Authentication problem FreeRADIUS 2.1.3

2009-01-25 Thread Abu Warez
Hi, I want to use `files' as the auth method on radius 2.1.3. I added one user to the users file in /etc: "{1}00100...@test.com" Service-Type == Framed-User Framed-IP-Address=30.30.30.1, Framed-MTU=1500, Auth-Type=Accept DEFAULT Service-Type == Framed-User Fr

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread William Graeber
I have resolved the issue. I created a new VLAN with matching encryption settings to the default VLAN. Thank you all for helping! I have become much more familiar with the Cisco debugging procedure in the process. -William - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread William Graeber
I may have solved my own problem - I have contradicting encryption settings for each VLAN on the Cisco access point. I was testing the setup by bumping the user from VLAN 200 (WPA-required) to VLAN 100 (open access). I'll give this a shot and post my results. -William On Sun, Jan 25, 2009 at 22:1

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread William Graeber
Here is the output of Cisco debugging with "use_tunneled_reply = yes": http://dpaste.com/113022/ Again, I really appreciate your help. -William On Sun, Jan 25, 2009 at 18:29, wrote: >>I have modified eap.conf and added "use_tunneled_reply = yes" in the >>peap section. I have previously tried t

Re: MAC address restriction with EAP-TLS

2009-01-25 Thread John T. Guthrie III
Ivan Kalik wrote: > >We are currently using EAP-TLS authentication with FreeRADIUS at the place > >where I work right now. Management would like to be able to restrict the use > >of a given certificate for this authentication to specific MAC addresses. In > >other words, for each certificate, th

Re: Seg Fault - Not much info..

2009-01-25 Thread tnt
>I'm running Freeradius 2.1.3 on my Ubuntu 8.04 machine. Basically, my >setup is a VPN system linked to freeradius via a specialized plugin. > >Before I updated my freeradius (from the old 1.x), everything was >working fine. Now that I have updated to 2.1.3, I can't seem to get it >working again. >

Seg Fault - Not much info..

2009-01-25 Thread Thor
Hi, I'm running Freeradius 2.1.3 on my Ubuntu 8.04 machine. Basically, my setup is a VPN system linked to freeradius via a specialized plugin. Before I updated my freeradius (from the old 1.x), everything was working fine. Now that I have updated to 2.1.3, I can't seem to get it working agai

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread tnt
>I have modified eap.conf and added "use_tunneled_reply = yes" in the >peap section. I have previously tried this, and obtained the same >results. Whenever a client tries to login, they get cycled from >authenticating/connecting very quickly. I've posted an example output >from a radius debug: http

FreeBSD Radius

2009-01-25 Thread Mailelatamai Halatuituia
I could'nt setup pppoes server on FreeBSD - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread William Graeber
I have modified eap.conf and added "use_tunneled_reply = yes" in the peap section. I have previously tried this, and obtained the same results. Whenever a client tries to login, they get cycled from authenticating/connecting very quickly. I've posted an example output from a radius debug: http://dp

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread Alan DeKok
William Graeber wrote: > Here is the output of a client associating immediately after the > server starts: http://dpaste.com/112843/ You're not assigning the attributes that tell the server to put the user into a VLAN. Are you using the *default* configuration files in 2.0.5? It looks like y

Re: regular expression problem on 2.1.3

2009-01-25 Thread Alan DeKok
Tim Lightfoot wrote: > It seems to be fail at line 83 of valuepair.c compiling the regular > expression. Hmm... OK. The problem is elsewhere, where it doesn't seem to fill in that value. I'll take a look at fixing it before 2.1.4. Alan DeKok. - List info/subscribe/unsubscribe? See http://

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread William Graeber
Here is the output of a client associating immediately after the server starts: http://dpaste.com/112843/ Also, I am new to IOS, and there was no "debug aaa on" command. If you look closely at the top of the file I previously posted, I turned on about half of the options I thought relevant to debu

Re: two auth on one freeradius

2009-01-25 Thread tnt
>Now we use it for authentication: >- request comes form the NAS >- with LDAP modul, check the username and password, and in the post auth >section >we have 2 script(external prg) one for good login auth., and one in the auth >fail section (bad login). > >it works and nothing fail. > >BUT: > >we w

two auth on one freeradius

2009-01-25 Thread Hegedus Gabor
Hi, all! I have a question for you. I have a freeradius server (newest) on ubuntu. Now we use it for authentication: - request comes form the NAS - with LDAP modul, check the username and password, and in the post auth section we have 2 script(external prg) one for good login auth., and one in th

Re: Cisco Aironet 1130ag dynamic VLAN assignment

2009-01-25 Thread tnt
>The full log may be viewed at: http://dpaste.com/112610/ > >Also, I have posted my eap.conf here: http://dpaste.com/112615/ > >and radius.conf here: http://dpaste.com/112616/ > >and I don't think anyone would need it, but here is clients.conf as >well: http://dpaste.com/112618/ > You have posted