Complete novice starting out.

2004-08-05 Thread Matthew Western, IT Support, Lonsdale
Hi All, My long term plan is to get a Cisco 1721 to authenticate against freeRadius - just the unix passwords '/etc/passwd' for VPN. I've spend the day reading various how-tos and am making progress and learning new terms but I can't get a basic test working even from the command line unless

PAP before CHAP

2004-08-05 Thread Russell Brenner
Hi Guys, Whats the easiest way to have freeradius authenticate via PAP first before CHAP? I still need CHAP happening for some customers, but IPASS integration requests PAP before CHAP -- Kind Regards, Russell Brenner - List info/subscribe/unsubscribe? See

Re: getting started with LDAP

2004-08-05 Thread Benedikt Panzer
Hello everyone, thanks for your replies and good advices. Authentication is working satisfacturing. I mainly followed Kostas' and Dustin's suggestions and used radiusProfile together with objectclasses person or account. Below is in modified configuration I used: dn: dc=mydomain,dc=com

RE: Complete novice starting out.

2004-08-05 Thread Matthew Western, IT Support, Lonsdale
OK, I think I've got it sussed.Radiusd was running as radiusd user and didn't have access to /etc/shadow and /etc/passwd - at least I figured it out... Take care all. Ta matthew -Original Message- From: Matthew Western, IT Support, Lonsdale Sent: Thursday, 5 August 2004 5:02 PM

rlm modules

2004-08-05 Thread Edgars
Hello, how to install the additional rlm modules from /src/modules?do i have each time to recompile all freeradius? While executing individual './configure' and 'make' for each module separrately, always errors were occuring. Regards, Edgars - List info/subscribe/unsubscribe? See

Re: PEAP-MSCHAPv2 and LDAP backend

2004-08-05 Thread Nathan Blackham
I tried putting mschap back into the the authorize section and it still did not work. I had it working against the users file but I want it to authenticate against the LDAP. Nathan On Wed, 2004-08-04 at 18:02, Paul Bender wrote: Nathan Blackham wrote: I am using FreeRadius1.0.0Pre3. I am

RE: PEAP-MSCHAPv2 and LDAP backend

2004-08-05 Thread Willey Kurt D
You don't have to edit stuff out of the config... it normally just breaks stuff. Just edit your ldap settings, uncomment the ldap authen/authorize, and you should be ready to rock. -Original Message- From: Nathan Blackham [mailto:[EMAIL PROTECTED] Sent: Thursday, August 05, 2004 10:48 AM

RE: PEAP-MSCHAPv2 and LDAP backend

2004-08-05 Thread Nathan Blackham
I tried just editing the ldap settings and it pulls out the password and the hash is exactly the same but it still rejects the user. This is from the debug: rlm_ldap: - authorize rlm_ldap: performing user authorization for nhb5 radius_xlat: '(uid=nhb5)' radius_xlat: 'PROTECTED' rlm_ldap:

EAP-TLS problems

2004-08-05 Thread Cool Man
Hi, I am trying to authenticate my Windows XP supplicant by using EAP-TLS. Whilst the authentication process I see the following errors in my radius server log. Thu Aug 5 17:42:48 2004 : Error: rlm_eap_tls: conf N ctx storedThu Aug 5 17:42:48 2004 : Info: Listening on IP address *, ports

Re: Proxying authentification for eap

2004-08-05 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Well, while I have to agree, that it is not generally possible, it seems like EAP-MD5 could be translated to a plain CHAP authentication, EAP-GTC could be translated to plain PAP password transfer, Probably, with some weird hacks. but unless I'm missing something,

Re: CHAP against PASSWD

2004-08-05 Thread squirrel
How can you authenticate CHAP against PASSWD? I'm currently running FreeRadius 0.8.1 on FreeBSD. So far I've had no problems using PAP on PASSWD. But some of our users are changing to CHAP and I need to be able to authenticate it without creating whole new text file containing the

Fw: peap+openldap

2004-08-05 Thread Alexandre Durand
- Original Message - From: Alexandre Durand To: [EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 10:20 AM Subject: peap+openldap Hi,I want to make an authentication PEAPbetween Win XP, openldap,and freeradius. I ve a problembetween mschapv2and openldap. Indeed, I make a test