RE: framedipaddress

2010-05-11 Thread Santiago Balaguer García
We worked with Meru as Access Point, but not as NAS. If you want to autrhenticate users, then it is not the correct device; use another one. Anyway I think there is other better devices in the market at he same cost. > Date: Tue, 11 May 2010 17:16:31 +0200 > From: al...@deployingradius.com >

RE: freeradius-server-2.1.8

2010-05-11 Thread dorra aa
when i wrote that # radtest dorra mesh 192.168.1.65 1812 testing123 i had this error r...@pfe-laptop:/home/pfe/freeradius-server-2.1.8/raddb# radtest dorra mesh 192.168.1.65 1812 testing123 Sending Access-Request of id 224 to 192.168.1.65 port 1812 User-Name = "dorra" User-Password = "mes

Re: freeradius-server-2.1.8

2010-05-11 Thread Marinko Tarlac
Maybe the professor wanted to learn him how to work with "&" operator and radiusd -X is just a simple command :) now, lets get to work, Tell us what you want to achieve then there is a chance to see something usable on this list Mike Nichols wrote: running radius in debug mode in the bac

Re: freeradius-server-2.1.8

2010-05-11 Thread Mike Nichols
running radius in debug mode in the background shouldn't provide anything useful tho. just a thought... On Tue, 11 May 2010 19:36:24 +, dorra aa wrote: I installed on a server machine: freeradius-server-2.1.8 I wrote in the terminal: radiusd-X ">Mike Nichols My Own SOHO m...@myownsoho.n

Re: freeradius-server-2.1.8

2010-05-11 Thread Arran Cudbard-Bell
On May 11, 2010, at 1:25 PM, John Dennis wrote: > On 05/11/2010 04:17 PM, dorra aa wrote: >> this is not my idea.it's the idea of my professor. i have no idea about >> the radius and he wants me to work in it just in 2 weeks. > > You want us to do your course assignments for you? Kids these day

Re: freeradius-server-2.1.8

2010-05-11 Thread John Dennis
On 05/11/2010 04:17 PM, dorra aa wrote: this is not my idea.it's the idea of my professor. i have no idea about the radius and he wants me to work in it just in 2 weeks. You want us to do your course assignments for you? -- John Dennis Looking to carve out IT costs? www.redhat.com/carveoutco

RE: freeradius-server-2.1.8

2010-05-11 Thread dorra aa
this is not my idea.it's the idea of my professor. i have no idea about the radius and he wants me to work in it just in 2 weeks.I'm shearching in many forum but i don't understand because of many errorsnow i want to test with radtest name password 192.168.1.12 1812 secretshould i write it in

Re: freeradius-server-2.1.8

2010-05-11 Thread Alan DeKok
dorra aa wrote: > I installed on a server machine: freeradius-server-2.1.8 > I wrote in the terminal: radiusd-X & Why would you do that? Nothing in *any* documentation says that's a good idea. > Now I want to test a remote access client with radtest, is what the > client must be equipped wit

freeradius-server-2.1.8

2010-05-11 Thread dorra aa
I installed on a server machine: freeradius-server-2.1.8 I wrote in the terminal: radiusd-X & Now I want to test a remote access client with radtest, is what the client must be equipped with He commend freeradius-server-2.1.8 or not? what I should do in the client side

How to demonize 'radiusd -s'

2010-05-11 Thread Коньков Евгений
Hi, FreeRadius. Is this posible to demonize 'radiusd -s' ? -- Eugen Konkov mailto:kes-...@yandex.ru - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: framedipaddress

2010-05-11 Thread Alan DeKok
Paweł Pogorzelski wrote: > Unfortunately Meru claims that the client IP address is not sent to > the radius in any other attribute either. Buy a NAS that works. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: framedipaddress

2010-05-11 Thread Paweł Pogorzelski
Unfortunately Meru claims that the client IP address is not sent to the radius in any other attribute either. -- Pozdrawiam/Best regards Paweł Pogorzelski e-mail: ppogorzel...@gmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Adding a signed certificate from a signing authority

2010-05-11 Thread Alan Buxey
Hi, > I have found and carried out the steps on the wiki site around using “snake > oil” certificates and then creating your own producution certificates. But I > now would like to add the externally signed certificate for added security. surejust put the relevant files into the right place

Simultneous-Use + SQL + Checkrad

2010-05-11 Thread Galatóczki István
Hi All! I use Freeradius 2.0.4(deb pack) with Mysql 5.0.51. The online users check not work in the NAS with checkrad script my network. I read the list and forums but not founded solution. Question: working the checkrad script without radutmp? my config: radcheck- Simultaneous-Use: =1 account

RE: framedipaddress

2010-05-11 Thread Paweł Pogorzelski
Than You sunhualing for advice. I'm waiting for answer from Meru. -- Pozdrawiam/Best regards Paweł Pogorzelski e-mail: ppogorzel...@gmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Adding a signed certificate from a signing authority

2010-05-11 Thread Iain Grant
Apologies I seem to be hogging this today. My radius server is working fine, so now I want to add a signed certificate from a certificate authority. Are there any pointers on how to do this. I have found and carried out the steps on the wiki site around using "snake oil" certificates and then cre

Re: Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Alan Buxey
Hi, > The problem is %{Stripped-User-Name} does not seem to be working properly. further to this, the stripped-user-name doesnt exist - which is why its not being usedif this is the case then you are not running required module that understands the realm part or do not have scri.ac.uk as a d

Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Iain Grant
Solved it, I had not added my realms to the bottom of proxy.conf. Once changed everything is working. Thanks iain __ SCRI, Invergowrie, Dundee, DD2 5DA. The Scottish Crop Research Institute is a charitable company limited by guarantee. Reg

Re: Freeradius-Users Digest, Vol 61, Issue 37

2010-05-11 Thread Alan Buxey
Hi, > In fact I even cut and pasted the ntlm line from the working radius to > the redhat radius server. > > Has someone else built a RedHat radius 2.1.7 server to point to an > Windows ADS ?? yes...thats what we currently hve. you do not have a problem...the config definition will work...its ju

RE: Freeradius-Users Digest, Vol 61, Issue 37

2010-05-11 Thread Iain Grant
>> The problem is %{Stripped-User-Name} does not seem to be working properly. >here was a chhange to conditional expansions some time backthe output you see is just a warningif you 'man >unlang' you can see how such a condition should be written.the default config that ships with 2.1.

Re: free NAS ?

2010-05-11 Thread sunhualing
any other function do you need? On Sat, May 8, 2010 at 3:46 AM, VU VAN HUNG wrote: > sunhualing wrote: > >> hostapd as a NAS, authenticator >> wpa-supplicant as a supplicant >> >> >> On Fri, May 7, 2010 at 1:31 AM, Jeff Voskamp > javos...@uwaterloo.ca>> wrote: >> >>On 05/06/2010 01:27 PM, Jo

Re: radiusd: segmentation fault

2010-05-11 Thread sunhualing
Nothing I can help. Maybe you can check the dynamic shared library,they may conflict with radiusd, 2010/5/7 > Здравствуйте, Коньков. > > Вы писали 6 мая 2010 г., 23:58:44: > > > КЕ> Help pls to resolve problem why radiusd segfault > КЕ> or give clue > > КЕ> kes# radiusd -v > КЕ> radiusd: FreeRAD

Re: framedipaddress

2010-05-11 Thread sunhualing
Then,which attribute they support? framedipaddress is the popular one,if they don't support ,you can ask which attribute(describe the user's IP address) they support and add this attribute to the radacct schema . that's ok. freeradius is easy to add new attributes 2010/5/10 Paweł Pogorzelski > M

Re: Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Alan Buxey
Hi, > The problem is %{Stripped-User-Name} does not seem to be working properly. here was a chhange to conditional expansions some time backthe output you see is just a warningif you 'man unlang' you can see how such a condition should be written.the default config that ships with 2.1

Re: The client does not connect _*_*_*_

2010-05-11 Thread Thibault Le Meur
Le 11/05/2010 10:09, htt thanh a écrit : Hi, I don't know why the user-password id encrypted, how can I make a cleartext secret...;(( The pb is with your client shared secret: the secret you set in /etc/raddb/clients.conf and in your NAS configuration. It seems that you haven't set the same

Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Iain Grant
I am trying to build a radius server on a Licencesed RedHat ES 5.5 with the stock Freeradius 2.1.7 rpms. The problem is %{Stripped-User-Name} does not seem to be working properly. If I run radius -X I can see the following [mschapv2] +- entering group MS-CHAP {...} [mschap] Told to do MS-CHAPv

Re: The client does not connect _*_*_*_

2010-05-11 Thread htt thanh
Hi, I don't know why the user-password id encrypted, how can I make a cleartext secret...;(( thank in advance On 11 May 2010 14:23, Alan Buxey wrote: > Hi, > > > User-Password = "-*\333\003D\215\345\\\302\036\251\320:\373ȇ" > > note the mess > > ..then note this warning: > > > WARNING: Unp

Re: Freeradius 2.1.6: "\" in %{SQL-User-Name}

2010-05-11 Thread Alan Buxey
Hi, > I am using my Freeradius 2.1.6 to do PEAP for Windows XP clients. The > usernames are in format '\' > > I am using postgresql and my "safe-characters" in the dialup.conf is set > to: > > My radcheck table looks like: > id | username | attribute | op |value > 4 | GTCORP\

Re: radius not recieving username from cisco

2010-05-11 Thread Alan DeKok
Athiqur Rahman wrote: > When I open ppp connection to from windows xp laptop to my as5300 it is > not sending the login credentials to the FreeRadius. FeeRadius says the > username attribute was not found Fix the NAS so that it sends a User-Name. Consult the NAS documentation for how to do

Re: The client does not connect _*_*_*_

2010-05-11 Thread Alan Buxey
Hi, > User-Password = "-*\333\003D\215\345\\\302\036\251\320:\373ȇ" note the mess ..then note this warning: > WARNING: Unprintable characters in the password. Double-check the > shared secret on the server and the NAS! not sure how much more help the server can give you. you have

Re: autthentication error

2010-05-11 Thread Alan Buxey
Hi, > I have configurated a freeradius server using MySql authentication. When i > run "radtest" i get a succefull response: built yourself? so, basic SQL works. good. however, your windows client didnt - and this error here: > Found Auth-Type = EAP > +- entering group authenticate {...} > [e