Hi list,
Plz explain the overview of how to enable mac address based authentication
where all the three parameters (uid, userPassword and radiusCallingStationId
are matched from the ldap database)..
at presently am able to do uid + userPassword successfully from openldap
database
--
Registerd
On Thu, 15 Feb 2007, silvia bogos wrote:
> please i need to decide what to use RED HAT OR SLACKWARE.
Um, use whichever one you want? To the rest of us, the distribution
you choose to run really doesn't matter.
That said, I moved off of Slackware around 1998 and haven't looked
back.
--
Jeremy
Redhat is probably the Ford of the linux distributions: it'll get you to
where you want to be, it just might not do it as quickly or flashily as
other distros.
For most installs I recommend CentOS - which is basically Redhat Enterpise 4
but free. You pretty much can't go wrong with any modern, ma
but i knew that slackware is the most secure and flexible and greater than
any other os
so what do u think
thanx
On 2/15/07, Gaddis, Jeremy L. <[EMAIL PROTECTED]> wrote:
On Thu, 15 Feb 2007, silvia bogos wrote:
> please i need to decide what to use RED HAT OR SLACKWARE.
Um, use whichever one
Personally i'd recommend a distro with a functioning package handler, my
suggestion is debian. Feels good when you update the whole system with
the ease of one command. The wet dream of every admin.
//M
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
org] On B
Hi!
Got a quick question. When i input "radwho", i get this output..
Login Name What TTY When From Location
userlogin username PPP S12 Thu 11:21 127.0.0.1 XXX.XXX.XXX.XXX
What does the TTY mean? What kind of TTY is radius using? Is there a
limit to how m
Thanks Alan,
What I'll probably have a go at will be attempting to authenticate it
against Samba if possible, not looked into how it works yet, but I'm
hopeful. :)
R
On 15/02/07, Alan DeKok <[EMAIL PROTECTED]> wrote:
> Richard Hamilton-Frost wrote:
> > What I want:
> >
> > To be able to authenti
Hi All,
I am using free radius server with dot1X. and supplicant is on
windows XP. Here when I use user name <= 3 letters I am getting
following error...
1. Received packet from 192.168.112.90 with invalid
Message-Authenticator! (Shared secret is incorrect.)
and for user name <=3
Thanks Jeremy.
I've been doing various searches for practical examples of 802.1x in a LAN
setting and haven't found anything yet. Have you?
-Original Message-
From: "Gaddis, Jeremy L." <[EMAIL PROTECTED]>
Date: Thu, 15 Feb 2007 00:07:42
To:FreeRadius users mailing list
Subject: R
[EMAIL PROTECTED] wrote:
> Hi All,
>
> I am using free radius server with dot1X. and supplicant is on
> windows XP. Here when I use user name <= 3 letters I am getting
> following error...
>
> * 1.* *Received packet from 192.168.112.90 with invalid
> Message-Authenticator! (Shared secret
Hi!
I am using the latest cvs version of freeradius.
Does this version support the read_group parameter?
In the conf file there is written that setting it to yes causes to read the
group table.
>From my observation freeradius works like this:
1 - checks records from radcheck
2 - if they match, a
Hi All,
I am using free radius server with dot1X. and supplicant is on
windows XP. Here when I use user name <= 3 letters I am getting
following error...
1. Received packet from 192.168.112.90 with invalid
Message-Authenticator! (Shared secret is incorrect.)
and for user name <=3
Hi,
> Thanks Jeremy.
>
> I've been doing various searches for practical examples of 802.1x in a LAN
> setting and haven't found anything yet. Have you?
it all depends on what kit you've got, both in the network space and in the
server architecture.
eg with decent Cisco or HP switches you can
I am using freeradius 1.1.4 with mysql.
I had to change the authorize_check_query.
authorize_check_query = "SELECT radcheck.id, radcheck.UserName,
radcheck.Attribute, radcheck.Value, radcheck.op \
FROM radcheck,nas \
WHERE (Username = '%{SQL-User-Name}') \
and (nas.type='Enterasys Net
Hi list!
Recently upgraded from 1.1.3 to 1.1.4 to support EAP-PEAP for Windows
Vista clients. That works fine but now I got problems with missing reply
attributes for Mac OSX clients using EAP-TTLS.
FreeRADIUS sends an Access-Challenge with the correct attributes but
they are missing from the
Please forget this question. Someone had changed a network setting, so
that mysql and rlm_sql did not reach the same databases.
Right now everything works as expected.
Sorry
Norbert Wegener
Norbert Wegener schrieb:
> I am using freeradius 1.1.4 with mysql.
>
> I had to change the authorize_chec
Hi,
> Recently upgraded from 1.1.3 to 1.1.4 to support EAP-PEAP for Windows
> Vista clients. That works fine but now I got problems with missing reply
> attributes for Mac OSX clients using EAP-TTLS.
I can also report the same issue. I have been looking at it for a little
while now - I thought
[EMAIL PROTECTED] wrote:
> I can also report the same issue. I have been looking at it for a little
> while now - I thought it may have been my attribute filter being too
> strict - but I saw no EAP-TTLS attributes that are documented that I'm
> not allowingand I believe I havent changed my at
HI, i do the following:
bash-2.05b# ls -l /usr/local/etc/raddb/db.counter
-rw--- 1 root wheel 24576 Nov 21 2003 /usr/local/etc/raddb/db.counter
bash-2.05b# ls -l /usr/local/etc/
...
drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb
...
and in /etc/rc.conf
radiusd_enable="YES"
The rad
Hi,
> bash-2.05b# ls -l /usr/local/etc/raddb/db.counter
> -rw--- 1 root wheel 24576 Nov 21 2003 /usr/local/etc/raddb/db.counter
> drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb
right. so root is okay. do you run radiusd as root?
alan
-
List info/subscribe/unsubscribe? See http:
Hi,
How does FreeRADIUS's rlm_eap module choose the cipher suite used for
EAP-TLS/TTLS sessions?
RFC 2246 for TLS states that the client presents the list of
ciphersuites supported to the server and the server picks one that it
supports.
Is there a way to configure FreeRADIUS to only use a speci
Hi,
On 2/15/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Hi,
>
> > bash-2.05b# ls -l /usr/local/etc/raddb/db.counter
> > -rw--- 1 root wheel 24576 Nov 21 2003
> > /usr/local/etc/raddb/db.counter
>
> > drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb
>
> right. so root is okay. d
Walter Goulet wrote:
>
> How does FreeRADIUS's rlm_eap module choose the cipher suite used for
> EAP-TLS/TTLS sessions?
It relies on OpenSSL to do the negotiation.
> RFC 2246 for TLS states that the client presents the list of
> ciphersuites supported to the server and the server picks one that
Hi All,
I am using free radius server with dot1X. and supplicant is on
windows XP. Here when I use user name <= 3 letters I am getting
following error...
1. Received packet from 192.168.112.90 with invalid
Message-Authenticator! (Shared secret is incorrect.)
and for user name <=3
Thanks Peter and Alan for your replies.
I don't mind recompiling, except that I need to run FreeRadius as a
Windows service, and I don't know what it takes to enable mysql in the
compilation.
Basically my problem with the default setup, is that it logs on a
per-day basis. If I can configure Fr
Hi all.
Just want to pose this qn to the community:
Is it possible to configure FreeRadius, so that instead of generate a
new accouting file per-day, can it be per-hour (or better: per-n minutes)?
Thanks
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> -Original Message-
>
> Hi all.
>
> Just want to pose this qn to the community:
>
> Is it possible to configure FreeRadius, so that instead of
> generate a new accouting file per-day, can it be per-hour (or
> better: per-n minutes)?
>
> Thanks
> -
> List info/subscribe/unsubscribe? S
Hello Ranner,
Beautiful! Thanks for the quick pointer. I did a keyword search, but I
guess I missed out on this one.
Ranner, Frank MR wrote:
>> -Original Message-
>>
>> Hi all.
>>
>> Just want to pose this qn to the community:
>>
>> Is it possible to configure FreeRadius, so that instead
28 matches
Mail list logo