Module not invoking for CHAP authentication

2009-11-20 Thread shivashankar
hi, i am using freeradius 2.1.6 and soalris 10. i created one module like rlm_radius. This module does authenticatin using java file which is resideds in Jboss server for PAP authentication it is working fine going to java file and checking the logic.but when i use CHAP authentication is

Freeradius load balancing.

2009-11-20 Thread nick
At the moment we have a freeradius 1.1.3 server on CentOS which is functioning fine, but due to circumstances, and the devices we are using as NASes, the ip pools are located on the NAS instead of being centralized on the RADIUS server as we'd like it. We'd now like to make things a bit more

Authentication

2009-11-20 Thread kachin Agarwal
Hi,    I m currently using freeradius-server 2.1.7.    when i try to authenticate it takes abt 400 millisec to authenticate. i use peap-mschapv2 for authentication.  So in 1 sec the number of devices  i can authenticate is jus 4 to 5.   so wat to do? should i modify anything in the freeradius

Re: EAP advanced auth. methods problem

2009-11-20 Thread Alan DeKok
Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All my experiments ending with: decapsulated EAP packet (code=4

Re: Accessing a second AV Pair

2009-11-20 Thread Alan DeKok
Robert White wrote: Ah ha! Thanks for that. I've managed to access my second AVPair by using []. Now, because it's a Quintum, much like a cisco, the value is Quintum-AVPair = h323-incoming-conf-id=34623031 35363261 3031 rather than the preferred Quintum-AVPair = 34623031

Re: Authentication

2009-11-20 Thread Alan DeKok
kachin Agarwal wrote: I m currently using freeradius-server 2.1.7. when i try to authenticate it takes abt 400 millisec to authenticate. i use peap-mschapv2 for authentication. So in 1 sec the number of devices i can authenticate is jus 4 to 5. No. Multiple authentications can be

MySql on Freeradius

2009-11-20 Thread Peter Carlstedt
Hello everyone! I have succeeded in most what i want to accomplice but stupid me forgot that I would also want to be able to administrate the users through a GUI instead of jump into the users.conf file everytime i need to add a new user. Since I want OpenSSL support i need to make my own

Re: Freeradius load balancing.

2009-11-20 Thread Alan DeKok
nick wrote: At the moment we have a freeradius 1.1.3 server on CentOS which is functioning fine, but due to circumstances, and the devices we are using as NASes, the ip pools are located on the NAS instead of being centralized on the RADIUS server as we'd like it. You should really upgrade

Re: Freeradius load balancing.

2009-11-20 Thread Nick Warr
Alan DeKok ha scritto: nick wrote: At the moment we have a freeradius 1.1.3 server on CentOS which is functioning fine, but due to circumstances, and the devices we are using as NASes, the ip pools are located on the NAS instead of being centralized on the RADIUS server as we'd like it.

Re: Freeradius load balancing.

2009-11-20 Thread John Dennis
On 11/20/2009 09:52 AM, Nick Warr wrote: Alan DeKok ha scritto: nick wrote: At the moment we have a freeradius 1.1.3 server on CentOS which is functioning fine, but due to circumstances, and the devices we are using as NASes, the ip pools are located on the NAS instead of being centralized on

RE: need help authenticating against AD

2009-11-20 Thread Michael Phillips
I followed the directions in that link prior to emailing the group. For some reason, it still isn't working as expected. If I put this line at the top of the users file, VPN users and Cisco exec users are able to authenticate with their AD account. DEFAULT Auth-Type = ntlm_auth This is

RE: need help authenticating against AD

2009-11-20 Thread Alan Buxey
You broke the server and authentication fails - not a suprise. If the server cannot discover the source/type of auth then you need to give it a hint - users file will feed that hint . I think you dont need the unix module --- original message --- From: Michael Phillips mdphi...@hotmail.com

Re: Freeradius load balancing.

2009-11-20 Thread Michael da Silva Pereira
On Fri, 2009-11-20 at 15:52 +0100, Nick Warr wrote: I may have misphrased the question, if the ip pool is a single one, containing say 192.168.1.1 - 192.168.1.50, is there a way that the second Radius server can know the IPs distributed by the first Radius server to avoid duplicate IP

Re: Freeradius load balancing.

2009-11-20 Thread tnt
MySQL is a DB. If it exports a transactional API, then it doesn't matter if two RADIUS servers are allocating IP's simultaneously. Alan DeKok. I may have misphrased the question, No, you didn't understand the answer. if the ip pool is a single one, containing say 192.168.1.1 -

Re: Module not invoking for CHAP authentication

2009-11-20 Thread tnt
i am using freeradius 2.1.6 and soalris 10. i created one module like rlm_radius. This module does authenticatin using java file which is resideds in Jboss server for PAP authentication it is working fine going to java file and checking the logic.but when i use CHAP authentication is

Failed default PAP in CentOS

2009-11-20 Thread freeradius
CentOS 5.2 installing freeradius from the default base repository freeradius-1.1.3-1.5.el5_4 If I add, to the top of /etc/raddb/users: bob Cleartext-Password := hello Then when I attempt to start freeradius I get: /etc/raddb/users[1]: Parse error (check) for entry bob: Unknown

RE: need help authenticating against AD

2009-11-20 Thread tnt
Technically, this is all I need; this seems like a hacked way of doing things, Well, you have to hack things if you don't want freeradius server to autheticate users but get the result of authentication done by something else. though and I want to understand the operations of the server

Re: Failed default PAP in CentOS

2009-11-20 Thread tnt
CentOS 5.2 installing freeradius from the default base repository freeradius-1.1.3-1.5.el5_4 Install current version instead. http://wiki.freeradius.org/Red_Hat_FAQ#Current_Pre-built_RPM.27s_for_RHEL_5_and_CentOS_5 If I add, to the top of /etc/raddb/users: bob Cleartext-Password :=

Re: Failed default PAP in CentOS

2009-11-20 Thread Alan DeKok
freerad...@corwyn.net wrote: CentOS 5.2 installing freeradius from the default base repository freeradius-1.1.3-1.5.el5_4 See the Wiki. You can install updated versions of FreeRADIUS. If I add, to the top of /etc/raddb/users: bob Cleartext-Password := hello Then when I attempt to

Re: MySql on Freeradius

2009-11-20 Thread tnt
Since I want OpenSSL support i need to make my own build which Ubuntu´s own Freeradius release in Synaptic does not seem to have support for. I have tried to find information on the net about how to make a build of Freeradius that works together with MySql. If you built from source mysql

Re: Failed default PAP in CentOS

2009-11-20 Thread freeradius
At 01:17 PM 11/20/2009, t...@kalik.net wrote: http://wiki.freeradius.org/Red_Hat_FAQ#Current_Pre-built_RPM.27s_for_RHEL_5_and_CentOS_5 Just what I needed - thanks! Rick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius load balancing.

2009-11-20 Thread Alan DeKok
Nick Warr wrote: I may have misphrased the question, if the ip pool is a single one, containing say 192.168.1.1 - 192.168.1.50, is there a way that the second Radius server can know the IPs distributed by the first Radius server to avoid duplicate IP assignments? You said they both talked

Re: EAP advanced auth. methods problem

2009-11-20 Thread Tomas Pelka
Alan DeKok wrote: Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All my experiments ending with:

Re: EAP advanced auth. methods problem

2009-11-20 Thread tnt
Alan DeKok wrote: Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All my experiments ending with: decapsulated