backup radius server

2004-08-06 Thread Edgars
Hello list! how do i proceed with subj? I want to send the request to backup radius server in case the main one is down (or the username coul not be found on it). Should i use proxy.conf to accomplish this? Thank you in advance! Edgars - List info/subscribe/unsubscribe? See

Re: backup radius server

2004-08-06 Thread Graeme Hinchliffe
On Fri, 2004-08-06 at 09:36, Edgars wrote: Hello list! how do i proceed with subj? I want to send the request to backup radius server in case the main one is down (or the username coul not be found on it). Should i use proxy.conf to accomplish this? Thank you in advance! I think you

Re: Proxying authentification for eap

2004-08-06 Thread Stefan . Neis
Alan DeKok schrieb: If you're using EAP-TTLS, then the tunneled session is often just normal non-EAP authentication, and that can be proxied. (and I suppose the same applies more or less to PEAP?) No. PEAP tunnels EAP, and only EAP. I see. However, theoretically, I again

Re: backup radius server

2004-08-06 Thread Edgars
Ok, i found it out with backup freeradius, it really should be done on the NAS side. So the next question is about backup postgresql database. I've added these strings to radiusd.conf: modules { sql sql1 { server=myfirstserver.example } sql sql2 {

freeradius + cisco IOS 12.3

2004-08-06 Thread Igor Cahoj
Hello I have two Cisco AS5350 one with IOS Version 12.3(1a) and the second one with IOS Version 12.2(2)XB6. Then I have freeradius server FreeRADIUS Version 1.1.0-pre0. I've set up both gws. The one with IOS 12.2 communicates with radius server correctly but the other one doesn't. I'm not sure

PAM-Radius module

2004-08-06 Thread deborah malka
Hello, Is there a way, with the Pam-radius module to use an other password encryption than PAP ? Is it possible not to have to store the password in clear on the pam client ? Sorry if it's not clear, Thank you for advance, =Déborah Malka Créez gratuitement votre Yahoo! Mail

Re: peap + openldap

2004-08-06 Thread Alexandre Durand
LDAP bind identity provided une the ldap section. TTLS with LDAP works fine for example. How i can verify if identity have read access to the clear password ? - Original Message - From: Paul Bender [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 06, 2004 2:14 AM Subject:

Re: Proxying authentification for eap

2004-08-06 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Any suggestion for a could search string? The one I figured out essentially just gave me that mail I referred to ... Look for FreeRADIUS-Proxied-To Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

cisco_vsa_hack

2004-08-06 Thread Amedzekor Kafui
Hello, This question is for Thomas J (off course all answers are welcome) the author of cisco_vsa_hack in rlm_preprocess.c. Can you explain this line in your code? vendorcode = (vp-attribute 16); /* HACK! */ I was wondering if you couldn't compare the vp-attribute == 9 straightway instead of

Re: cisco_vsa_hack

2004-08-06 Thread Alan DeKok
Amedzekor Kafui [EMAIL PROTECTED] wrote: Can you explain this line in your code? vendorcode = (vp-attribute 16); /* HACK! */ I was wondering if you couldn't compare the vp-attribute == 9 straightway instead of the hack. The vendor codes vendor-specific attribute numbers are packed