Re: PEAP mschapv2 using xp native supplicant

2008-08-27 Thread Alan DeKok
Ryan Setiawan H wrote: Here the attribute at LDAP server for user testing dn: uid=testing,ou=dialup,dc=zzz,dc=com ... lmPassword: Testing10 ntPassword: Testing10 And here we have it. Those are NOT valid lmPassword or ntPassword fields. You are putting the clear-text password into those

Re: compiling freeradius with oracle support

2008-08-27 Thread Alan DeKok
Alexandre Chapellon wrote: First of all I can find the missing symbol (OCIEnvCreate) in the lib installed by the oracle instantclient: That's good. but in the same time i can see that the oracle module is not linked with any of the oracle lib!!? That's bad. Do you think it's normal?

Integrating FreeRadius and Openldap: rlm_ldap not found error

2008-08-27 Thread Syed Anwarul Hasan
I have done the following changes in the files below to test FreeRadius Server against a Openldap backend . * 1) /etc/raddb/modules/ldap* ldap { # # Note that this needs to match the name in the LDAP # server certificate, if you're using ldaps. *server = 127.0.0.1 identity

Re: Integrating FreeRadius and Openldap: rlm_ldap not found error

2008-08-27 Thread Alan DeKok
Syed Anwarul Hasan wrote: I have done the following changes in the files below to test FreeRadius Server against a Openldap backend Please do not post the configuration files to the list. You've sent over a LOT of data, much of which is unchanged from the files that ship with the server.

Re: MSCHAP module returns OK, authentication fails..

2008-08-27 Thread James Yale
2008/8/26 [EMAIL PROTECTED]: Hi, I'm using a MacOS as a test client, which connects to the wireless network, prompts about an invalid certificate chain for the SSL cert well, unless you've installed the CA etc that you signed the RADIUS server with, this will always be the case. until you

Re: Integrating FreeRadius and Openldap: rlm_ldap not found error

2008-08-27 Thread Syed Anwarul Hasan
Ok,Alan. I will send debug o/p Short messages in future. SYED On Wed, Aug 27, 2008 at 11:58 AM, Alan DeKok [EMAIL PROTECTED]wrote: Syed Anwarul Hasan wrote: I have done the following changes in the files below to test FreeRadius Server against a Openldap backend Please do not post the

Re: MSCHAP module returns OK, authentication fails..

2008-08-27 Thread Alan DeKok
James Yale wrote: With a default configuration EAP works with a user specified in the users file with a cleartext password (http://jim.geezas.com/stuff/radius-debugging/ *-success.log files). This works via eapol and a Mac test client. Ah. As soon as I enable the MSCHAP module

md5 passwords

2008-08-27 Thread Alexandre J. Correa - Onda Internet
Hello, How i can auth users via radius.. using passwords crypt with md5 stored on db ? thanks ? -- Sds. Alexandre Jeronimo Correa Onda Internet - http://www.ondainternet.com.br OPinguim Hosting - http://www.opinguim.net Linux User ID #142329 UNOTEL S/A - http://www.unotel.com.br - List

certification problem

2008-08-27 Thread Ahmet DÜLGAR
hi, finaly i could run radius with mysql,so thank everyone who helps me, but i have a new problem when i test connection with radtest or NTRadPing program it works fine , but in real world with a notebook on windows xp sp2 it gives an error about, windows cannot find correct certiface or like

Re: md5 passwords

2008-08-27 Thread Ivan Kalik
This is documented. http://freeradius.org/radiusd/man/rlm_pap.html http://wiki.freeradius.org/SQL_HOWTO#Populating_SQL Ivan Kalik Kalik Informatika ISP Dana 27/8/2008, Alexandre J. Correa - Onda Internet [EMAIL PROTECTED] piše: Hello, How i can auth users via radius.. using passwords crypt

Re: certification problem

2008-08-27 Thread Ivan Kalik
windows cannot find correct certiface You have paid for Microsoft software on your PC and their technical support is available to you. This list is for problems with freeradius not Windows. Most likely you have made some adjustments to Windows and it now ignores self-signed certificates. Ivan

RE: certification problem

2008-08-27 Thread Ahmet DÜLGAR
thank for reply Ivan Kalik my question is about creating right certificates not about windows To: freeradius-users@lists.freeradius.org Subject: Re: certification problem Date: Wed, 27 Aug 2008 13:45:41 +0100 From: [EMAIL PROTECTED] windows cannot find correct certiface You have paid for

Re: certification problem

2008-08-27 Thread Alan DeKok
Ahmet DÜLGAR wrote: thank for reply Ivan Kalik my question is about creating right certificates not about windows FreeRADIUS comes with certificate creation scripts. See also my web site for instructions on getting EAP to work with Windows: http://deployingradius.com Alan DeKok. - List

Re: md5 passwords

2008-08-27 Thread Alan DeKok
Alexandre J. Correa - Onda Internet wrote: How i can auth users via radius.. using passwords crypt with md5 stored on db ? Put the MD5 passwords into the MD5-Password attribute. After that, the server will figure out how to authenticate the user. Alan DeKok. - List

Re: freeradius, proxy and packet loss

2008-08-27 Thread Alan DeKok
Evgeniy Kozhuhovskiy wrote: - my freeradius 2.0.5 server sends auth-req -- remote server gets it and process -- remote server sends answer -- it reach our server -- ~95% replyes goes to NAS'es, but sometimes my server says that Rejecting request 4490 due to lack of any response from home

freeradius, proxy and packet loss

2008-08-27 Thread Evgeniy Kozhuhovskiy
Hi all! I have a freeradius 2.0.5 installed and configured to authorize to realms (for example @a and @b) First realm - @a - authorizes locally (via rlm_sql) Second - @b - is proxying to remote server. The trouble looks so (we take this with with tcpdump): - my freeradius 2.0.5 server sends

User-Password required Authentication problem

2008-08-27 Thread Syed Anwarul Hasan
Hi Alan and all, Thanks Alan for you earlier reply. I have a problem for Authenticating Radius server with Openldap backend. In the ldap.attrmap I added the line *checkitem User-Password userPassword *and also under modules in ldap module I have set_auth_type=yes for binding LDAP for

Re: User-Password required Authentication problem

2008-08-27 Thread Alan DeKok
Syed Anwarul Hasan wrote: ... Also in the Sites-enabled dir under default file, I have added in the Authorize section I added, *update control { Auth-Type :=ldap Why? All of the documentation and configuration files say DO NOT DO SET AUTH-TYPE. ... rlm_ldap: Attribute User-Password is

Compile problems

2008-08-27 Thread David Blood
I am trying to install freeradius from source and cannot seem to get it to install correctly. 1.I am installing on a centos 4.5 box and would like freeradius to install the config file in the correct place (i.e. /etc/raddb) setting the prefix='' ( or sysconfdir='/etc/raddb') in the

Re: compiling freeradius with oracle support

2008-08-27 Thread Alexandre Chapellon
Alan DeKok a écrit : Alexandre Chapellon wrote: First of all I can find the missing symbol (OCIEnvCreate) in the lib installed by the oracle instantclient: That's good. but in the same time i can see that the oracle module is not linked with any of the oracle lib!!?

freeradius for Cisco accounting

2008-08-27 Thread ICHIRO Yamaguchi
Hi,I'm Ichiro Yamaguchi from Japan. I installed freeradius ver.1.1.7 on Solaris 10(sparc). I want to use this radius server for Cisco AAA accounting function. I could not catch any information how to setup radius server for cisco accounting function. Please show me any information about this.

Re: PEAP mschapv2 using xp native supplicant

2008-08-27 Thread Ryan Setiawan H
I've changed the lm and nt password using hash one, and now it works thanks Alan And here we have it. Those are NOT valid lmPassword or ntPassword fields. You are putting the clear-text password into those fields. The clear-text password belongs in the userPassword field. Delete the