basic handling of multiple EAP-Methods by freerad

2006-06-27 Thread Rainer Brinkmann
Hello, we wonder, how a freeradius can request a client to use a fixed EAP-Method: so its defined: Client starts with EAP-Start-Msg Radius wants EAP-Identity Client answers with Username or Hostname NOT using a special EAP-Method Radius now starts communiucating with the first EAP-Packet, using

Re: basic handling of multiple EAP-Methods by freerad

2006-06-27 Thread Phil Mayers
Rainer Brinkmann wrote: Hello, we wonder, how a freeradius can request a client to use a fixed EAP-Method: so its defined: Client starts with EAP-Start-Msg Radius wants EAP-Identity Client answers with Username or Hostname NOT using a special EAP-Method Radius now starts communiucating with

Re: Fixed IP

2006-06-27 Thread Phil Mayers
Mahesh S Kudva wrote: Hi I am running Freeradius on Mac OS X. How do i assign fixed IP address to my wireless clients who are authenticating under Apple BAse stations?? You can't with radius. 802.11 clients assign IP addresses by DHCP after the link, so you would need to configure the DHCP

Mysql with crypted password

2006-06-27 Thread Alessandro Agostini
Hi to all, I have successfully installed secure2 with 3Com WX1200 switch and AP 3Com 2750, with authentication PEAP-EAP/MSCHAPv2. Authentication radius ask to mysql tables the credentials stored in plain text. Now, my problem is: I don't like plain text password in my MySQL Table. So I ask

Re: Mysql with crypted password

2006-06-27 Thread Stefan Winter
Hi! I have successfully installed secure2 with 3Com WX1200 switch and AP 3Com 2750, with authentication PEAP-EAP/MSCHAPv2. Authentication radius ask to mysql tables the credentials stored in plain text. Now, my problem is: I don't like plain text password in my MySQL Table. So I ask you.

Simultaneous-Use does not match on Huntgroup-Name

2006-06-27 Thread B Thompson
Hi I have just been testing out Simultaneaous-Use and I cannot get it to match on a Huntgroup-Name (where the the huntgroup is a list of NAS-IP-Address entries). If I specify Simultaneous-Use against each NAS-IP-Address individually in the users file it works fine. This works :- DEFAULT

Radius

2006-06-27 Thread Grant Wright
Message: 1 Date: Fri, 23 Jun 2006 11:09:27 -0400 From: Alan DeKok [EMAIL PROTECTED] Subject: Re: Radius Logs To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Grant Wright [EMAIL PROTECTED] wrote: I use the RADIUS logs to calculate

Re: Mysql with crypted password

2006-06-27 Thread Alessandro Agostini
Stefan Winter ha scritto: Hi! ... Since SecureW2 can use TTLS, you have a variety of options for encrypting passwords in your MySQL table. You may want to use unix crypt, MD5 hash passwords etc. The only difference is that the statement in SQL is not User-Password := whatever but

Re: Mysql with crypted password

2006-06-27 Thread Stefan Winter
Hi, Ok. Now I have two demo one with clear text passwd and one with crypted password. However I can't authenticate it. What I need to change in radius.conf or eap.conf ? I have modified radius.conf: pap { encryption_scheme = md5 (was crypt) } Okay. in

Please help !!!

2006-06-27 Thread Kartthik Raghunathan
I have freeradius setup for wireless client access againt the active directory and its working good. Now using the same FR trying to authenticating pptp clients against AD using Dlink firewall. While the pptp client connect to the dlink fw, getting this error message the remote server doesnt

Buy SSL Certificates for PEAP

2006-06-27 Thread VannMann32 .
Hi ! Can anybody give me a hint on how to configure the eap.conf file when I have a certificate signed by thawte.com (21-Day Free SSL Trial Certificate) ? Read somewhere that I have to convert the certificate from DER to PEM, but trying to use this cammand fails : openssl x509 -in

Re: Buy SSL Certificates for PEAP

2006-06-27 Thread Vineet Verma
You also need to specify -outform PEM. On Tue, 2006-06-27 at 13:53, VannMann32 . wrote: Hi ! Can anybody give me a hint on how to configure the eap.conf file when I have a certificate signed by thawte.com (21-Day Free SSL Trial Certificate) ? Read somewhere that I have to convert the

Re: Please help !!!

2006-06-27 Thread Alan DeKok
Kartthik Raghunathan [EMAIL PROTECTED] wrote: I have freeradius setup for wireless client access againt the active directory and its working good. Now using the same FR trying to authenticating pptp clients against AD using Dlink firewall. While the pptp client connect to the dlink fw, getting

Re: Buy SSL Certificates for PEAP

2006-06-27 Thread VannMann32 .
Hi ! You also need to specify -outform PEM. # openssl x509 -in somecertificate.cer -inform DER -out somecertificate.pem -outform PEM unable to load certificate 88876:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong

Re: Buy SSL Certificates for PEAP

2006-06-27 Thread Michael Griego
Are you sure your certificate isn't already in PEM format? --Mike On Jun 27, 2006, at 4:32 PM, VannMann32 . wrote: Hi ! You also need to specify -outform PEM. # openssl x509 -in somecertificate.cer -inform DER -out somecertificate.pem -outform PEM unable to load certificate

dial-up admin and authentication time

2006-06-27 Thread Pelusa Vali
hi list, i have 2 questions, hope could help. 1) trying to use dial-up admin in my wlan, i installed it and created tables, first filled them manually with some users, later filled new users using dial-up interface, but i only can see first user's statistics, any other user, even connected, is