Re: integration with edirectory

2006-04-20 Thread Hubert Kupper
On 20 Apr 2006 at 15:05, Jay Lee wrote: > Doyle Collings wrote: > > Has anybody successfully used the Integrating Novell eDirectory with > > FreeRadius document that is available on the Novell Web site? > > > I managed to get WPA+FreeRadius+eDirectory/LDAP working in a test > setup. The harde

freeradius and 802.1x troubleshooting

2006-04-20 Thread Vincent Chen
Hi, all I recently changed my firewall and move my dns server to the same host running freeradius. The 802.1x connection between windows xp and my AP which works perfectly now stop working. How can I troubleshooting this? 802.1x may be secure, but definitely pain in the ass. Here is what I see in

Guest vlan for Cisco AP

2006-04-20 Thread Jefri bin Dahari
Hi all, I plan to use only one ssid for wireless network. Users who do not configure 802.1x will get guest vlan. Has anybody done this? Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS + LDAP

2006-04-20 Thread João Mamede
Em Quinta, 20 de Abril de 2006 16:52, o Alan DeKok escreveu: > sukhvinder kumar <[EMAIL PROTECTED]> wrote: > > So if i comment the line Auth-Type LDAP , then how can > > i authenticate the users as we are using LDAP only. > > EAP-TLS does certificate authentication, and doesn't use, or require >

ascend-data-filters missing from access-accept

2006-04-20 Thread Christopher Carver
Hi, I'm having some trouble getting all the Ascend-Data-Filter attributes I set in the users file returned in an access-accept packet. Its strange because some of the filters get returned, but others do not. Its creating a real problem for me. Here is the stanza where I match and attach th

Re: integration with edirectory

2006-04-20 Thread Jay Lee
Doyle Collings wrote: Has anybody successfully used the Integrating Novell eDirectory with FreeRadius document that is available on the Novell Web site? I managed to get WPA+FreeRadius+eDirectory/LDAP working in a test setup. The hardest part was getting Novell's Universal Password featured

integration with edirectory

2006-04-20 Thread Doyle Collings
Has anybody successfully used the Integrating Novell eDirectory with FreeRadius document that is available on the Novell Web site? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

PostgreSQL tables in a schema

2006-04-20 Thread Milen A. Radev
Is it possible to place the necessary tables in a separate schema? We need to cross-reference some tables and it would be very convenient if we could place the tables inside the same database together with our other schemas. I saw that same table names are specified in the configuration file (postg

Re: EAP-TLS + LDAP

2006-04-20 Thread Alan DeKok
sukhvinder kumar <[EMAIL PROTECTED]> wrote: > So if i comment the line Auth-Type LDAP , then how can > i authenticate the users as we are using LDAP only. EAP-TLS does certificate authentication, and doesn't use, or require user/password checks. So you *can't* use LDAP. Alan DeKok. - Lis

Re: callingstationid filter and regexp

2006-04-20 Thread Alan DeKok
=?iso-8859-1?Q?Bj=F8rn_Mork?= <[EMAIL PROTECTED]> wrote: > Miguel <[EMAIL PROTECTED]> writes: > > > 1706382 | mmiranda | Calling-Station-Id | ~= | > > 226601[0-9][0-9]$|22793045$|22934240$ From doc/rlm_sql: =~ "Attribute =~ Expression" Alan DeKok. - List info/subscribe/unsubscribe?

Re: EAP-TLS + LDAP

2006-04-20 Thread sukhvinder kumar
Hi, Thanks for you reply Alan. So if i comment the line Auth-Type LDAP , then how can i authenticate the users as we are using LDAP only. Thanks, sukhvinder --- Alan DeKok <[EMAIL PROTECTED]> wrote: > sukhvinder kumar <[EMAIL PROTECTED]> wrote: > > When i'm authenticating the users locally it

Re: callingstationid filter and regexp

2006-04-20 Thread Bjørn Mork
Miguel <[EMAIL PROTECTED]> writes: > radius=# select * from radcheck where username = 'mmiranda'; > id| username | attribute | op | value > -+--+++--- > 1706382 | mmiranda | Calling-Station-I

Default user in sql

2006-04-20 Thread Antonio Matera
Hi, I have this user file: TLS1 Cisco-AVPair == "ssid=VLAN3" Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 3, Tunnel-Type = VLAN TLS2 Cisco-AVPair == "ssid=cn-test" Tunnel-Medium-Type = IEEE-802,

Re: Multiple Locations and configuring 2 different methods of Access

2006-04-20 Thread Stuart Auchterlonie
On Wed, 2006-04-19 at 15:10 -0400, Alan DeKok wrote: > a) people ALWAYS use RADIUS to authenticate before they get on the net. > b) people ALWAYS get a pretty web portal before they access the net > c) people SOMEHOW get past the web portal to get real net access > Reading between the line

Re: mysql replication vs. radrelay

2006-04-20 Thread Olaf Schaefer
> http://sphinx.incentre.net/radius.html Not bad. I've began something similar only for IP pools but Peter Nixon announced an sql_ippool module which also stores the configuration information in the mysql-DB, so I stopped coding and witing for it :) > > Let me know what you think. It's a good