Re: EAP-TTLS in WinXP

rgreiner wrote: > Ok, then I got something wrong. Is there any link where I could get more > details about ms-chapv2 inside PEAP, more exactly concerning this > details about password? As far as I knew, ms-chapv2 would always require > cleartext passwords in the database. No. http://deploying

Re: Unable to authenticate to 10.5.4 open directory

I have now done a lot of debugging with my OS X Server + Open Directory Users setup: Using an Apple Access Point AND using Apple's Server Admin management tool to configure radiusd I am able to authenticate to Open Directory users BUT only when I provide my shortname without the realm/domain name.

Re: EAP-TTLS in WinXP

[EMAIL PROTECTED] wrote: > Hi, > >> Hi, >> >> I've seen that Windows XP does not support EAP-TTLS out of the box. I >> know there is at least one package (from SecureW2) that adds this to >> windows. >> >> Could somebody suggest me which other packages do the same? Or should I >> use the one fro

Re: Realm delimiter characters

Hi, > Question: WHERE does this configuration go? I have not found any suitable > configuration file. According to an outdated info in the wiki, this > information is supposed to be made in the radiusd.conf ... but this > information is no longer valid for version 2.0.5. almost all of the func

Re: EAP-TTLS in WinXP

Hi, > Hi, > > I've seen that Windows XP does not support EAP-TTLS out of the box. I > know there is at least one package (from SecureW2) that adds this to > windows. > > Could somebody suggest me which other packages do the same? Or should I > use the one from SecureW2? open1x.sf.net, Funk Odyss

EAP-TTLS in WinXP

Hi, I've seen that Windows XP does not support EAP-TTLS out of the box. I know there is at least one package (from SecureW2) that adds this to windows. Could somebody suggest me which other packages do the same? Or should I use the one from SecureW2? We intend to implement 802.1x Campus wide (or

Re: Realm delimiter characters

That should already be configured in realm module configuration file (raddb/modules/realm). Ivan Kalik Kalik Informatika ISP Dana 1/9/2008, "Nemec Christopher" <[EMAIL PROTECTED]> piše: >Hello list! > >Currently my installation of freeradius 2.0.5 only listens to realms including >the "@" chara

Realm delimiter characters

Hello list! Currently my installation of freeradius 2.0.5 only listens to realms including the "@" character. This seems to be the default behaviour; so far, so good. Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no

Re: CISCO VPN + FREERADIUS + CERTIFICATES

Gabriel Starczewski wrote: > I successfully set up radius-based authentication with mysql database > and local database of a cisco router. Nevertheless It would the most > desirable for me to be able to take advantage of certificates to > accomplish user authentication. EAP-TLS? PEAP? What kin

CISCO VPN + FREERADIUS + CERTIFICATES

Hi, I successfully set up radius-based authentication with mysql database and local database of a cisco router. Nevertheless It would the most desirable for me to be able to take advantage of certificates to accomplish user authentication. I tried with eap but can not get it work. I looked fo

Re: Freeradius + Ldap + attributes

>any chance you can provide the actual syntax of whats required? Syntax is the same as for other entries: replyItem radiusAttribute ldapAttribute so something like: replyItem Service-Type radiusServiceType replyItem Juniper-Local-User-Name juniperLocalName >replyItem

Re: Radius --> Openldap auth: Failed to validate the user

Is there a password for this user in userPassword field? Ldap can't find it. Ivan Kalik Kalik Informatika ISP Dana 1/9/2008, "Laurence Mayer" <[EMAIL PROTECTED]> piše: >Please elaborate on your question, I don't understand, > >On Sun, Aug 31, 2008 at 5:23 PM, Ivan Kalik <[EMAIL PROTECTED]> wrot

Re: Radius --> Openldap auth: Failed to validate the user

Thank you. That is the understanding I was missing and looking for. Laurence Alan DeKok wrote: Laurence Mayer wrote: The binding currently is happening by root and is successful. Yet it returns *no* information. Normally, the "bind as root" returns the user's "known good" password. This

Re: Radius --> Openldap auth: Failed to validate the user

Laurence Mayer wrote: > The binding currently is happening by root and is successful. Yet it returns *no* information. Normally, the "bind as root" returns the user's "known good" password. This hasn't happened here. > The second phase (authenticate) by the end user does not succeed. The "

Re: Radius --> Openldap auth: Failed to validate the user

Alan, you are misunderstanding my question. The binding currently is happening by root and is successful. The second phase (authenticate) by the end user does not succeed. The user laurence has correct access rights otherwise he would not be able to login/ssh etc. Authorize works, the authentica

Re: radclient problem

Dear Ivan! I am using freeradius-server-2.0.5 regards, Umar Ivan Kalik wrote: > > Freeradius version? > > Ivan Kalik > Kalik Informatika ISP > > > Dana 31/8/2008, "Umar" <[EMAIL PROTECTED]> piše: > >> >>Dear User! >> >>I have Freeradius running on FreeBSD. How i can kill or get a status

Re: Radius --> Openldap auth: Failed to validate the user

Hi, > If I understand this correctly, each user who would like to > authenticated would require those access rights and not only laurence? no. you dont use the login user to do the binding, you use a special user. for testing, you can use root, but for production I'd advice to use a special acc

Re: Radius --> Openldap auth: Failed to validate the user

If I understand this correctly, each user who would like to authenticated would require those access rights and not only laurence? What would the access list look like? Thanks in advance Laurence [EMAIL PROTECTED] wrote: Hi, As user laurence I am able to search, so the root now binds, ho