MAC address authentication

2007-02-15 Thread Shobhit Jindal
Hi list, Plz explain the overview of how to enable mac address based authentication where all the three parameters (uid, userPassword and radiusCallingStationId are matched from the ldap database).. at presently am able to do uid + userPassword successfully from openldap database -- Registerd

Re: Red Hat vs. Slackware

2007-02-15 Thread Gaddis, Jeremy L.
On Thu, 15 Feb 2007, silvia bogos wrote: > please i need to decide what to use RED HAT OR SLACKWARE. Um, use whichever one you want? To the rest of us, the distribution you choose to run really doesn't matter. That said, I moved off of Slackware around 1998 and haven't looked back. -- Jeremy

Re: Red Hat vs. Slackware

2007-02-15 Thread Jan Mulders
Redhat is probably the Ford of the linux distributions: it'll get you to where you want to be, it just might not do it as quickly or flashily as other distros. For most installs I recommend CentOS - which is basically Redhat Enterpise 4 but free. You pretty much can't go wrong with any modern, ma

Re: Red Hat vs. Slackware

2007-02-15 Thread affora deeb
but i knew that slackware is the most secure and flexible and greater than any other os so what do u think thanx On 2/15/07, Gaddis, Jeremy L. <[EMAIL PROTECTED]> wrote: On Thu, 15 Feb 2007, silvia bogos wrote: > please i need to decide what to use RED HAT OR SLACKWARE. Um, use whichever one

RE: Red Hat vs. Slackware

2007-02-15 Thread Max Jonborn
Personally i'd recommend a distro with a functioning package handler, my suggestion is debian. Feels good when you update the whole system with the ease of one command. The wet dream of every admin. //M From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] org] On B

TTY?

2007-02-15 Thread Max Jonborn
Hi! Got a quick question. When i input "radwho", i get this output.. Login Name What TTY When From Location userlogin username PPP S12 Thu 11:21 127.0.0.1 XXX.XXX.XXX.XXX What does the TTY mean? What kind of TTY is radius using? Is there a limit to how m

Re: Linksys WRT54G - DD-WRT - Wireless Auth

2007-02-15 Thread Richard Hamilton-Frost
Thanks Alan, What I'll probably have a go at will be attempting to authenticate it against Samba if possible, not looked into how it works yet, but I'm hopeful. :) R On 15/02/07, Alan DeKok <[EMAIL PROTECTED]> wrote: > Richard Hamilton-Frost wrote: > > What I want: > > > > To be able to authenti

Doubt about RADIUS server errors.

2007-02-15 Thread raghavendra.sadaramachandra
Hi All, I am using free radius server with dot1X. and supplicant is on windows XP. Here when I use user name <= 3 letters I am getting following error... 1. Received packet from 192.168.112.90 with invalid Message-Authenticator! (Shared secret is incorrect.) and for user name <=3

Re: Simple security

2007-02-15 Thread Scott Hughes
Thanks Jeremy. I've been doing various searches for practical examples of 802.1x in a LAN setting and haven't found anything yet. Have you? -Original Message- From: "Gaddis, Jeremy L." <[EMAIL PROTECTED]> Date: Thu, 15 Feb 2007 00:07:42 To:FreeRadius users mailing list Subject: R

Re: Doubt about RADIUS server errors.

2007-02-15 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > Hi All, > > I am using free radius server with dot1X. and supplicant is on > windows XP. Here when I use user name <= 3 letters I am getting > following error... > > * 1.* *Received packet from 192.168.112.90 with invalid > Message-Authenticator! (Shared secret

Does the latest cvs support the read_gro ups parameter

2007-02-15 Thread tzieleniewski
Hi! I am using the latest cvs version of freeradius. Does this version support the read_group parameter? In the conf file there is written that setting it to yes causes to read the group table. >From my observation freeradius works like this: 1 - checks records from radcheck 2 - if they match, a

Getting error in radius server with dot1X and supplicant on windows XP...

2007-02-15 Thread raghavendra.sadaramachandra
Hi All, I am using free radius server with dot1X. and supplicant is on windows XP. Here when I use user name <= 3 letters I am getting following error... 1. Received packet from 192.168.112.90 with invalid Message-Authenticator! (Shared secret is incorrect.) and for user name <=3

Re: Simple security

2007-02-15 Thread A . L . M . Buxey
Hi, > Thanks Jeremy. > > I've been doing various searches for practical examples of 802.1x in a LAN > setting and haven't found anything yet. Have you? it all depends on what kit you've got, both in the network space and in the server architecture. eg with decent Cisco or HP switches you can

rlm_sql question

2007-02-15 Thread Norbert Wegener
I am using freeradius 1.1.4 with mysql. I had to change the authorize_check_query. authorize_check_query = "SELECT radcheck.id, radcheck.UserName, radcheck.Attribute, radcheck.Value, radcheck.op \ FROM radcheck,nas \ WHERE (Username = '%{SQL-User-Name}') \ and (nas.type='Enterasys Net

1.1.4 - TTLS - missing attributes

2007-02-15 Thread Bjarni Hardarson
Hi list! Recently upgraded from 1.1.3 to 1.1.4 to support EAP-PEAP for Windows Vista clients. That works fine but now I got problems with missing reply attributes for Mac OSX clients using EAP-TTLS. FreeRADIUS sends an Access-Challenge with the correct attributes but they are missing from the

Re: rlm_sql question

2007-02-15 Thread Norbert Wegener
Please forget this question. Someone had changed a network setting, so that mysql and rlm_sql did not reach the same databases. Right now everything works as expected. Sorry Norbert Wegener Norbert Wegener schrieb: > I am using freeradius 1.1.4 with mysql. > > I had to change the authorize_chec

Re: 1.1.4 - TTLS - missing attributes

2007-02-15 Thread A . L . M . Buxey
Hi, > Recently upgraded from 1.1.3 to 1.1.4 to support EAP-PEAP for Windows > Vista clients. That works fine but now I got problems with missing reply > attributes for Mac OSX clients using EAP-TTLS. I can also report the same issue. I have been looking at it for a little while now - I thought

Re: 1.1.4 - TTLS - missing attributes

2007-02-15 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > I can also report the same issue. I have been looking at it for a little > while now - I thought it may have been my attribute filter being too > strict - but I saw no EAP-TTLS attributes that are documented that I'm > not allowingand I believe I havent changed my at

Re: db.counter not found!

2007-02-15 Thread Enrique Llanos V.
HI, i do the following: bash-2.05b# ls -l /usr/local/etc/raddb/db.counter -rw--- 1 root wheel 24576 Nov 21 2003 /usr/local/etc/raddb/db.counter bash-2.05b# ls -l /usr/local/etc/ ... drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb ... and in /etc/rc.conf radiusd_enable="YES" The rad

Re: db.counter not found!

2007-02-15 Thread A . L . M . Buxey
Hi, > bash-2.05b# ls -l /usr/local/etc/raddb/db.counter > -rw--- 1 root wheel 24576 Nov 21 2003 /usr/local/etc/raddb/db.counter > drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb right. so root is okay. do you run radiusd as root? alan - List info/subscribe/unsubscribe? See http:

Algorithm used by FreeRADIUS to choose cipher suite used with EAP-TLS/TTLS

2007-02-15 Thread Walter Goulet
Hi, How does FreeRADIUS's rlm_eap module choose the cipher suite used for EAP-TLS/TTLS sessions? RFC 2246 for TLS states that the client presents the list of ciphersuites supported to the server and the server picks one that it supports. Is there a way to configure FreeRADIUS to only use a speci

Re: db.counter not found!

2007-02-15 Thread Enrique Llanos V.
Hi, On 2/15/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Hi, > > > bash-2.05b# ls -l /usr/local/etc/raddb/db.counter > > -rw--- 1 root wheel 24576 Nov 21 2003 > > /usr/local/etc/raddb/db.counter > > > drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb > > right. so root is okay. d

Re: Algorithm used by FreeRADIUS to choose cipher suite used with EAP-TLS/TTLS

2007-02-15 Thread Alan DeKok
Walter Goulet wrote: > > How does FreeRADIUS's rlm_eap module choose the cipher suite used for > EAP-TLS/TTLS sessions? It relies on OpenSSL to do the negotiation. > RFC 2246 for TLS states that the client presents the list of > ciphersuites supported to the server and the server picks one that

Getting error in radius server with dot1X and supplicant on windows XP...

2007-02-15 Thread raghavendra.sadaramachandra
Hi All, I am using free radius server with dot1X. and supplicant is on windows XP. Here when I use user name <= 3 letters I am getting following error... 1. Received packet from 192.168.112.90 with invalid Message-Authenticator! (Shared secret is incorrect.) and for user name <=3

Re: MySQL support in Windows binary of FreeRadius

2007-02-15 Thread Foo JH
Thanks Peter and Alan for your replies. I don't mind recompiling, except that I need to run FreeRadius as a Windows service, and I don't know what it takes to enable mysql in the compilation. Basically my problem with the default setup, is that it logs on a per-day basis. If I can configure Fr

Configure FreeRadius to generate new accounting file by hour

2007-02-15 Thread Foo JH
Hi all. Just want to pose this qn to the community: Is it possible to configure FreeRadius, so that instead of generate a new accouting file per-day, can it be per-hour (or better: per-n minutes)? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: [unclas] Configure FreeRadius to generate new accounting file by hour

2007-02-15 Thread Ranner, Frank MR
> -Original Message- > > Hi all. > > Just want to pose this qn to the community: > > Is it possible to configure FreeRadius, so that instead of > generate a new accouting file per-day, can it be per-hour (or > better: per-n minutes)? > > Thanks > - > List info/subscribe/unsubscribe? S

Re: [unclas] Configure FreeRadius to generate new accounting file by hour

2007-02-15 Thread Foo JH
Hello Ranner, Beautiful! Thanks for the quick pointer. I did a keyword search, but I guess I missed out on this one. Ranner, Frank MR wrote: >> -Original Message- >> >> Hi all. >> >> Just want to pose this qn to the community: >> >> Is it possible to configure FreeRadius, so that instead