Re: Re : cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

2008-07-27 Thread Alan DeKok
Reveal MAP wrote: > now we know what not to do at all. we are still wondering what we have > to do. Use a client that isn't broken. Sorry. Try SecureW2. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeRADIUS Expiration attribute and unix-time stamp

2008-07-27 Thread Jeep Or Die
Hello Everyone. I am new to *nix in general, and so when I ran across unix-time for the first time, I took the time to read up on it. I have created a wifi captured portal system using freeRADIUS, Mysql and Open BlueDragon, but I am having a problem with the Expiration attribute in freeRADIUS. A

Re : cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

2008-07-27 Thread Reveal MAP
Ok, now we know what not to do at all. we are still wondering what we have to do. - if bootstrap works at your side,there isno reason that it doesn't work at our side: we didn't change nothing on this file, but follow the /etc/raddb/certs/REDME file... hope we will togheter figure rhe problem

Re: Re : cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

2008-07-27 Thread Alan DeKok
Reveal MAP wrote: > Yes, Alan, we already now that thedefault config do works! my mind: > freeradius (in our case, sergio and me) is correctly configured. But, we > encounterd a problem showing no error message. so to make the log > slimmer, why not deactivate some non mandatory module in our scena

Re: 2.0.5 on Solaris

2008-07-27 Thread Alan DeKok
Rafiqul Ahsan wrote: > Can anyone suggest the documents/wiki for installation steps for > Freeradius 2.0.5 on Solaris ? $ ./configure $ make $ make install This worked the last time I tried 2.0.5 on Solaris. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/us

2.0.5 on Solaris

2008-07-27 Thread Rafiqul Ahsan
Can anyone suggest the documents/wiki for installation steps for Freeradius 2.0.5 on Solaris ? -- Rafiqul Ahsan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re : cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

2008-07-27 Thread Reveal MAP
Yes, Alan, we already now that thedefault config do works! my mind: freeradius (in our case, sergio and me) is correctly configured. But, we encounterd a problem showing no error message. so to make the log slimmer, why not deactivate some non mandatory module in our scenario?? so the output wil

RE: pam module

2008-07-27 Thread Robert Svensson
No, the radius server never receives anything for some reason -Original Message- From: [EMAIL PROTECTED] on behalf of Nicolas Goutte Sent: Fri 2008-07-25 17:22 To: FreeRadius users mailing list Subject: Re: pam module Am 25.07.2008 um 16:52 schrieb Robert Svensson: > Hi, > This might

Re : Re : cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

2008-07-27 Thread Reveal MAP
I'm agree, a good begining would be comment out all modules you're not using. The instances of the modules are in sites-enabled/default and sites-enabled/inner-tunnel (for peap and ttls). - --- Donb't worry, it will be done soon (as soon as the week starts again ). i really want to figure it

Freeradius && Diffie-Hellman

2008-07-27 Thread Sergio
Hi, Has anybody ever change the type of key exchange using eap-tls? eap.conf: . rsa_key_exchange = yes dh_key_exchange = no rsa_key_length =1024 dh_key_length... ... output of radiusd -X Module: Instantiating eap-tls tls { rsa_key_exchange = yes dh_

Re: Re : cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

2008-07-27 Thread Alan DeKok
Sergio wrote: > I'm agree, a good begining would be comment out all modules you're not > using. The instances of the modules are in sites-enabled/default and > sites-enabled/inner-tunnel (for peap and ttls). For debugging... no. The default configuration file WORKS in the widest possible set of

Re : cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

2008-07-27 Thread Sergio
Anders Holm escribió: [snip] rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. //Normal, i am not willing to do PAP but mschapv2 If you’re not using a module, disable it. All it’ll do is add latency, delays and unne

Re: FreeRadius 2.0.3 setup help

2008-07-27 Thread Alan DeKok
Brooks, Kyle wrote: > We have been trying to setup the new FreeRadius server, version 2.0.3 on > Fedora 9. We are very close as during testing a user was able to authenticate > to AD via LDAP. Radtest was ok, but there is no accept packet/acknowledgment > sent back, so the network switch thinks