Re: problem with reading user data in Freeradius with Mysql

2010-04-30 Thread David Seira
You can try to put Password attribute instead of Cleartext-Password. The operator is also important: user Password == pass 2010/4/29 John Dennis jden...@redhat.com On 04/29/2010 02:27 PM, VU VAN HUNG wrote: Hi all, I got a problem with freeradius and mysql. My freeradius server cannot read

supplicant winxp+freeradius+ldap

2010-04-30 Thread Daniel Soto
hi. i think that this problem is very similar to many people but i can´t find the solution. i´m trying authenticate users of windows with is own supplicant, when i try authenticate in local users no problem, however  the problem is when i try it with openldap. i received a

Re: problem with reading user data in Freeradius with Mysql

2010-04-30 Thread Alan DeKok
David Seira wrote: You can try to put Password attribute instead of Cleartext-Password. Please no. Don't use Password or User-Password. The operator is also important: user Password == pass Again, no. userCleartext-Password := password The FAQ has an example of this. Alan

Re: supplicant winxp+freeradius+ldap

2010-04-30 Thread Alan DeKok
Daniel Soto wrote: i´m trying authenticate users of windows with is own supplicant, when i try authenticate in local users no problem, however the problem is when i try it with openldap. Auth: rlm_ldap: Attribute User-Password is required for authentication. You forced Auth-Type := LDAP.

Re: problem with reading user data in Freeradius with Mysql

2010-04-30 Thread David Seira
I use MD5 pass and SHA pass: user SHA-Password := pass user MD5-Password := pass 2010/4/30 Alan DeKok al...@deployingradius.com David Seira wrote: You can try to put Password attribute instead of Cleartext-Password. Please no. Don't use Password or User-Password. The operator is

Re: Capturing Access-Reject data in the radpostauth table

2010-04-30 Thread Alan DeKok
Aaron Paetznick wrote: Huh. Then it should be working but it isn't. radiusd -X says: ... ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [username/badpass] (from client

回复: Freeradius-Users Digest, Vol 58, Issue 74

2010-04-30 Thread miaowang
原信息 主题: Freeradius-Users Digest, Vol 58, Issue 74 发件人: freeradius-users-requ...@lists.freeradius.org 日期: 2010/02/20 19:20 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit

回复: Freeradius-Users Digest, Vol 58, Issue 74

2010-04-30 Thread miaowang
原信息 主题: Freeradius-Users Digest, Vol 58, Issue 74 发件人: freeradius-users-requ...@lists.freeradius.org 日期: 2010/02/20 19:20 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit

Re: Correction: LDAP without a User-Password (2.1.8)

2010-04-30 Thread Alan DeKok
Craig Campbell wrote: I have a requirement for 'authentication' via LDAP. Only a User-Name is passed to freeradius. The requirement is to perform an LDAP lookup, and if the user exists, return a couple of other values in the LDAP database for that user. If the user does not exist,

Re: Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

2010-04-30 Thread Alan DeKok
Pedro Alves wrote: Using JRadiusSimulator to test and receive Sending Access-Accept :) But when i use a client AP Cisco Aironet 1121, only users from files can connect, users on AD dont. ... Sending Access-Challenge of id 110 to 10.1.3.17 port 1645 EAP-Message =

Re: Is this Install Guide Complete?

2010-04-30 Thread Josip Rodin
On Thu, Apr 29, 2010 at 08:11:15PM +, Huckle Berry wrote: I added the lenny-backport repo and updated. I then ran $sudo apt-get install freeradius I cannot copy and paste the output because I'm sshing on my mobile but apt essentially reports that libltd13 (1.5.2-2+) is a dependency but it

Libtool / autoconf is evil

2010-04-30 Thread Alan DeKok
Josip Rodin wrote: Ah, karmic moved on from LTDL 3. Then you can try moving to the freeradius package in Debian squeeze which depends on libltdl7. Arg. For 2.2.0, I'm looking to replace libtool, autoconf, and libltdl. I've had too many problems with them over the years, and I've pretty

RE: Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

2010-04-30 Thread Pedro Alves
I'm using Samba v3.4.0, freeradius v2.1.8, on unbuntu desktop v9.10. Active Directory is a Win2008 server Standard R2. Do you think can be a samba bug ? -Original Message- From: freeradius-users-bounces+pedrojmalves=gmail@lists.freeradius.org

Re: Libtool / autoconf is evil

2010-04-30 Thread Josip Rodin
On Fri, Apr 30, 2010 at 11:11:45AM +0200, Alan DeKok wrote: Josip Rodin wrote: Ah, karmic moved on from LTDL 3. Then you can try moving to the freeradius package in Debian squeeze which depends on libltdl7. They have magic undocumented interactions, new versions are *silently*

Re: supplicant winxp+freeradius+ldap

2010-04-30 Thread John Dennis
On 04/30/2010 02:50 AM, Daniel Soto wrote: hi. i think that this problem is very similar to many people but i can´t find the solution. i´m trying authenticate users of windows with is own supplicant, when i try authenticate in local users no problem, however the problem is when i try it with

Re: Libtool / autoconf is evil

2010-04-30 Thread John Dennis
I've got to agree libtool is evil, it causes more breakage than anything it purports to fix. Autoconf is a great idea, but a horrible implementation because of it's insane complexity and utterly unreadable machine generated code. It's wonderful when it works, but pure hell when it doesn't.

Re: supplicant winxp+freeradius+ldap

2010-04-30 Thread Aurélien Geron
John Dennis wrote: On 04/30/2010 02:50 AM, Daniel Soto wrote: hi. i think that this problem is very similar to many people but i can´t find the solution. i´m trying authenticate users of windows with is own supplicant, when i try authenticate in local users no problem, however the

Re: Libtool / autoconf is evil

2010-04-30 Thread Alan DeKok
John Dennis wrote: I've got to agree libtool is evil, it causes more breakage than anything it purports to fix. Autoconf is a great idea, but a horrible implementation because of it's insane complexity and utterly unreadable machine generated code. It's wonderful when it works, but pure hell

rlm_ippool: No available ip addresses in pool

2010-04-30 Thread Tabacchiera Stefano
Hi there, we have a major issue with our production server running RHEL 5.2 with FreeRadius 2.0.5. The problem is that ip addresses are released only when we receive a ACCT-STOP from the NAS, and not when maximum_timeout expires. So periodically we see the aforementioned error in logfiles and

Fw: How can I test result of redundant-load-balance

2010-04-30 Thread Craig Campbell
database 5075 (20100430) __ The message was checked by ESET Smart Security. http://www.eset.com __ Information from ESET Smart Security, version of virus signature database 5075 (20100430) __ The message was checked by ESET Smart Security. http://www.eset.com - List info

Re: Fw: How can I test result of redundant-load-balance

2010-04-30 Thread Alan Buxey
Hi, I am trying to replace the functionality (from sites/enabled/default) of, ldap_server_1 { notfound = return } with a redundant set of servers. I cannot have redundant-load-balance { ldap_server_1 {

Re: Is this Install Guide Complete?

2010-04-30 Thread Huckle Berry
I replaced the apt source, ran apt-get update and let it rip. It updated the following: freeradius-common freeradius-utils libdb4.5 libfreeradius2 libltdl-dev libltdl7 libncursesw5 libperl-dev libperl5.10 libsqlite3-0 libssl-dev libssl0.9.8 perl perl-base perl-modules python2.5

RE: Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

2010-04-30 Thread Pedro Alves
I think the problem is the Windows Supplicant because i use a Intel PROSet Wireless to connect with success. Need to add [ xpclient_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.2 [ xpserver_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 to the PKCS#7 keybag attributes holding the client's private key.

Re: Is this Install Guide Complete?

2010-04-30 Thread Jonathan Hutchins
On Friday 30 April 2010 01:21:47 pm Huckle Berry wrote: installation worked like a charm, so for future reference the correct procedure is: 1) edit /etc/apt/sources.list to include deb http://ftp.us.debian.org/debian squeeze main 2) sudo apt-get install freeradius 3) sudo apt-get install

Re: Is this Install Guide Complete?

2010-04-30 Thread Josip Rodin
On Fri, Apr 30, 2010 at 02:21:47PM -0400, Huckle Berry wrote: I replaced the apt source, ran apt-get update and let it rip. It updated the following: freeradius-common freeradius-utils libdb4.5 libfreeradius2 libltdl-dev libltdl7 libncursesw5 libperl-dev libperl5.10 libsqlite3-0

Re: Is this Install Guide Complete?

2010-04-30 Thread Jonathan Hutchins
On Friday 30 April 2010 02:33:01 pm Josip Rodin wrote: Ah, but you got too much. Now you have Perl, Python, the SSL library and all those other things with a newer version than those in karmic. Josip's explanation and advice remain true for Debian Lenny (and Squeeze). - List

Re: Is this Install Guide Complete?

2010-04-30 Thread Huckle Berry
On Fri, Apr 30, 2010 at 3:33 PM, Josip Rodin j...@entuzijast.net wrote: On Fri, Apr 30, 2010 at 02:21:47PM -0400, Huckle Berry wrote: I replaced the apt source, ran apt-get update and let it rip. It updated the following: freeradius-common freeradius-utils libdb4.5 libfreeradius2

Re: Is this Install Guide Complete?

2010-04-30 Thread Josip Rodin
On Fri, Apr 30, 2010 at 05:02:48PM -0400, Huckle Berry wrote: Ah, but you got too much. Now you have Perl, Python, the SSL library and all those other things with a newer version than those in karmic. I don't see how having newer versions of perl/python could be an issue. As far as SSL is

Re: Is this Install Guide Complete?

2010-04-30 Thread Huckle Berry
On Fri, Apr 30, 2010 at 5:52 PM, Josip Rodin j...@entuzijast.net wrote: On Fri, Apr 30, 2010 at 05:02:48PM -0400, Huckle Berry wrote: Ah, but you got too much. Now you have Perl, Python, the SSL library and all those other things with a newer version than those in karmic. I don't see

Re: Libtool / autoconf is evil

2010-04-30 Thread Aaron Turner
On Fri, Apr 30, 2010 at 5:15 AM, John Dennis jden...@redhat.com wrote: I've got to agree libtool is evil, it causes more breakage than anything it purports to fix. Autoconf is a great idea, but a horrible implementation because of it's insane complexity and utterly unreadable machine generated