Re: Freeradius-Users Digest, Vol 4, Issue 5

2005-08-01 Thread David Barker - 4D Internet Ltd
Please note that as of the 1st August 2005 my email address changed to [EMAIL PROTECTED] Your email has been forwarded onto my new address but please update your address book for future use. Thank you. David Barker 4D Internet Limited http://www.4dtechnologygroup.com - List info/subscribe/uns

Fwd: PEAP + linksysWRT54G not working

2005-08-01 Thread alfred hitch
Hi All, I was having a very simple network for testing, WIN XP (SP2) client, connecting via a wireless router . in PEAP MSCHAPv2 Mode .. Now, everything was working fine with no issues while I was using a D-Link AP, I replaced it with a Linksys Router (WRT54G) and boom boom bang .. I cannot

VSA id's higer than 255

2005-08-01 Thread Fawaz Qamhawi
We are using freeradius 1.0.4 and having a problem with VSA id's higher than 255 (more than 8 bit). ATTRIBUTE Ascend-Http-Redirect-URL287 string Lucent ATTRIBUTE Ascend-Http-Redirect-Port 288 integer Lucent When one of the attributes above are s

Re: accounting records per nasid, not ip address

2005-08-01 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > i had to coerce the latest cvs version into fedora > core 3 with more hacks than i would have liked, Such as...? It's a development version, so not everything works. > one issue i find so far is that my NASs have a dynamic ip. That's evil. Very evil. > i manag

Re: Disconnect-Request packet

2005-08-01 Thread Kevin Bonner
On Friday 29 July 2005 13:43, N White wrote: > I understand this now, and why it would be... as you put it "yuck". Ha > Ha! Well thanks for answering my question and explaining it to me. Looks > like some custom scripting for me then. :-) My only problem now is going > to be figuring out how to sen

Re: XP supplicant and Secure Cerficate acceptance

2005-08-01 Thread Josh Howlett
On Mon, 1 Aug 2005, David Mitton wrote: I think your terminology is incorrect. Yes. It's late :-) I know for a fact that Funk's software will not accept a self-signed cert. That is a certificate not signed by another CA. What I think you meant, was a having your own private trusted CA root.

Re: XP supplicant and Secure Cerficate acceptance

2005-08-01 Thread David Mitton
I think your terminology is incorrect. I know for a fact that Funk's software will not accept a self-signed cert. That is a certificate not signed by another CA. What I think you meant, was a having your own private trusted CA root. Where the server and client certs are signed by it. And, yes, in

accounting records per nasid, not ip address

2005-08-01 Thread freeradius
hi, this is my first time using freeradius. had a good experience so far. i had to coerce the latest cvs version into fedora core 3 with more hacks than i would have liked, but that's ok, it's up and running. one issue i find so far is that my NASs have a dynamic ip. i managed this externally at

simultanius use

2005-08-01 Thread Jeremy Kenney
Hello ok I’m closer the simultanius use works but its not doing it for the dialup its only doing it for the slipstream-auth group   I have a dialup-yes group for allowed dialup customers and it doesn’t seem to work   Can you help - List info/subscribe/unsubscribe? See http://www.

Re: XP supplicant and Secure Cerficate acceptance

2005-08-01 Thread Zoltan Ori
On Monday 01 August 2005 16:37, [EMAIL PROTECTED] wrote: > I am running FreeRadius 1.0.4 and using XP supplicants. My problem > is after authenticating against FreeRadius, XP asks me to OK > the server certificate. > > I do not want to manually validate the server certificate. XP should be > able

Re: XP supplicant and Secure Cerficate acceptance

2005-08-01 Thread Josh Howlett
On Mon, 1 Aug 2005, [EMAIL PROTECTED] wrote: I am running FreeRadius 1.0.4 and using XP supplicants. My problem is after authenticating against FreeRadius, XP asks me to OK the server certificate. I do not want to manually validate the server certificate. XP should be able to validte the cert

Problems with Simultaneous-Use

2005-08-01 Thread jck-freeradius
= This is a re-post. I received no help from the previous posting = Hello, I am having problems with Simultaneous-Use and checkrad. I know that checkrad is not running because: grep debug /usr/local/sbin/checkrad # Config: $debug is the file you want to put debug message

XP supplicant and Secure Cerficate acceptance

2005-08-01 Thread jck-freeradius
I am running FreeRadius 1.0.4 and using XP supplicants. My problem is after authenticating against FreeRadius, XP asks me to OK the server certificate. I do not want to manually validate the server certificate. XP should be able to validte the certificate by itself, as long as the cert has been

Re: access-challenge

2005-08-01 Thread Alan DeKok
Srinivasa Rao Chigurupati <[EMAIL PROTECTED]> wrote: > I think if access-request packet contains user-password attribute, > FreeRadius authenticates with PAP. > If access-request packet contains chap-password attribute, FreeRadius > authenticates with CHAP. > Am I correct? > How MS-CHAP and other

Re: System requirements

2005-08-01 Thread Alan DeKok
alfonso celestino <[EMAIL PROTECTED]> wrote: > I need a freeradius Server for a wireless network with > Approximately 15,000 users with Approximately 2,000 > simultanous users and I need to know which are the > system requirements(like CPU, Memory, Processor,...) > for a good server performance.

System requirements

2005-08-01 Thread alfonso celestino
Hi, Can someone help me with the following problem? I need a freeradius Server for a wireless network with Approximately 15,000 users with Approximately 2,000 simultanous users and I need to know which are the system requirements(like CPU, Memory, Processor,...) for a good server performance.

Re: WRT54GS (sveasoft) with Freeradius 1.0.2

2005-08-01 Thread Vladimir
Rajeev Pokkyarath wrote: I am trying to use Linksys WRT54GS with Firmware_Alchemy-6.0rc3lw031 (sveasoft) against my freeradius server (1.0.2). Basically trying to setup a hotspot scenario. But eventhough I enter a valid username/password in the login page, I am not able to login. I ran the radiu

OFF-TOPIC - ISDN and 56k modem users

2005-08-01 Thread Kinetix
Has anyone ever used an eicon diva card for a dial-up server?? I have setup such a server using a DIVA 4BRI card in a Redhat box with mgetty 1.1.33 and pppd-2.4.3 Everything worked OK for the modem users. The dial-up server sent a NAS-Port-Type = Async to the radius server But when I tried with

AW: sementation fault

2005-08-01 Thread Uwe Driessen
> -Ursprüngliche Nachricht- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im > Auftrag von vicky > It tries to insert to a table 'radpostauth' that doesn't > exist and further more there are no tables at all in the > database. Is that normal? > > Please help me shed some light o

sementation fault

2005-08-01 Thread vicky
Hi all, I trying to install (compile from source) freeRADIUS 1.0.4 on a SuSe Linux system version 9.1. The configuration, compilation and installation goes well. The problem comes when I run it with -X -A. You can see the output from that attached with this mail. I have made sure the the mysql

Re: authenticate machine accounts with ntlm_auth

2005-08-01 Thread Michael Fisher
Kris Benson wrote: I'm very frustrated now after spending a couple of weeks trying to get free radius to authenticate my Win2k machine accounts against active directory. :-( Sorry, blame Microsoft. It isn't possible, but they don't make it obvious that it's not possible. Alan, do

Re: Cisco WAP 1200 Accounting for 802.1X PEAP

2005-08-01 Thread Stefan Winter
Hi, > I am having difficulty getting my Cisco APs (all 1230s) to send > accounting information regarding > 802.1x PEAP authentications - stop/start info.Does anyone have this > working? If so can you please post the AP config. This is off-topic for this list (no RADIUS server issue). Anyway:

Re: authenticate machine accounts with ntlm_auth

2005-08-01 Thread Stefan Winter
Hi, > It sounds to me like you're saying this is a server-side issue. Since AD > is available via LDAP, why couldn't this FreeRadius install just use > rlm_ldap to access the machine account info in AD? No. There is one important difference between plain LDAP and AD: an AD server will _never_ g

Re: access-challenge

2005-08-01 Thread Srinivasa Rao Chigurupati
Thanks Alan. Would please answer another question in-line below. Alan DeKok wrote: Srinivasa Rao Chigurupati <[EMAIL PROTECTED]> wrote: 1. Will FreeRadius challenges with access-challenge if auth-type is PAP? No. Read the RFC's for how PAP works. 2. How

Re: Authenticate as computer - Windows XP

2005-08-01 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > How I can do this in Freeradius for authenticate computer account, You can't. See recent messages on this list. IAS interacts with AD in certain magic ways that no one in the world outside of Microsoft understand. Alan DeKok. - List info/subscribe/unsubscribe?

Re: Computer Authentication problem

2005-08-01 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > I want to know if there is a way to work with realm configuration based on > "host/fqdn", example: host/israel.teste.com Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: accounting 'detail' file and EAP

2005-08-01 Thread Alan DeKok
"Kris Benson" <[EMAIL PROTECTED]> wrote: > Has anyone come up with a way to either A) ensure the outside username > matches the inside one (guaranteeing the outside one isn't falsified) or > B) log the accounting details with the tunnel information? Use the "class" attribute. Set it to some val

Re: authenticate machine accounts with ntlm_auth

2005-08-01 Thread Alan DeKok
"Kris Benson" <[EMAIL PROTECTED]> wrote: > It sounds to me like you're saying this is a server-side issue. I'm saying the exact opposite. It's a function of running on Windows, and it has nothing to do with the RADIUS server. FreeRADIUS can run on Windows, and with the right code, it will most