Re: The EAP Saga continues.

2007-01-30 Thread Phil Mayers
Evan Vittitow wrote: I finally got PEAP working, nowe I have two questions, should I create a dummy account for the mschap element of authentication. Secondly, how do Eh? PEAP+MSCHAP requires a real account for the mschap portion. I create additional certs for additional hosts in FreeRadius?

Re: LAN accounting

2007-01-30 Thread Peter Nixon
On Mon 29 Jan 2007 21:03, ij wrote: Stefan Winter wrote: Hello, I'm newbie,I wanna know that can i use FreeRadius+Dialup_admin as a LAN accounting? It means that i use them without dialing? the name dialup_admin is a bit misleading. You can as well manage LAN users with them.

(no subject)

2007-01-30 Thread Jorge Martinez de Salinas Vazquez
Hello everybody! We are trying to assign configuration parameters to the supplicants based on RADIUS decision. I would like to know is someone else is working on it and if there is an easy way to send this parameters directly to the supplicant. I have read the RFC 4014 which shows a way to assign

Sending RADIUS data to the 802.1x supplicant.

2007-01-30 Thread Alan DeKok
Jorge Martinez de Salinas Vazquez wrote: We are trying to assign configuration parameters to the supplicants based on RADIUS decision. In short: it's not possible to send information from the RADIUS server to the supplicant. Maybe one day with updates to the supplicant servers it may be

Re: -2.5: Re: RSA / Smart Cards

2007-01-30 Thread Joseph
Alan DeKok wrote: Joseph wrote: Does anyone have pointers on setting up a solution where freeradius authenticates against an RSA Secure ID or a smart card? FreeRADIUS proxies the request to the RSA RADIUS server. There's not much else that can be done. So, in short, you would get a

Re: -2.5: Re: RSA / Smart Cards

2007-01-30 Thread Alan DeKok
Joseph wrote: So, in short, you would get a commercial RSA Radius server and proxy requests from freeradius to the RSA Radius server. Yes. Is there any way a person could use the ID of a usb key with a radius client/server setup? What exactly do you mean by that? Most USB token

Re: RSA / Smart Cards

2007-01-30 Thread Dan Geist
Use the pam_securid module for linux/sun that's included with the RSA server. It works quite well and PAM provides a simple interface. Dan On Mon, 2007-01-29 at 18:23 -0500, Joseph wrote: Does anyone have pointers on setting up a solution where freeradius authenticates against an RSA Secure ID

RE: RPM Build-error

2007-01-30 Thread King, Michael
-Original Message- The RPM file in FreeRADIUS needs to be updated with that list of files. Would %attr(0700,radiusd,radiusd) %dir usr/include/freeradius Be sufficient? Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: RPM Build-error

2007-01-30 Thread King, Michael
-Original Message- The RPM file in FreeRADIUS needs to be updated with that list of files. (Resend, helps if I format the line correctly, forgot a leading /) Would %attr(0700,radiusd,radiusd) %dir /usr/include/freeradius Be sufficient? Mike - List

RE: RPM Build-error

2007-01-30 Thread King, Michael
To answer my own question... It looks like not. It looks like it's just /usr/include/freeradius/* After the last line in the files section. -Original Message- From: [EMAIL PROTECTED] g [mailto:[EMAIL PROTECTED] adius.org] On Behalf Of King, Michael Sent: Tuesday, January

Re: RPM Build-error

2007-01-30 Thread Alan DeKok
King, Michael wrote: %attr(0700,radiusd,radiusd) %dir usr/include/freeradius Be sufficient? I don't see why we couldn't make the include files 0644. There's nothing special about them. Alan DeKok. -- http://deployingradius.com - The web site of the book

Re: RPM Build-error

2007-01-30 Thread Alan DeKok
King, Michael wrote: To answer my own question... It looks like not. It looks like it's just /usr/include/freeradius/* %{_incdir}/freeradius/* looks better. I've committed it. Alan DeKok. -- http://deployingradius.com - The web site of the book

Re[2]: strange error in freeradius

2007-01-30 Thread Semenenko Pavel
-Original Message- From: Markus Krause [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Date: Sun, 28 Jan 2007 19:29:18 +0100 Subject: Re: strange error in freeradius Zitat von Semenenko Pavel [EMAIL PROTECTED]: I have 2.6.18-gentoo-r6 kernel, and freeradius-1.1.3-r2 I

Re: Freeradius and Oracle under Cygwin

2007-01-30 Thread Brian Atkins
Alan DeKok wrote: Which directory were you in when you ran configure? It *should* be the top-level directory, not src/modules/rlm_sql/ I tried from the rlm_sql_oracle directory under sources:

Re: LAN accounting

2007-01-30 Thread ij
Peter Nixon wrote: On Mon 29 Jan 2007 21:03, ij wrote: Stefan Winter wrote: Hello, I'm newbie,I wanna know that can i use FreeRadius+Dialup_admin as a LAN accounting? It means that i use them without dialing? the name dialup_admin is a bit misleading. You can as well manage LAN users with them.

Re: Freeradius(.net) and Oracle

2007-01-30 Thread Brian Atkins
Sorry for the delay Peter. I overlooked you message. On Tue, 23 Jan 2007 02:34:55, Peter Nixon wrote: I don't believe that freeradius.net contains database support of any kind. You will likely have to recompile freeradius yourself if you want to add Oracle support. You can expect some pain

Troube with matching LDAP group membership in authorize

2007-01-30 Thread Richard Hesse
I'm trying to setup radius authentication for enable access on our networking gear and having a tough time getting a working config. I'd like to have FR check a group in LDAP for membership before authorizing. That is, I only want user's listed in the uniquemember attribute of the Operations

Re: Freeradius(.net) and Oracle

2007-01-30 Thread Peter Nixon
On Tue 30 Jan 2007 20:35, Brian Atkins wrote: Sorry for the delay Peter. I overlooked you message. On Tue, 23 Jan 2007 02:34:55, Peter Nixon wrote: I don't believe that freeradius.net contains database support of any kind. You will likely have to recompile freeradius yourself if you

Re: Troube with matching LDAP group membership in authorize

2007-01-30 Thread Richard Hesse
Nevermind I found the problem. There's a limitation in ldap_groupcmp() such that only the last LDAP module instantiated is actually checked -- ignoring whatever you specify. I found this info from http://lists.cistron.nl/pipermail/freeradius-users/2004-June/033220.html. In any case the ldap

Re: Why Freeradius and Mysql dont work?

2007-01-30 Thread yao guoxian
Where is the default config file and how to config it? I copyed surpport-files/my-medium.cnf to /etc/my.medim.cnf and its content is as follow: [client] #password = your_password port= 3306 socket = /tmp/mysql.sock # Here follows entries for some specific programs

Re: Troube with matching LDAP group membership in authorize

2007-01-30 Thread Alan DeKok
Richard Hesse wrote: Rather disappointing that this limitation still exists from 2 years ago. As always, patches are welcome. Does FR2.0 have some sort of object-based virtualization that would support this? Like, a LDAP group object which you could tie LDAP instances to and make the