Freeradius + MySQL + Encrypted Password

2010-01-27 Thread Juliano Faoro
Hi, I've just installed a freeradius with mysql and it is working OK with text passwords on the radcheck table. When I try using MD5 password it doesn't work. Does anyone have a radius.conf template file that I can use as a reference and also how the tables on mysql should be populated. I

Re: ldap rebind?

2010-01-27 Thread Alan DeKok
freerad...@corwyn.net wrote: Intereesting. What errors does freeradius thrown when this occurs? (since I'm still troubleshooting my ldap woes) Read the comments just above those two lines in the config. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Freeradius + MySQL + Encrypted Password

2010-01-27 Thread Alan DeKok
Juliano Faoro wrote: When I try using MD5 password it doesn't work. Does anyone have a radius.conf template file that I can use as a reference and also how the tables on mysql should be populated. I'm not sure 1.1.3 even supports that. The versions that I am running are:

Found2 Auth-Type on request

2010-01-27 Thread Tevfik Ceydeliler
Hi list, My test connection shows a warning about auth types. Why this error occurs? And how can I fix it? I wonder which configuration files decide that auth type is Accept? Here is log part: rad_recv: Access-Request packet from host 172.30.80.1 port 1806, id=182, length=133

Re: proxy same realm but different authentication protocol to different server

2010-01-27 Thread piston
I've try below at the end of authorize section if (control:Auth-Type := EAP) { update control { { Proxy-To-Realm == xyz.com } realm xyz.com { type= radius authhost= 123.123.123.1:1812 accthost

Re: Setting up FreeRADIUS 2.0.4 with OpenLDAP backend to do wireless auth

2010-01-27 Thread Alan DeKok
Jonathan Amiez wrote: As the title says, I'm trying to set up FreeRadius to authenticate wireless clients (employees). I just finished deploying a Samba/Ldap domain, and I'd like to take advantage of this user db. I already followed several howtos, more or less outdated. Why not just

Re: Freeradius + MySQL + Encrypted Password

2010-01-27 Thread John Dennis
On 01/27/2010 03:13 AM, Alan DeKok wrote: Juliano Faoro wrote: When I try using MD5 password it doesn't work. Does anyone have a radius.conf template file that I can use as a reference and also how the tables on mysql should be populated. I'm not sure 1.1.3 even supports that. The

Duplicating results for radtest

2010-01-27 Thread Mark Smith
I have a Centos 5.3 server running the latest version of FreeRadius. I have 15 routers that need to be authenticated on an ADSL network. I am experiencing duplicate results for a radtest on my Freeradius server. I need to send multiple Cisco-AVPair values for a user login. I read on the

Re: Duplicating results for radtest

2010-01-27 Thread Alan Buxey
radiusd -X then we can see what/where things are happening alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Duplicating results for radtest

2010-01-27 Thread Bjørn Mork
Mark Smith mark.sm...@abelalarm.co.uk writes: I have a Centos 5.3 server running the latest version of FreeRadius. latest as in the latest included with Centos? If so, then upgrade. As you can see, the last two Cisco-AVPair lines, that have the attribute of '+=', appear twice in the

Re: EAP-TLS - OpenLDAP - UID Check

2010-01-27 Thread _Stefan_H
Alan DeKok-2 wrote: EAP-TLS does authentication by checking the certificate, not the user name. If you want the LDAP module to reject users who aren't in LDAP, edit raddb/sites-enabled/default, the authorize section. Change the line saying ldap to: ldap {

RE: Duplicating results for radtest

2010-01-27 Thread Mark Smith
Please see attached radiusd -X dump file as requested. Mark Smith Systems Engineer -Original Message- From: Alan Buxey [mailto:a.l.m.bu...@lboro.ac.uk] Sent: 27 January 2010 14:39 To: mark.sm...@abelalarm.co.uk; FreeRadius users mailing list Subject: Re: Duplicating results for radtest

FreeRADIUS Dictionary attribute types

2010-01-27 Thread Ben Wiechman
Is the integer type in the dictionaries signed or unsigned? It appears from the release notes for 2.1.8 that it is, but this is not noted in the dictionary file that I have seen so would like to confirm. Ben - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Duplicating results for radtest

2010-01-27 Thread James J J Hooper
--On Wednesday, January 27, 2010 05:11:26 PM + Mark Smith mark.sm...@abelalarm.co.uk wrote: Please see attached radiusd -X dump file as requested. Mark Smith Systems Engineer -Original Message- From: Alan Buxey [mailto:a.l.m.bu...@lboro.ac.uk] Sent: 27 January 2010 14:39 To:

Allowing Access via 'users' when LDAP fails

2010-01-27 Thread Amaru Netapshaak
Hello, I've got FreeRADIUS querying an OpenLDAP server successfully. Users can login and their appropriate VLAN information is returned and everythings great.  Right now, if a user isnt found in the LDAP database, a reject is returned to the switch and the port goes offline. What I'd rather

Failover Configuration

2010-01-27 Thread Troy . Rindy
I am attempting to use freeRadius to perform the following: Send Request to our Corporate Radius Server for Two Factor Auth If the corporate Server is Unavailable, doesn't respond or if the user is not found, then Use Auth-Type LDAP to Authenticate to our local LDAP repository If the

freeradius -X debug mode

2010-01-27 Thread Sylvain De Muynck
Dear all, I would like to know if there is a way to get the content of the debug mode through another tool. In fact, that could be interesting for me since I am doing a migration process and I do not know all passwords of my customer. In other work, I would like to see, when my Radius send an

Re: freeradius -X debug mode

2010-01-27 Thread Alan DeKok
Sylvain De Muynck wrote: Dear all, I would like to know if there is a way to get the content of the debug mode through another tool. Like raddebug? See man raddebug in recent versions. If you don't have it, upgrade. In fact, that could be interesting for me since I am doing a migration

Re: Allowing Access via 'users' when LDAP fails

2010-01-27 Thread Alan DeKok
Amaru Netapshaak wrote: Right now, if a user isnt found in the LDAP database, a reject is returned to the switch and the port goes offline. What I'd rather have,is RADIUS reply with a standard response (if the LDAP auth fails). See doc/configurable_failover for over-riding return codes.

Re: FreeRADIUS Dictionary attribute types

2010-01-27 Thread Alan DeKok
Ben Wiechman wrote: Is the integer type in the dictionaries signed or unsigned? Unsigned. Except for one WiMAX attribute, which has type signed. It appears from the release notes for 2.1.8 that it is, but this is not noted in the dictionary file that I have seen so would like to confirm.