RE: wpa_supplicant(eapol_test) with freeradius: error coming in TLS

2008-07-09 Thread Gaurav Kansal
Hi I made the following change and it worked for me. In Makefile (/usr/local/etc/raddb/certs/), I passed the input files of that of ca rather than server while creating the client certificate. Regards, Gaurav Kansal Velankani Software Private Limited, 43, Electronics City, Phase - 2, Hosur Ro

Re: about "freeradius accepts anybody"

2008-07-09 Thread Ivan Kalik
>file autorizados contains this > "user1"Cleartext-Password := "" >Reply-Message = "Autorizando." >Fall-Through = No That's not going to work. You can't make EAP-TLS use passwords. >I had to make this because I'm not the signer of client certificates, >only

Re: detail records

2008-07-09 Thread Pshem Kowalczyk
Hi > We're using freeradius 2.0.5 in our test environment and noticed that our > detail record doesn't have "Freeradius-Proxied-To" information like our > current production radius which is still running an old version of > freeradius. We currently setup the accounting record to be proxied to a >

Re: EAP-TTLS / LDAP

2008-07-09 Thread joris
Hey guys, sorry for the delay. Yeah after reading your advices, I agree that I misread. I will use EAP-TTLS with EAP method "PAP" encapsulated in it. Thanks Sergio for the link for Windows users : in my case with an intel wifi card, Intel was kind enough to provide the same kind of utilities. But

detail records

2008-07-09 Thread Roy Kartadinata
Hello all, We're using freeradius 2.0.5 in our test environment and noticed that our detail record doesn't have "Freeradius-Proxied-To" information like our current production radius which is still running an old version of freeradius. We currently setup the accounting record to be proxied to a

about "freeradius accepts anybody"

2008-07-09 Thread Sergio Yébenes Moreno
Using eap-tls we can make a "filter" to users, based on different attibutes (I think). In my case, the "identity" field in wpa_supplicant.conf. Freeradius config: file users contains this . . $INCLUDE autorizados DEFAULTAuth-Type := Reject Reply-Message = "out"

Re: POP3

2008-07-09 Thread Slava
Tanks much, will try the options you have pointed to Slava Shkarupin Kiev, UA - Original Message - From: "Matt Garretson" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Wednesday, July 09, 2008 17:16 Subject: Re: POP3 Alan DeKok wrote: Slava wrote: Could anyone tel

Re: Reply Attribute and Stripping a realm

2008-07-09 Thread Ivan Kalik
>I need to force a reply attribute for the slipstream service to all my >customers. >I'm using flatfile, just a basic setup. What would be the best way to do >this? Create a DEFAULT entry in users file. >Also, How do I strip Realms? We get users coming to our RADIUS in this >format [EMAIL PROTECT

Reply Attribute and Stripping a realm

2008-07-09 Thread Sandra H.
I have a couple questions. I need to force a reply attribute for the slipstream service to all my customers. I'm using flatfile, just a basic setup. What would be the best way to do this? Also, How do I strip Realms? We get users coming to our RADIUS in this format [EMAIL PROTECTED] My flatfil

Re: wpa_supplicant(eapol_test) with freeradius: error coming in TLS

2008-07-09 Thread Alan DeKok
Sergio Yébenes Moreno wrote: > I think that PKI that comes with freeradius by default are shit Feel free to submit fixes. Most people don't have problems with the defaults. Perhaps because they realize that the defaults are for testing, and not for production use. > (./bootstrap). I had the

Re: wpa_supplicant(eapol_test) with freeradius: error coming in TLS

2008-07-09 Thread Sergio Yébenes Moreno
Gaurav Kansal escribió: Hi I am trying to use EAP-TLS between wpa_supplicant and freeradius. I created the certificates (ca/server/client) as mentioned in freeradius-server-2.0.5/raddb/certs/README. In freeradius-server-2.0.5/raddb/users, following line is added at end: testuser Cleartex

Re: POP3

2008-07-09 Thread Matt Garretson
Alan DeKok wrote: > Slava wrote: >> Could anyone tell me if there exists a solution to integrate FR with a >> POP3 server > Look for patches to let cucipop do RADIUS authentication. If there > are none, maybe cucipop does PAM authentication. You could then use the > PAM RADIUS module. FWIW, Q

Re: EAP/TLS

2008-07-09 Thread Ivan Kalik
>++[eap] returns handled > >    EAP-Message = 0x010300060d20 > >    Message-Authenticator = 0x > >    State = 0x7382effe7381e2540240fd45d4418b28 > >Finished request 4. > >Going to the next request > >Waking up in 4.9 seconds. > >Cleaning up request 4 ID 1

Re: sql_log inside virtual servers

2008-07-09 Thread Leon Kyneur
On Wed, Jul 9, 2008 at 5:03 PM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Leon Kyneur wrote: >> I'm trying to configure my virtual servers to have different sql_log >> queries and having some difficulty specifying the queries within the >> server { } block > > You don't. The modules are defined in

Re: EAP/TLS

2008-07-09 Thread Sergio Yébenes Moreno
ee http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Información de NOD32, revisión 3253 (20080709) __ Este mensaje ha sido analizado con NOD32 antivirus system http://www.nod32.com Have you read last lines of eap.conf? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: sql_log inside virtual servers

2008-07-09 Thread Alan DeKok
Leon Kyneur wrote: > I'm trying to configure my virtual servers to have different sql_log > queries and having some difficulty specifying the queries within the > server { } block You don't. The modules are defined in the "modules" section of the configuration file (raddb/modules) > redefinin

Re: about EAP using 1.1.7 and 2.0.3

2008-07-09 Thread A . L . M . Buxey
hi, as Alan stated - your NAS doesnt seem to be getting the responses from your server. some ACL or routing issue? (stick a sniffer directly in front of the switch...if you need to, you may need to have a 'port mirror' or somesuch from the switch that feeds that switch if traffic is on a mgmt VLA

sql_log inside virtual servers

2008-07-09 Thread Leon Kyneur
Hi All, I'm trying to configure my virtual servers to have different sql_log queries and having some difficulty specifying the queries within the server { } block redefining sql_log { Start, Stop, Alive etc.. } parameters within each virtual server instance. Is this supported? Or can they only be

EAP/TLS

2008-07-09 Thread Kwok Sianbin
Thanks for the tips. If the certificates are fine then the only problem here is the radius server. XP can not authenticate the client & can't get connected. here the output Ready to process requests.     User-Name = "MarsNet_Client"     NAS-IP-Address = 0.0.0.0     Framed-