Re: compiling freeradius with oracle support

2008-08-26 Thread Alan DeKok
Alexandre Chapellon wrote: > First of all I can find the missing symbol (OCIEnvCreate) in the lib > installed by the oracle instantclient: That's good. > but in the same time i can see that the oracle module is not linked with > any of the oracle lib!!? That's bad. > Do you think it's norma

Re: PEAP mschapv2 using xp native supplicant

2008-08-26 Thread Alan DeKok
Ryan Setiawan H wrote: > Here the attribute at LDAP server for user testing > > dn: uid=testing,ou=dialup,dc=zzz,dc=com ... > lmPassword: Testing10 > ntPassword: Testing10 And here we have it. Those are NOT valid lmPassword or ntPassword fields. You are putting the clear-text password into th

Re: PEAP mschapv2 using xp native supplicant

2008-08-26 Thread Ryan Setiawan H
The passwords you've added are invalid. The debug message is telling you that. Perhaps you could try posting WHAT you entered as LM-Password and NT-Password. Odds are you entered invalid ones. Because the debug message is telling you that they're invalid. Here the attribute at LDAP s

Re: using unlang to modify User-Name

2008-08-26 Thread rgreiner
Yep, that did the trick. Tks :-) Ivan Kalik wrote: > Sorry. > > User-Name := "test2" > > Ivan Kalik > Kalik Informatika ISP > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --

Re: using unlang to modify User-Name

2008-08-26 Thread rgreiner
I've tried that, also with and without the semi-colon at the end. Same result Roberto PS: Forgot to mention: running version 2.0.5 on Debian Etch Ivan Kalik wrote: > User-Name = "test2" > > Ivan Kalik > Kalik Informatika ISP > > > Dana 26/8/2008, "rgreiner" <[EMAIL PROTECTED]> pi¹e: > > >

re: using unlang to modify User-Name

2008-08-26 Thread Ivan Kalik
Sorry. User-Name := "test2" Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: using unlang to modify User-Name

2008-08-26 Thread Ivan Kalik
User-Name = "test2" Ivan Kalik Kalik Informatika ISP Dana 26/8/2008, "rgreiner" <[EMAIL PROTECTED]> piše: >Hi, > >using unlang I'm trying to modify the User-Name from the user, but >something isn't working. Could somebody give me a hand? > >What I'm doing (sample): > >authorize { >if (N

using unlang to modify User-Name

2008-08-26 Thread rgreiner
Hi, using unlang I'm trying to modify the User-Name from the user, but something isn't working. Could somebody give me a hand? What I'm doing (sample): authorize { if (NAS-IP-Address == 1.2.3.4) { update request { User-Name = test2;

Re: compiling freeradius with oracle support

2008-08-26 Thread Alexandre Chapellon
OK After I investigated a little bit more, something seems surporising to me. First of all I can find the missing symbol (OCIEnvCreate) in the lib installed by the oracle instantclient: nm /opt/oracle/instantclient_11_1/libocci.so.11.1 | grep OCIEnvCreate U OCIEnvCreate nm /opt/ora

Re: MSCHAP module returns OK, authentication fails..

2008-08-26 Thread A . L . M . Buxey
Hi, > I'm using a MacOS as a test client, which connects to the wireless > network, prompts about an invalid certificate chain for the SSL cert well, unless you've installed the CA etc that you signed the RADIUS server with, this will always be the case. until you trust the cert (by trusting the

Re: Pop3 and LDAP authentication...Multiple radius servers

2008-08-26 Thread Alan DeKok
Eric Martell wrote: > I am using radiusa to do proxy depends on the realm xyz.net to forward > to radiusb and all other requests (no realm in the usernames) still go > to radiusa. Then you need to configure the server to *not* look up [EMAIL PROTECTED] in LDAP. See "man unlang" in the latest ve

Re: Pop3 and LDAP authentication...Multiple radius servers

2008-08-26 Thread Eric Martell
Alan thanks for the reply. I already have radiusa which does the LDAP authentication ( which has ldap1 and ldap2 groups) . New business request came to add POP3 authentication for third party. so I added new radius server radiusb which does the POP3 auth. I am using radiusa to do proxy depends

Re: MSCHAP module returns OK, authentication fails..

2008-08-26 Thread Alan DeKok
James Yale wrote: > Perhaps someone can help, I'm trying to setup FreeRADIUS as a > cheaper/more flexible alternative to buying a Win2k3 Enterprise > licence to do PEAP/MSCHAP for wireless clients but seem to be having a > problem after the MSCHAP module is run. See http://deployingradius.com fo

Re: Pop3 and LDAP authentication...Multiple radius servers

2008-08-26 Thread Alan DeKok
Eric Martell wrote: > Here is the entire log. ... > rlm_ldap: performing search in dc=test1,dc=net,o=internet, with filter > (uid=testaccount) If you're proxying the request, why have you configured the server to do lookups in LDAP? > ldap://vadsdsdsad:389 failed: Can't contact LDAP server > rl

MSCHAP module returns OK, authentication fails..

2008-08-26 Thread James Yale
(Hopefully I haven't double posted) Hi, Perhaps someone can help, I'm trying to setup FreeRADIUS as a cheaper/more flexible alternative to buying a Win2k3 Enterprise licence to do PEAP/MSCHAP for wireless clients but seem to be having a problem after the MSCHAP module is run. I'm using a MacOS a

Re: Pop3 and LDAP authentication...Multiple radius servers

2008-08-26 Thread Eric Martell
Here is the entire log. rad_recv: Access-Request packet from host 167.206.23.94:1054, id=14, length=59     User-Name = "[EMAIL PROTECTED]"     User-Password = "test"   Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0   modcall[authorize]: mod

Re: Pop3 and LDAP authentication...Multiple radius servers

2008-08-26 Thread Alan DeKok
Eric Martell wrote: > I am sending request thru radclient on radiusa. But for some reason the > request does not get proxied to radiusb. > > This is the radius -X log. You've edited it so that most of it is missing. i.e. the part where it either decides to proxy, or to authenticate locally.

Re: Pop3 and LDAP authentication...Multiple radius servers

2008-08-26 Thread Eric Martell
Thanks Ivan. Now I have 2 radius servers running on same machine as radiusa (port 1812) and radiusb (port 1912). I configured radiusa to do ldap auth and radiusb to do POP3 auth which works fine "individually" thru radclient. I setup proxy.conf in radiusa as realm xyz.net {    type   

RE: Authenticating with two or more modules

2008-08-26 Thread Christian Lete
> Christian Lete wrote: > > I'm wondering if it is possible to authenticate using 2 modules by > > ANDing them? (the 2 modules must return true, to be a > sucessfully authentication). > > If so, would you please give me some pointers to documents, I will > > take it from there. > > Yes. Se

Re: mysql connection

2008-08-26 Thread John Dennis
Ahmet DÜLGAR wrote: hi, i uncomment sql int sites-enabled/default then i try to runi but there was error in sql.conf about the mysqldriver driver=rlm_sql_mysql but there is no file for mysql driver, because i install freeradiys2.0.5 by yum insatall freeradius on fedora That's because the FreeRAD

Re: PEAP mschapv2 using xp native supplicant

2008-08-26 Thread Alan DeKok
Ryan Setiawan H wrote: >>> rlm_mschap: Invalid LM-Password >>> rlm_mschap: Invalid NT-Password >> >> Well, that should be a hint. How about trying to add a user && >> password in the "users" file? An example is in the FAQ. > > when using users file it just work, the problem rose when using ldap

Re: mysql connection

2008-08-26 Thread A . L . M . Buxey
Hi, > now radisd dont broken up but when i looked the debug i see cant connect to > mysql > here is the debug log I can clearly see the connection to MySQL - its in the SQL section of the debug log - it opens 5 concurrent sessions to your DB...successfully. to configure for authentication, rea

RE: mysql connection

2008-08-26 Thread Ivan Kalik
>now radisd dont broken up but when i looked the debug i see cant connect to >mysql So, what's this then: >rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked >rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:/radius >rlm_sql (sql): starting 0 >rlm_sql (sql): A

RE: mysql connection

2008-08-26 Thread Ahmet DÜLGAR
thanks for your help alan dekok i installed the other packages of mysql that are mysql freeradius dialup admin now radisd dont broken up but when i looked the debug i see cant connect to mysql here is the debug log and how can i configure the user file for control the login users by the mysql

Re: PEAP mschapv2 using xp native supplicant

2008-08-26 Thread Ryan Setiawan H
rlm_mschap: Invalid LM-Password rlm_mschap: Invalid NT-Password Well, that should be a hint. How about trying to add a user && password in the "users" file? An example is in the FAQ. when using users file it just work, the problem rose when using ldap backend. In ldap database, I've adde

Re: mysql connection

2008-08-26 Thread Alan DeKok
Ahmet DÜLGAR wrote: > i uncomment sql int sites-enabled/default > then i try to runi but there was error in sql.conf about the mysqldriver > driver=rlm_sql_mysql > but there is no file for mysql driver, You will need to ensure it builds. This means having the MySQL client libraries && developme

mysql connection

2008-08-26 Thread Ahmet DÜLGAR
hi, i uncomment sql int sites-enabled/default then i try to runi but there was error in sql.conf about the mysqldriver driver=rlm_sql_mysql but there is no file for mysql driver, because i install freeradiys2.0.5 by yum insatall freeradius on fedora i then i download the all of files from www.fre

Re: PEAP mschapv2 using xp native supplicant

2008-08-26 Thread Alan DeKok
Ryan Setiawan H wrote: > Hi, I've uncomment the ldap section at inner-tunnel also make sure at > eap.conf default eap type peap, but still don't work. I've tried to make > the eap session directly go to inner-tunnel server at client.conf, That's not a good idea. It won't work. > rlm_mschap: In

Re: PEAP mschapv2 using xp native supplicant

2008-08-26 Thread Ryan Setiawan H
Ryan Setiawan H wrote: Please post ALL of the debug output. I suspect that you are doing the ldap lookups OUTSIDE of the TLS tunnel rather than INSIDE. ... repost forgot change subject I'm sorry I didn't include all the debug, because it was so large... anyway here the debug :