Re: Hint. Need help

2008-03-21 Thread Alan DeKok
Mikhail Novikov wrote: Hello Please, what the hint should I add to hints file to remove Nas-Port-ID attribute Nas-Port-ID = GigabitEthernet 0/0/3.23203101:2321-121 and add PortID like this PortID = 2321-121 Use a regular expression to re-write it: DEFAULT NAS-Port-Id =~

Re: Terminate EAP-PEAP client connection at FreeRadius Proxy and proxy(forward) request as PAP

2008-03-21 Thread Ryan
Just read through some of the messages available on proxy tunneling. I'm currently using 2.0.2 and read through the examples on inner tunnel which seems to be able to do what I need. Can someone help by providing more details on how it actually works? Thanks/Regards Ryan On Thu, Mar 20, 2008 at

WPA_Supplicant re-authentication

2008-03-21 Thread Arran Cudbard-Bell
Hi All, I know this isn't strictly a FreeRADIUS issue but many of the users of the list are involved in academia and so may have come across this with their linux users. wpa_Supplicant appears to work fine on wireless networks, but on wired networks it attempts to re-authenticate every 30

Re: WPA_Supplicant re-authentication

2008-03-21 Thread Jouni Malinen
On Fri, Mar 21, 2008 at 1:05 PM, Arran Cudbard-Bell [EMAIL PROTECTED] wrote: I know this isn't strictly a FreeRADIUS issue but many of the users of the list are involved in academia and so may have come across this with their linux users. wpa_Supplicant appears to work fine on wireless

Re: WPA_Supplicant re-authentication

2008-03-21 Thread Phil Mayers
Arran Cudbard-Bell wrote: Hi All, I know this isn't strictly a FreeRADIUS issue but many of the users of the list are involved in academia and so may have come across this with their linux users. wpa_Supplicant appears to work fine on wireless networks, but on wired networks it attempts to

Re: Terminate EAP-PEAP client connection at FreeRadius Proxy and proxy(forward) request as PAP

2008-03-21 Thread Alan DeKok
Ryan wrote: Just read through some of the messages available on proxy tunneling. I'm currently using 2.0.2 and read through the examples on inner tunnel which seems to be able to do what I need. Can someone help by providing more details on how it actually works? PEAP authentication is

Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-03-21 Thread Alan DeKok
James McOrmond wrote: With that, and a few configuration options (like making sure the host was connected to the domain and ntlm_auth functioned as required), i've managed to get PEAP and EAP-MSCHAPv2 working fine to the ntdomain. The guides for *that* are online. EAP-TTLS works fine with

Hostapdradiusclient--freeradiusproxy-X-freeradiusserver

2008-03-21 Thread romain.raynaud
Hi! I have a problem to configure the freeradius 2.0.2 proxy to communicate with the freeradius 2.0.2 server. And I found nothing to help me neither on the web nor on the wiki. My architecture is this one : Hostapd radius client 10.193.11.212 - 10.193.11.232 - 10.193.11.166 freeradius server

auth-type local trouble in 2.0.1

2008-03-21 Thread Oleg Kozheltsev
modcall: entering group authorize for request 1 modcall[authorize]: module preprocess returns ok for request 1 radius_xlat: '/var/corp/radacct/1.1.1.1/2008/03/auth-detail-20080321' rlm_detail: /var/corp/radacct/%{Client-IP-Address}/%Y/%m/auth-detail-%Y%m%d expands to /var/corp/radacct/1.1.1.1

Re: WPA_Supplicant re-authentication

2008-03-21 Thread A . L . M . Buxey
hi, a couple of my workstations are Ubuntu Linux systems using wpa_supplicant to EAP auth on the wired and thus get a different VLAN to the other nearby 'untrusted' systems ;-) I dont see any reauth every 30 seconds. cisco switches used with FR 2.0.3 alan - List info/subscribe/unsubscribe? See

Re: auth-type local trouble in 2.0.1

2008-03-21 Thread Ivan Kalik
for request 1 radius_xlat: '/var/corp/radacct/1.1.1.1/2008/03/auth-detail-20080321' rlm_detail: /var/corp/radacct/%{Client-IP-Address}/%Y/%m/auth-detail-%Y%m%d expands to /var/corp/radacct/1.1.1.1/2008/03/auth-detail-20080321 modcall[authorize]: module auth_log returns ok for request 1 users

Re: auth-type local trouble in 2.0.1

2008-03-21 Thread A . L . M . Buxey
hi, ensure you have 'pap' authentication module as the last in your list, DONT set Auth-Type:= Local alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Hostapdradiusclient--freeradiusproxy-X-freeradiusserver

2008-03-21 Thread Ivan Kalik
Debug the proxy. Is it sending packets to the home server? If proxy is sending packets and home server is not receiving them you have a firewall blocking them. Ivan Kalik Kalik Informatika ISP Dana 21/3/2008, [EMAIL PROTECTED] [EMAIL PROTECTED] piše: Hi! I have a problem to configure the

A good Open Source Billing Program For Freeradius?

2008-03-21 Thread Lance Buttars
I need to setup a hotspot with billing capabilities and was wondering if anyone had some recommendations. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Hostapdradiusclient--freeradiusproxy-X-freeradiusserver

2008-03-21 Thread Alan DeKok
[EMAIL PROTECTED] wrote: My architecture is this one : Hostapd radius client 10.193.11.212 - 10.193.11.232 - 10.193.11.166 freeradius server freeradius proxy That *should* be fairly standard. I have no connection message between the proxy and the server and no proxied messages send from

Re: Problem Freeradius+Ipcop ProxyAdv with mysql

2008-03-21 Thread vabbè
1 - The secret key is correct, it's same in server and NAS (radius123). 2 - The entry Auth-Type System is comment out already. Ivan Kalik wrote: 1. There is quite a clear warning in the debug. 2. Comment out the entry in users file setting Auth-Type System if you are not using it.

Re: Problem Freeradius+Ipcop ProxyAdv with mysql

2008-03-21 Thread Ivan Kalik
2 - The entry Auth-Type System is comment out already. Debug suggests it isn't. Do you have more than one version installed? Are you sure you are running the correct one. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: virtual server configuration

2008-03-21 Thread usawebbox
On Wed, 19 Mar 2008 07:30:53 +0100, Alan DeKok [EMAIL PROTECTED] said: [EMAIL PROTECTED] wrote: All you need is a server cert and private key. In PEAP, the client is the one who needs the CA cert, if he wants to verify the server cert, but even that is optional. The CA cert is