean...thanks Alan DeKok, :) Probabily I have to find another solution, :-( Regards, ro0ot Alan DeKok wrote: M Singh <[EMAIL PROTECTED]> wrote: Why not ? Because "freeradius working with dhcp" means "freeradius knows about dhcp". My university implements something that

Re: Moving away from Safeword

2004-05-17 Thread Alan DeKok
Robert Szelepcsenyi <[EMAIL PROTECTED]> wrote: > Sorry, I was not precise enough in my query. I am looking for a > system of *synchronous* dynamic passwords, which use tokens with an > internal counter without any chalenge. The password has to be > entered before a call is made (either VPN or dialu

About Radius Attributes

2004-05-17 Thread Lara Adianto
Hello, I need some information about the following 'service-type' attribute: - Outbound - Administrative - NAS Prompt - Call Check - Callback NAS Prompt 1. In which case will a radius client request for the above service type or which radius clients usually request for the above service-type ? 2

Freeradius with MySQL and Exec-Program-Wait

2004-05-17 Thread Joe Borg
Hi, I’m in the process of seeting up a new RADIUS server using Freeradius. I intend using MySQL for Authorisation and Accounting. As a result, I will not be making use of the ‘users’ file (since MySQL is configured for use in Radiusd.conf, thereby bypassing the use of the users file). My p

Re: Freeradius with MySQL and Exec-Program-Wait

2004-05-17 Thread Paul Hampson
On Mon, May 17, 2004 at 12:14:40PM +0200, Joe Borg wrote: > I'm in the process of seeting up a new RADIUS server using Freeradius. I > intend using MySQL for Authorisation and Accounting. As a result, I will > not be making use of the 'users' file (since MySQL is configured for use > in Radiusd.co

Re: About Radius Attributes

2004-05-17 Thread Alan DeKok
Lara Adianto <[EMAIL PROTECTED]> wrote: > 1. In which case will a radius client request for the > above service type or which radius clients usually > request for the above service-type ? http://www.freeradius.org/rfc/attributes.html Click on "Service-Type", and it will tell you what those v

Re: pool with two ranges

2004-05-17 Thread Alan DeKok
"Juan" <[EMAIL PROTECTED]> wrote: > i have freeradius with various pools, but now i need that one Pool > have two diffrents ranges. Can i do it with freeradius? Yes and no. Each pool can have only one range. But you can create & use two pools, and fail over to the secon done if the first one i

pool with two ranges

2004-05-17 Thread Juan
Hello, i have freeradius with various pools, but now i need that one Pool have two diffrents ranges. Can i do it with freeradius? ippool main_pool { range-start = X.X.X.128 range-stop = X.X.X.151 netmask = 255.255.255.255 ca

RE: Freeradius with MySQL and Exec-Program-Wait

2004-05-17 Thread Joe Borg
Hi Paul, Thanks for the tip. By any chance, would you be able to refer me to some documentation/information on how to go about doing this? I'm still somewhat green to MySQL. Thanks. Joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Hampson Sent: 17

Re: Freeradius with MySQL and Exec-Program-Wait

2004-05-17 Thread Milver S. Nisay
  - Original Message - Hi, I’m in the process of seeting up a new RADIUS server using Freeradius. I intend using MySQL for Authorisation and Accounting. As a result, I will not be making use of the ‘users’ file (since MySQL is configured for use in Radiusd.conf, there

Re: pool with two ranges

2004-05-17 Thread Milver S. Nisay
> Hello, > > i have freeradius with various pools, but now i > need > that one Pool have two diffrents ranges. Can i do > it > with freeradius? YES - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

sql_escape_func not reversible?

2004-05-17 Thread Fabian Ritzmann
Hi, I found that sql_escape_func in rlm_sql.c does not encode the '=' character. That makes it impossible later to decode the string correctly again. If you are looking at e.g. an encoded username "=3B", you don't know whether the unencoded original was ";" or "=3B". Would it be possible to change

Re: Reg configuring challenge response

2004-05-17 Thread Barath kumar
Dear Alan, Thanks for your response. I am using the UDP protocol as the underlying protocol and the MD5 protocol as the authentication protocol to communicate with the RADIUS server. In this case, will the protocol demand for a challenge ?.  In this case, will the RADIUS server send an challe

Re: pool with two ranges (Alan DeKok)

2004-05-17 Thread Juan
Hello Allan DeKok, but failover where, my users are defined like this: nameuser User-Password == "passowrd", Pool- Name := "main_pool" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-Compression = 0, Port-Limit = 1, Idle-Timeout = 0, Sessi

Re: Freeradius-Users digest, Vol 1 #3220 - 12 msgs

2004-05-17 Thread Juan
Hello Allan DeKok, but failover where, my users are defined like this: nameuser User-Password == "passowrd", Pool- Name := "main_pool" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-Compression = 0, Port-Limit = 1, Idle-Timeout = 0, Sessi

Re: Freeradius with MySQL and Exec-Program-Wait

2004-05-17 Thread Paul Hampson
On Mon, May 17, 2004 at 01:40:08PM +0200, Joe Borg wrote: > Thanks for the tip. By any chance, would you be able to refer me to some > documentation/information on how to go about doing this? I'm still > somewhat green to MySQL. Thanks. If you already understand how to use the users file, then the

Re: sql_escape_func not reversible?

2004-05-17 Thread Paul Hampson
On Mon, May 17, 2004 at 02:41:57PM +0300, Fabian Ritzmann wrote: > I found that sql_escape_func in rlm_sql.c does not encode the '=' > character. That makes it impossible later to decode the string correctly > again. If you are looking at e.g. an encoded username "=3B", you don't > know whether the

Multiple Class attributes on Access-Accept

2004-05-17 Thread Claude LeFrancois (QB/EMC)
Hi, Please, can you indicate me how I can configure Freeradius to send more than one Class attribute on Access-Accept messages ? or simply if Freeradius supports such a configuration ? I am using the local "users" file authentication method. The following is an example of my users config file:

Re: sql_escape_func not reversible?

2004-05-17 Thread Fabian Ritzmann
Paul Hampson wrote: > On Mon, May 17, 2004 at 02:41:57PM +0300, Fabian Ritzmann wrote: > > I found that sql_escape_func in rlm_sql.c does not encode the '=' > > character. That makes it impossible later to decode the string > > correctly again. If you are looking at e.g. an encoded username > > "=

EAP-TLS Access-Request and Access-Chalenge questions/problems

2004-05-17 Thread Florian-Daniel Otel
[First, I'm a newcomer to this list. If this was already answered before (although I search through the archives before posting) please appologize and point me to the appropriate resorce] Dear all, Here's "yet another new bee biting the EAP-TLS dust" (tm). My set-up: - Authenticating

Re: Freeradius Segmentation Fault on LDAP Bind

2004-05-17 Thread Paul Bender
Alan DeKok wrote: Paul Bender <[EMAIL PROTECTED]> wrote: However, I use OpenLDAP as a central store for account information for all other services (unix, samba, email, etc). Therefore, I would like freeradius to get account information from the LDAP server as well. However, when I configure free

Re: EAP-TLS Access-Request and Access-Chalenge questions/problems

2004-05-17 Thread Michael Griego
Florian, Do you have the icon in your task bar for you ethernet interface disabled? (The "Show icon on task bar when connected" option in the interface properties should be *enabled*). Windows XP pops up a bubble from that icon when it needs to communicate with the user (for things like acceptin

Re: EAP-TLS Access-Request and Access-Chalenge questions/problems

2004-05-17 Thread Florian-Daniel Otel
Michael, First, thanks for the fast reply. Michael Griego writes: > Florian, > > Do you have the icon in your task bar for you ethernet interface > disabled? (The "Show icon on task bar when connected" option in the > interface properties should be *enabled*). Windows XP pops up a bubble > fr

mod_auth_radius-2.0+Apache2.0

2004-05-17 Thread Andreas
Hello, I´m using SuSE Linux 9.1, FreeRadius 0.9.3 with the module mod_auth_radius-2.0 and Apache2.0. I would like to use Radius for web authentication. At first I tested the Apache 1.3 with the Radius module mod_auth_radius. I used the configuration as per description on http://www.freeradius.or

Freeradius with MD5 and MySQL

2004-05-17 Thread Coolins Paker
Hi list,   I need change auth-type in Server Freeradius, but I dont't make it. I find in archive list and i still not found. My freeradius its configured with authenticate MySQL and my passwords was MD5.     How to change Auth-type for MD5 passwords.      My radiusd.conf:   modules

Re: Freeradius with MD5 and MySQL

2004-05-17 Thread Guy Fraser
Hi You don't need to change any Auth-Type settings, and it's best that you don't even use any Auth-Type settings when authenticating from MySQL. In your MySQL database you use the attribute "Crypt-Password" for encrypted passwords. Search the archives for "MySQL schema" and or "Guy Fraser". I have

Accounting with Start-record missing / accounting_update_query_alt

2004-05-17 Thread Michael Markstaller
eturns noop for request 36 modcall: group preacct returns noop for request 36 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 36 rlm_acct_unique: Hashing 'NAS-Port = 1,Client-IP-Address = 1.2.3.46,NAS-IP-Address = 1.2.3.46,Acct-Session-Id = &

unsubscribe

2004-05-17 Thread Rogelio Alvarado Anchisi
AS-Port = 1,Client-IP-Address = 1.2.3.46,NAS-IP-Address = 1.2.3.46,Acct-Session-Id = "0012",User-Name = "username"' rlm_acct_unique: Acct-Unique-Session-ID = "f13ebac0de4ea35c". modcall[accounting]: module "acct_unique" returns ok for reque

Client Requesting TLS

2004-05-17 Thread romal
Good Evening, I had EAP-TLS working and poked around (destroying my working TLS) :-( modcall: entering group authenticate for request 10 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/tls rlm_eap: ERROR! Our request for tls was NAK'd with

Re: missing radius.log file

2004-05-17 Thread Evan Stenmark
Yes, I have searched the radiusd.conf for anything that involves 'log' When I had the server set up on our network authenticating requests, the only log file that came out of that was: /usr/local/var/log/radius/radacct//detail- I see that in the radiusd.conf, and it is actually commented out! I h

Re: Accounting with Start-record missing / accounting_update_query_alt

2004-05-17 Thread Paul Hampson
On Mon, May 17, 2004 at 09:03:47PM +0200, Michael Markstaller wrote: > running FreeRADIUS Version 1.0.0-pre0 (Debian-package from cvs20040421) > with accounting to mysql 3.23.49. > When I understood things right, the "accounting_update_query_alt" should > come into action when "accounting_update_qu

Apache error after try to login in nocat auth web interface.

2004-05-17 Thread Rui Oliveira
    Hello, i have installed freeradius + mysql and now nocat authserv and nocat gateway following this tuturial http://nocat.net/wiki/index.cgi?Radius, and it looks all run okay.   When i try to access browser to authenticate, if i put a login & pass correct it says login wrong or password, a

Apache error after try to login in nocat auth web interface. (no FlooD)

2004-05-17 Thread rdo
Hello, i have installed freeradius + mysql and now nocat authserv and nocat gateway following this tuturial http://nocat.net/wiki/index.cgi?Radius, and it looks all run okay. When i try to access browser to authenticate, if i put a login & pass correct it says login wrong or password, and in the

Re: About Radius Attributes

2004-05-17 Thread Lara Adianto
Hi Alan, >> 1. In which case will a radius client request for the >> above service type or which radius clients usually >> request for the above service-type ? > http://www.freeradius.org/rfc/attributes.html > Click on "Service-Type", and it will tell you what >those values mean, and when they

Re: Reg configuring challenge response

2004-05-17 Thread Barath kumar
Dear Alan DeKok, Could you please respond to my below query: I am using the UDP protocol as the underlying protocol and the MD5 protocol as the authentication protocol to communicate with the RADIUS server. In this case, will the protocol demand for a challenge ?.  In this case, will the RADI

Re: Problem with sending challenge response

2004-05-17 Thread SANDEEP KHANNA
Sir, I read radclient file . Its usage says Usage: radclient [options] server[:port] [] and I have come to know through the rfc'c that I should include the state received from radius server as it is in my request.So how I will add this and also the encrypted password which I got from my offline c

Re: Problem with sending challenge response

2004-05-17 Thread SANDEEP KHANNA
Sir, I read radclient file . Its usage says Usage: radclient [options] server[:port] [] and I have come to know through the rfc'c that I should include the state received from radius server as it is in my request.So how I will add this and also the encrypted password which I got from my offline c

Again custom attributes

2004-05-17 Thread Maxim Komarovsky
I need to extend Radius functionality by adding custom module which require a custom attribure. e.g. user Password = "user", My-Attrib := "999", . So, the question is: how do i access to the custom attribute from my module (accounting part). I don't see it in the logs. Neither i see it wh

Re: Again custom attributes

2004-05-17 Thread Alexander Lunyov
Hello Maxim, Tuesday, May 18, 2004, 10:02:56 AM, you wrote: MK> I need to extend Radius functionality by adding custom module which MK> require a custom attribure. MK> e.g. MK> user Password = "user", My-Attrib := "999", . If this is "users" file entry, then your module will never hav

Re: Again custom attributes

2004-05-17 Thread Maxim Komarovsky
Alexander Lunyov wrote: Hello Maxim, Tuesday, May 18, 2004, 10:02:56 AM, you wrote: MK> I need to extend Radius functionality by adding custom module which MK> require a custom attribure. MK> e.g. MK> user Password = "user", My-Attrib := "999", . If this is "users" file entry, then your mo