Expiration module

2004-09-22 Thread Van Deuren Joris
Title: Expiration module Hi, Who can tell me in a few lines what the function of the expiration module is? How does it work? Thanks Joris

Re: ip pools question

2004-09-22 Thread Evren Yurtesen
Paul Hampson wrote: On Wed, Sep 22, 2004 at 04:20:23AM -0700, Evren Yurtesen wrote: Hello, I want to use the freeradius ip pools. I just wonder something though ever ip pool name I define should be included in the accounting and post-auth sections? Its kind of confusing, whats the point of

non valid client cert for EAP/TLS

2004-09-22 Thread Lara Adianto
Hi list, I set upEAP/TLS FreeRadius auth for windowsxp client, and currently hit the wall in the certification generation. I followed the instructions in the following howto on the net: http://www.freeradius.org/doc/EAPTLS.pdf The certs are generated as follows: CA cert: * rm -rf

Re: ip pools question

2004-09-22 Thread Kostas Kalevras
On Wed, 22 Sep 2004, Evren Yurtesen wrote: So if I put the pool name to accounting and post-auth, then I dont have to have Pool-Name in users file? All the users would use the pool which is defined in accounting and post-auth? No, you HAVE to define the Pool-Name If I have to define every

Re: Expiration module

2004-09-22 Thread Keith Yoder
Van Deuren Joris escreveu: Hi, Who can tell me in a few lines what the function of the expiration module is? How does it work? I'm not sure if there is a module or not but I use the Expiration attribute to automatically expire logins at a certain time (or date). For example, you can use

Re: non valid client cert for EAP/TLS

2004-09-22 Thread Joe Matuscak
On Wed, 22 Sep 2004, Lara Adianto wrote: I followed the instructions in the following howto on the net: http://www.freeradius.org/doc/EAPTLS.pdf I found the certificate creation part of that howto to be sort of confusing. I think the key thing is that the certificates are normal other than

want to configure: eap ttls with pap

2004-09-22 Thread Hans-Peter Fuchs
i test freeradius.1.0.0 on redhat and want to configure eap ttls with pap. Has someone a example configuration. I don't know how where to configure pap. radiusd -x says: rlm_eap_ttls Unknown EAP Type PAP Grüße Hans-Peter Fuchs Hans-Peter Fuchs - RZKR, Zimmer 20 Zentrum fuer angewandte

Re: want to configure: eap ttls with pap

2004-09-22 Thread Alan DeKok
Hans-Peter Fuchs [EMAIL PROTECTED] wrote: i test freeradius.1.0.0 on redhat and want to configure eap ttls with pap. Has someone a example configuration. Configure the eap{} module, and both the the tls{} ttls{} sub-sections of eap{}. Configure a clear-text password for a user, and TTLS

compile trouble w/ freeradius-1.0.1

2004-09-22 Thread Enrico Weigelt
Hi folks, I'm trying to compile freeradius-1.0.1 and get the error: x99_rlm.c:550: error: label at end of compound statement When adding an ; between the label and compound, it compiles well. It seems my gcc-3.4.1 is a little bit more restrictive as other compilers in such cases. cu --

Re: compile trouble w/ freeradius-1.0.1

2004-09-22 Thread Alan DeKok
Enrico Weigelt [EMAIL PROTECTED] wrote: I'm trying to compile freeradius-1.0.1 and get the error: x99_rlm.c:550: error: label at end of compound statement When adding an ; between the label and compound, it compiles well. It seems my gcc-3.4.1 is a little bit more restrictive as

PEAP + LDAP with crypted PWs?

2004-09-22 Thread Martin Pauly
Hi everyone, We have shortly migrated our user database to OpenLDAP, keeping the UNIX-crypted passwords. Now I would like to let wireless users authenticate against this LDAP Server. Since we do not have a PKI in place, I have set up an auth chain using PEAP/MSCHAPv2 (you might have guessed

Re: PEAP + LDAP with crypted PWs?

2004-09-22 Thread Basile Mathieu
i think you cannot use encrypted password we had the same problem and decide yo use ttls with pap we use secureW2 as client for xp and 2000 basile Selon Martin Pauly [EMAIL PROTECTED]: Hi everyone, We have shortly migrated our user database to OpenLDAP, keeping the UNIX-crypted

Re: PEAP + LDAP with crypted PWs?

2004-09-22 Thread Alan DeKok
Martin Pauly [EMAIL PROTECTED] wrote: On the other hand, I haven't seen anything like PEAP-PAP so far, PEAP with EAP-GTC. Cisco and other clients support it, MS doesn't. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: cisco_vsa_hack

2004-09-22 Thread Peter Nixon
On Friday 06 August 2004 18:19, Amedzekor Kafui wrote: --snip-- Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema provided by Peter Nixon in src/billing. Has anyone written this already? Thanks.

Re: cisco_vsa_hack

2004-09-22 Thread Amedzekor Kafui
Yes I did write it. Kafui Amedzekor. --- Peter Nixon [EMAIL PROTECTED] wrote: On Friday 06 August 2004 18:19, Amedzekor Kafui wrote: --snip-- Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema

AP Orinoco 2500

2004-09-22 Thread Terry J Fike Jr
Okay, i know for the most part these things have been done to death, but mostly just with logging. Has anyone else had issues with the orinoco allowing multiple sessions for a user. (ie: they are loged in via another NAS device and their port limit=1 they are still allowed to log into the AP

KRB5 + Freeradius 1.0.1 Problem.

2004-09-22 Thread Kenneth Mix
After upgrading to Freeradius 1.0.1, I am getting an error when trying to authenticate users via Kerberos 5. Below is debug output from an authentication attempt: Ready to process requests. rad_recv: Access-Request packet from host XXX.XXX.XXX.XXX:21743, id=239, length=78 User-Name =

RE: LDAP SSL won't bind??

2004-09-22 Thread Hou, Ming
I got checking for SSL_new in -lssl ... yes, when I downloaded openssl-0.97d from sunfreeware.com. Then, I recompiled my OpenLDAP and FreeRadius. I still have the connection problem to connect to my secure LDAP server. My iPlant secure LDAP server log indicated it does not understand data

Re: KRB5 + Freeradius 1.0.1 Problem.

2004-09-22 Thread Alan DeKok
Kenneth Mix [EMAIL PROTECTED] wrote: After upgrading to Freeradius 1.0.1, I am getting an error when trying to authenticate users via Kerberos 5. ... Does anybody have any ideas on how I might resolve this issue? I would suggest deleting all of the old rlm_* modules from previous versions of

LEAP stopped working

2004-09-22 Thread Matanya Elchanani
Dear FreeRadius Users, We have two Aironet 350 bridges in a point-to-point config. We use Cisco-LEAP to get dynamic keys (unfortunately, LEAP is the only EAP protocol those bridges know). We have been using FreeRadius 0.9.3 with this setup and it was working fine. We just upgraded to

RE: LEAP stopped working

2004-09-22 Thread Matanya Elchanani
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, September 22, 2004 7:22 PM To: [EMAIL PROTECTED] Subject: Re: LEAP stopped working Matanya Elchanani [EMAIL PROTECTED] wrote: We have two Aironet 350 bridges in a point-to-point config. We use

Re: cisco_vsa_hack

2004-09-22 Thread Apu islam
Hello Kafui, Is that hack being sent with CVS/Standard distribution ? Does that work with the posgreSQL billing options that are provided ? -apu --- Amedzekor Kafui [EMAIL PROTECTED] wrote: Yes I did write it. Kafui Amedzekor. --- Peter Nixon [EMAIL PROTECTED] wrote: On Friday 06

dbMail with Radius Server

2004-09-22 Thread Kirti S. Bajwa
Hello List: I am posting this message both on freeRADIUS dbMail list. Please read on.. Couple of months ago I learned about dbMail from somebody on freeRADIUS list. I was told that freeRADIUS can authenticate users with/from dbMail data. I have lost the email (damn Win NT server crashed) but if