rlm_ldap: LDAP login failed: check identity, password settings in ldap section of radiusd.conf

2008-11-21 Thread hsuan
Hi all : I have install freeradius-server-2.1.1 and I want use LDAP to do authentication. But when I using "radius -X" to start the radius server ,and in the client I using "radtest ldapuser ldapuser radius_server_ip 0 secret" , The server shown the message : rad_recv: Access-Request packet

Re: rlm_ldap: LDAP login failed: check identity, password settings in ldap section of radiusd.conf

2008-11-21 Thread tnt
>rlm_ldap: LDAP login failed: check identity, password settings in ldap >section of radiusd.conf > Slightly missleading - should say: rlm_ldap: LDAP login failed: check identity, password settings in ldap module configuration - raddb/modules/ldap You haven't configured ldap module. Debug is show

moving from Freeradius 1.1.7 to freeradius 2.1.0

2008-11-21 Thread Suraj Sharma
Hi All I had a radius server setup which authenticated EAP-MD5 and EAP-TLS clients but as we had to support EAP-SIM client as well -We decided on moving to Freeradius-2.1.1.  EAP-SIM worked really well and so did EAP-TLS on the new server-Ijust migrated the old files(USERS, CLIENT.CONF and EAP.C

Re: moving from Freeradius 1.1.7 to freeradius 2.1.0

2008-11-21 Thread tnt
>My question is - is there any reasoning to the above behavior or I have >completly misunderstood how Freeradius conf works. Yes. Password attribute was wrong. This was changed in 1.1.4 but 1.1.x continued to tolerate it. It's no longer tolerated in 2.x. You should also remove Auth-Type EAP fo

Re: moving from Freeradius 1.1.7 to freeradius 2.1.0

2008-11-21 Thread tnt
Now we discovered that out EAP-MD5 clients were no more authenticated!!! I went through the settings to no avail- then by fluke I discovered(by fluke ofcourse!!) that if I change ... ><[EMAIL PROTECTED] Auth-Type :=EAP, User-Password := "bar"> to <[EMAIL >PROTECTED] Auth-Type :=EAP, Cleartext-P

unlang (was: switch/case in radiusd.conf)

2008-11-21 Thread Edgar Fuß
> man unlang Oh, this seems to be new in 2.x. Would be nice if this was documented somewhere on the Website. Or am I simply too stupid to find the documentation? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang (was: switch/case in radiusd.conf)

2008-11-21 Thread tnt
>Would be nice if this was documented somewhere on the Website. >Or am I simply too stupid to find the documentation? > http://freeradius.org/radiusd/man/unlang.html Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang

2008-11-21 Thread Alan DeKok
Edgar Fuß wrote: >> man unlang > Oh, this seems to be new in 2.x. > > Would be nice if this was documented somewhere on the Website. > Or am I simply too stupid to find the documentation? See the comments at the top of "radiusd.conf". It *is* documented, if you read the configuration files.

RE: rlm_ldap: LDAP login failed: check identity, password settings in ldap section of radiusd.conf

2008-11-21 Thread hsuan
Dear all: I have set the radius.conf about ldap as follows : ldap { server = "localhost" identity = "cn=Manager,dc=example,dc=org,dc=tw" password = hsuan basedn = "dc= example,dc=org,dc=tw" filter = (&(!(objectClass=alias))(uid=%{Stripped-User-Name:-%{User-

RE: Make error

2008-11-21 Thread Olavo
Thank you guys. I am replying to say that I am giving up RedHat ES5 , 64 bits, and moving on to another distro. This may save someone time in the future. Olavo > -Original Message- > From: > [EMAIL PROTECTED] > s.org > [mailto:[EMAIL PROTECTED] > reeradius.org] On Behalf Of

RE: rlm_ldap: LDAP login failed: check identity, password settings in ldap section of radiusd.conf

2008-11-21 Thread tnt
>I have set the radius.conf about ldap as follows : > >ldap { > >server = "localhost" >identity = "cn=ManagerĄAdc=exampleĄAdc=orgĄAdc=tw" >password = hsuan >basedn = "dc= exampleĄAdc=orgĄAdc=tw" >filter = >(&(!(objectClass=alias))(uid=%{Stripped-User-Name:-%{

rlm_chap: Password check failed

2008-11-21 Thread Marwan Sultan
Hello All, I'm installing a new FreeBSD server. MySql4.1 php5, Chillispot All working fine. I have installed freeradius-1.1.7_2 when I authinticate throu chillispot it always fails with follow rlm_chap: Setting 'Auth-Type := CHAP'rlm_sql (sql): Reserving sql socket id: 4rlm_sql

pam_radius_auth v1.3.17 missing a define???

2008-11-21 Thread David Ly
Hi, I've been looking into the source code of pam radius, due to authentication failure without a entry in the local /etc/passwd file, and i've noticed that; /|'PAM_SM_ACCOUNT|/ must be *#define*'d prior to including ||.' isn't being done. Was this done on purpose? Could this possibly be

last hurdle...windows clients

2008-11-21 Thread Craig White
freeradius-1.1.3-1.2.el5 I am authenticating Windows RRAS connections, Macintosh wifi, iPhone wifi all with LDAP and mschapv2 (using sambaNTPassword hashes in OpenLDAP) My users basically consists of... DEFAULT Auth-Type = LDAP eap.conf default_eap_type = mschapv2 and of course my certif