dialup admin does not work

2004-07-16 Thread Rico Spiesberger
Hello, I have little big problem with the dialup admin. First I installed the version from souceforge. The result was, that some pages like New user or Bad users does not work. When you click on it, there is no page displayed, only a big white. No failure message is the logfiles, nothing...

Re: dialup admin does not work

2004-07-16 Thread Rico Spiesberger
Ok, i turned on the sql debug an the debugging in the php.ini ... no results...no failure messages... I think i found out (with the php function calls), that the php scripts are running until the require('../lib/defaults.php3'); is reached. for example in the user_new.php3. If i comment this

RE: question EAP-TTLS/MSCHAPv2

2004-07-16 Thread Luis Guido
SecureW2 1.0.9 only supports PAP in inner auth. SecureW2 2.x.x suports PAP plus EAP (whatever EAP you have registered on your system - EAP-MSCHAPv2 is one of them) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday,

Re: dialup admin does not work

2004-07-16 Thread Gary McKinney
Do you have the same problem with: group_new.php3 user_admin.php3 user_edit.php3 and user_state.php3 as you have with user_new.php3 ? If so - is the register_globals directive in the php.ini file set to off or no ??? gm... - Original Message - From: Rico Spiesberger [EMAIL

Re: EAP-TTLS proxying

2004-07-16 Thread Tomasz Wolniewicz
I hoped noone will bring that up, since this was my silly mistake. Of course everything is just as it should be and the reason for this odd behavour was that out of laziness we have set up two servers on one machine (on different ports). Obviously radius realises that keys and everything are the

Machine certificate with XP and freeradius

2004-07-16 Thread Joe Meslovich
First off I would like to apologize if this is a frequently asked question, but I am new to the list. What I would like to do is authenticate a laptop running Windows XP using a machine certificate versus a user certificate. So far I have created a certificate on the freeradius server and made

Re: EAP-TTLS proxying

2004-07-16 Thread Gary McKinney
Actually - not really a silly question! Since you reported what actually happened and why I suspect the information will be useful to others who attempt to do the same thing (two servers running on the same box) and run into the same senario... Of course it DOES require someone to look at the

Re: dialup admin does not work

2004-07-16 Thread Rico Spiesberger
yes, the problem with these files, but the register_globals in the php.ini are on rico Gary McKinney wrote: Do you have the same problem with: group_new.php3 user_admin.php3 user_edit.php3 and user_state.php3 as you have with user_new.php3 ? If so - is the register_globals directive in the

Re: LDAP and CHAP

2004-07-16 Thread Kostas Kalevras
On Fri, 16 Jul 2004, Daniel Eyholzer wrote: [EMAIL PROTECTED] wrote: What is the added benefit of something that is encrypted where the algorithm keys to decrypt are public knowlegde... There is no security there, just a false sense of the feeling. If the key to decrypt the password is

Re: Machine certificate with XP and freeradius

2004-07-16 Thread Michael Griego
Normal operation for that type of environment is to have a machine cert so that the machine can authenticate to the network before a users logs on to the machine itself, then to have a user cert for each user on the machine so that once the user logs in, the authentication switches to that user.

Re: Allowing both PAP and CHAP with a mixture of clear text and encrypted passwords

2004-07-16 Thread Kostas Kalevras
On Thu, 15 Jul 2004, Mike Lampson wrote: Is it possible to make radius tell the dial equipemnt to send the password in clear text if it can't authenticate a CHAP password? No. In many cases, the NAS can't even control it. The client uses CHAP, and there's no way for the NAS to tell

Re: radrelay problem

2004-07-16 Thread Kostas Kalevras
On Thu, 15 Jul 2004, jesk wrote: - Original Message - From: jesk [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 15, 2004 1:12 PM Subject: radrelay problem hello, i got a problem with radrelay. its working and is relaying accounting data correctly to other

Re: Machine certificate with XP and freeradius

2004-07-16 Thread Craig Huckabee
Joe, I used the 'users' file and a regex to strip that out - it works with 1.0.0-pre3: DEFAULT EAP-Message =* ANY,User-Name =~ ^([^/]+)/(.*)$,Autz-Type := PKI-HOST FixedHost = `%{2}`, Fall-Through = no This works for us, hope it helps you. --Craig Joe Meslovich wrote: Yeah

Re: dialup admin does not work

2004-07-16 Thread Gary McKinney
In your configuration settings for dialup admin do you have the variable general_use_session set to YES??? If it is - try setting it to NO and see if things start working... it may not be the mode of operation you want but it is a good check to isolate the actual problem... If the

Selective logging

2004-07-16 Thread Jerlique Ban
Hello, Is there a way to selectively log in the detail and sql log files some requests and not others. In particalar I want to log requests from our domains eg user, [EMAIL PROTECTED], [EMAIL PROTECTED] but not log requests for [EMAIL PROTECTED] [EMAIL PROTECTED] Thanks. JB - List

Logging...

2004-07-16 Thread Jerlique Ban
Further to my last email, Can someone give me a clue how I would log user, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] all as user, and other customer proxied domains as the full email address? We allow [EMAIL PROTECTED] to authenticate, so just incase customers make a

Re: Machine certificate with XP and freeradius

2004-07-16 Thread Joe Meslovich
I have updated my test radius server to 1.0.0pre3, in order to test this. What I see when I run radius in debugging mode is a series of authentication requests followed by challenge responses and then nothing. I don't know if the laptop is not receiving and understanding the challenge or if the

Beginner question

2004-07-16 Thread Russell Webb
Hello, I'm struggling to find out if it's possible to instigate a password change by the user (not via a challenge request) using the RADIUS protocol. Is this possible and if it is is it a standard or non-standard feature? Thanks in advance, Russell Webb - List info/subscribe/unsubscribe? See

Re: Juniper E-Series authentication setup and CLI access

2004-07-16 Thread Robert Banniza
Anyone have any ideas on this? I have Googled to no avail. Anyone else using Juniper ERX dixtionary to auth. and set CLI access levels? Any information would be appreciated. Robert On Thu, Jul 15, 2004 at 02:08:57PM -0500, Robert Banniza wrote: Guys, Per the original email (below), here is

Re: radrelay problem

2004-07-16 Thread etz
hello, i got a problem with radrelay. its working and is relaying accounting data correctly to other radius servers, but the problem is that the detail-combined file(radrely-log) will grow infinitely. i dont know why, maybe its becaue i got many accounting data in cause of

radiusd.conf[14]: sql: Module instantiation failed.

2004-07-16 Thread Joel n.solanki
Dear all, I am facing problem while starting radius with radiusd -X command. I want mysql support in radius. I am getting this error. radius.conf[14]: sql: Module instantiation failed. I have searched the archieves but didnt find correct answers. My system. Redhat 9.0 freeradius-0.9.2.tar.gz

Re: dialup admin does not work

2004-07-16 Thread Rico Spiesberger
The solution was that much simple, i won't belive it at all It seems to be a problem with the update from woody to sarge the mysql-support was not enabled in the php.ini...turn it on and you will have a working dialup admin. sometimes it's good to have someone to get a different view

Re: radiusd.conf[14]: sql: Module instantiation failed.

2004-07-16 Thread Rico Spiesberger
hi, I had to install the freeradius-mysql to get mysql support if it is not already inkluded in your *.tar.gz rico :) Joel n.solanki wrote: Dear all, I am facing problem while starting radius with radiusd -X command. I want mysql support in radius. I am getting this error. radius.conf[14]: sql:

DNS/WINS and dns connection suffix attributes

2004-07-16 Thread paul hanson
I need to know what are the official attributes for dialup clients being terminated on Cisco 47xx L2TP endpoint ?? These are standard PPP Microsoft dialup clients - however they are aggregated through L2TP routers eventually terminated at the Cisco 47xx router. I do not want to 'hardcode' the

Re: Freeradius Cisco-AVPair

2004-07-16 Thread Robert Banniza
Not sure if this is the same issue you are having but I had to set the Administrative-User line to get AVPair to work correctly with radiusReplyItem: Cisco-AVPair := shell:priv-lvl=15. Here is what I have in my users file: DEFAULT Auth-Type := LDAP Service-Type =