Re: EAP-TLS problem

2004-08-04 Thread Ester Urueña
Hello, I'm new in Linux world, and I don't know if my problem is related with running Freeradius with only user permissions? Any advice? --- Ester Urueña [EMAIL PROTECTED] escribió: --- Nick Hall [EMAIL PROTECTED] escribió: Does freeradius run as a user with permissions to /home/uruena/

Re: LDAP authentication needs read access to userPassword?

2004-08-04 Thread Kostas Kalevras
On Wed, 4 Aug 2004, Thomas -Balu- Walter wrote: Hi all, I'm fairly new in the radius business and need to set up a machine to support user authentication via LDAP. The best way by now seems to use freeradius :). However while flying through the documentations, howtos, etc. I've noticed

Re: Modify packet type in rlm_exec?

2004-08-04 Thread Alan DeKok
James Nedila [EMAIL PROTECTED] wrote: Can I modify the packet type in my exec module? (ie/ change an Access-Accept to an Access-Reject) You can return 1 from the script, which will cause the module to return RLM_MODULE_FAIL, and should reject the user. Alan DeKok. - List

Re: Rewriting User-Name attribute without rewrite_attr

2004-08-04 Thread Alan DeKok
Steve Chan [EMAIL PROTECTED] wrote: In previous tests with exactly the same configuration, the auth-type was eventually matched against the local files configuration and authentication worked properly. I stand by my assertion that it doesn't work - do you have reason to believe that

Re: Forcing Auth-Method to LEAP

2004-08-04 Thread Alan DeKok
Dietmar Romer [EMAIL PROTECTED] wrote: I tried this, but it does not work. The files-module is called before the eap-module; it always returns ok, regardless of the EAP-Type := LEAP. Did you try it in 1.0.0-pre3? The feature was added, and tested by me (though not recently). Alan

Re: Status Server Reply Message

2004-08-04 Thread Alan DeKok
David [EMAIL PROTECTED] wrote: I am testing with FreeRADIUS version 1.0.0-pre3. I was wondering if the Reply-Message in the status server was configurable or if it was hardcoded? It's hard coded. It wouldn't be too hard to make it configurable, though. Alan DeKok. - List

Re: Problem with Huntgroups

2004-08-04 Thread Alan DeKok
Geoffrey Cauchi [EMAIL PROTECTED] wrote: Did you have any reply re. this? We are facing a very similar problem and it would be greatly appreciated if you could tell us how you solved the problem. So far, I don't think he has. I've taken a quick look at the problem, but I'm not sure

Re: RADZAP

2004-08-04 Thread Alan DeKok
Geoffrey Cauchi [EMAIL PROTECTED] wrote: We are running Free Radius 1Pre3 and wanted to delete a user entry from radutmp using radzap. The user entry is not being deleted though! Other people have said the same thing. Anyone knows about issues with radzap? Not really. i.e. Set up a

Re: Problem with Huntgroups

2004-08-04 Thread Robert Banniza
On Wed, Aug 04, 2004 at 10:52:28AM -0400, Alan DeKok wrote: Geoffrey Cauchi [EMAIL PROTECTED] wrote: Did you have any reply re. this? We are facing a very similar problem and it would be greatly appreciated if you could tell us how you solved the problem. So far, I don't think he has.

Re: Modify packet type in rlm_exec?

2004-08-04 Thread Thor Spruyt
- Original Message - From: Alejandro Galue [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 5:37 PM Subject: RE: Modify packet type in rlm_exec? To reject users: print Reply-Message := 'You can not login now'; exit 1; BUT, Reply-Message on Access-Reject is

Re: Using groups to allow certain engineers access to certain switches??

2004-08-04 Thread Robert Banniza
On Wed, Aug 04, 2004 at 02:14:41PM +0300, Kostas Kalevras wrote: On Tue, 3 Aug 2004, Robert Banniza wrote: Guys, I'm using Freeradius-0.9.3 with the rlm_ldap module (OpenLDAP backend) and have most everything configured except this last little bit. I would like to allow only certain

Cisco 1721 + MLPPP + MySQL

2004-08-04 Thread Lee Norvall
Title: Message Hi I have a Cisco 1721 with 2 x ADSL wics and trying to setup MLPPP. I can see the user authenticate twice, but I am getting about 50% packets loss!!! I have: Port-limit = 2 Simultaneous-Use := 2 in the Group reply. Has anyone had this problem/got it working?

auth-detail file in freeradius 1.0.0pre3

2004-08-04 Thread Casey Lee
Hello - I am currently testing freeradius 1.0.0pre3 and encountering an issue. The User-Password attribute showed up in the auth-detail file! (No reason I need to store password in the log) auth-detail-20040804 Packet-Type = Access-Request Wed Aug 4 11:25:31 2004 User-Name = testabc

Re: Problem with Huntgroups

2004-08-04 Thread Alan DeKok
Robert Banniza [EMAIL PROTECTED] wrote: 1) In the users file, I have the following (pay attention to the Ldap-Group entry): DEFAULT Huntgroup-Name == Cisco Auth-Type := LDAP, Service-Type := 6, Ldap-Group == cisco, You are putting

Re: So close....yet so far

2004-08-04 Thread Guy Fraser
That looks like some kind of shell expansion. Putting \ character in front of the ! character, is called escaping, and it is used to prevent the shell from using that character as part of an expansion. [EMAIL PROTECTED] wrote: Hello, When last i posted, I was having problems getting radius and

Compile bug on AIX

2004-08-04 Thread Roy
Attempting to compile freeradius-1.0.0-pre3 on AIX 5.1 using IBM compiler. The following error occurs. Making static dynamic in rlm_unix... make[6]: Entering directory `/work/work/radius/freeradius-1.0.0-pre3/src/modules/rlm_unix' cc -O3 -I/usr/local/ssl/include -D_REENTRANT

Re: Modify packet type in rlm_exec?

2004-08-04 Thread James Nedila
Alan DeKok wrote: James Nedila [EMAIL PROTECTED] wrote: Can I modify the packet type in my exec module? (ie/ change an Access-Accept to an Access-Reject) You can return 1 from the script, which will cause the module to return RLM_MODULE_FAIL, and should reject the user. Thanks, that works...

Re: Problem with Huntgroups

2004-08-04 Thread Robert Banniza
On Wed, Aug 04, 2004 at 02:41:09PM -0400, Alan DeKok wrote: Robert Banniza [EMAIL PROTECTED] wrote: 1) In the users file, I have the following (pay attention to the Ldap-Group entry): DEFAULT Huntgroup-Name == Cisco Auth-Type := LDAP,

AEGIS client with freeRADIUS

2004-08-04 Thread Alex Reynolds
To test a 802.1x authentication setup, I am using Andreas Wolf's WPA Enterprise network document at: http://homepage.mac.com/andreaswolf/public/wpaeap.html I have also added modifications to enable EAP-TTLS + Kerberos authentication, which work fine with Mac OS X 10.3 and Xsupplicant 802.1x