Re: authentification

2010-05-19 Thread Johan Meiring
On 2010/05/18 10:47 PM, dorra aa wrote: is there somebody want to tell what's the utility of it? From: dj_dido2...@hotmail.com To: freeradius-users@lists.freeradius.org Subject: authentification Date: Tue, 18 May 2010 19:40

Re: Segmentation fault on 2.1.7 during HUP

2010-05-19 Thread coja
Alan DeKok-2 wrote: > > coja wrote: >> Hello all! >> We use 2.1.7 version of freeradius+mysql 5 running on RHEL4u8. >> We tried to apply PIN authentication based on file users which located in >> /etc/raddb. >> I inserted to crontab reload (HUP) command which runs every 30 minutes. > > In 2

Re: certs files missing?

2010-05-19 Thread Alan Buxey
Hi, > btw i am using Ubuntu 10.04 + FreeRadius 2.1.8 ( installed usig apt-get ) ask your distro maintainers where they put the files. I can only help you from source. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

certs files missing?

2010-05-19 Thread shirkavand
Hi there, I am trying to use certificates with freeradius. I am following steps given here http://deployingradius.com/ The step #2 (Get EAP working using "snake oil" certificates) says that i have to execute the following commands: $ c

Re: certs files missing?

2010-05-19 Thread shirkavand
btw i am using Ubuntu 10.04 + FreeRadius 2.1.8 ( installed usig apt-get ) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: windows client authentication error

2010-05-19 Thread shirkavand
Hi there, Thank you very much. It worked like a charm. Cheers, Shirkavand - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius + mysql trouble

2010-05-19 Thread Alan Buxey
Hi, > I am trying to set up freeradius so that it authenticates off a myql > database. sql.conf is being included in the config. But the rlm_sql is > never loaded and I have been trying to figure out why. It does not appear to > even try to connect to the database and I am stumped as to why.

Re: freeradius + mysql trouble

2010-05-19 Thread Alan DeKok
Ski Mountain wrote: > Hi everybody, > I am trying to set up freeradius so that it authenticates off a myql > database. sql.conf is being included in the config. But the rlm_sql is > never loaded and I have been trying to figure out why. It does not > appear to even try to connect to the database

freeradius + mysql trouble

2010-05-19 Thread Ski Mountain
Hi everybody, I am trying to set up freeradius so that it authenticates off a myql database. sql.conf is being included in the config. But the rlm_sql is never loaded and I have been trying to figure out why. It does not appear to even try to connect to the database and I am stumped as to why

Re: rlm_eap: SSL error error on Start Up, Compile question

2010-05-19 Thread Alan DeKok
Jeff Stout wrote: > I modified the /usr/local/freeradius/debian/rules and removed the > dh_lintian reference > under the tree “Binary Common” IS dh_lintian REQUIRED for freeradius to > compile and > operate correctly Apparently not. > under my “certs” directory I do not have a server.pem

rlm_eap: SSL error error on Start Up, Compile question

2010-05-19 Thread Jeff Stout
I am trying to install FreeRadius 2.1.8, on my initial package build I ran into issues with lintian Running Ubuntu with 2.6.24-27-server kernel dpkg-buildpackage -d -b -uc ( I had to use the -d option as I received dependency errors) ... dh_installman dh_lintian /bin/bash: dh_lintian: command

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Maciej Drobniuch
Thanks Alan, I did not knew about the inner-tunnel. Now everything works fine. BIG THANKS TO ALL!! 2010/5/19 Alan DeKok : > Maciej Drobniuch wrote: >> Maybe you did not understand me, but when the mario user is in files >> all works fine but when not the freeradius isn't asking the sql. > >  Becau

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Alan Buxey
Hi, > Maybe you did not understand me, but when the mario user is in files > all works fine but when not the freeradius isn't asking the sql. > I'm using EAP PEAP MSCHAPv2 > The sql is enabled and it works fine with pap,chap,mschap, mschapv2 on > pppoe concentrators, but while using EAP it isn't wo

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Alan DeKok
Maciej Drobniuch wrote: > Maybe you did not understand me, but when the mario user is in files > all works fine but when not the freeradius isn't asking the sql. Because you didn't configure it to ask SQL. > I'm using EAP PEAP MSCHAPv2 Did you edit raddb/sites-available/inner-tunnel? > The

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Maciej Drobniuch
Maybe you did not understand me, but when the mario user is in files all works fine but when not the freeradius isn't asking the sql. I'm using EAP PEAP MSCHAPv2 The sql is enabled and it works fine with pap,chap,mschap, mschapv2 on pppoe concentrators, but while using EAP it isn't working. Here is

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Alan DeKok
Maciej Drobniuch wrote: > The freeradius server while authenticating is not searching in the sql > database. Why that? You didn't configure it. What does the debug log say? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Restricting access to NAS via http login authentication list

2010-05-19 Thread Alan DeKok
Peter Carlstedt wrote: > The problem I have is that every user in the user file in Freeradius can > access the switch when im using an authentication list which checks > against the radius server. Is there anyway to restrict so that only one > specific user in the users file can get access to the N

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Alan Buxey
Hi, so, its an EAP request and therefore gets proxied into inner-tunnel... > } # server inner-tunnel > [peap] Got tunneled reply code 3 > MS-CHAP-Error = "\010E=691 R=1" ^ nice. > EAP-Message = 0x04080004 > Message-Authenticator = 0x

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Maciej Drobniuch
[pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] EAP Identity [eap] processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge ++[eap] returns handled } # server inner-tunnel [peap] Got tunneled reply code 11

Re: Restricting access to NAS via http login authentication list

2010-05-19 Thread Maciej Drobniuch
i think that only the NAS has the power to decide it. RADIUS sends only the accounts 2010/5/19 Peter Carlstedt : > Hello, > Didnt really know what kind of title I should have given this one but I will > try to explain what it is I am aiming for. > The switches I use supports both http and https lo

Re: Looking for an editor for FreeRADIUS documentation

2010-05-19 Thread Alan DeKok
Fajar A. Nugraha wrote: > The enthusiasm seems big enough. So how would this work? http://freeradius.org/doc/community.html > Get some > people to submit an example doc that they've converted, and then you > pick one which is best and assign the job? Or get people to convert > some/all docs, an

Restricting access to NAS via http login authentication list

2010-05-19 Thread Peter Carlstedt
Hello, Didnt really know what kind of title I should have given this one but I will try to explain what it is I am aiming for. The switches I use supports both http and https login towards the switch to administrate it. The switch has support for using an athentication towards a radius server t

Re: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Maciej Drobniuch
My NAS-es are located in the clients file and they are working fine with pppoe auth. 2010/5/19 dorra aa : > hi, > in sql.conf did you modify that line :readclients = no to > > readclients = yes ? > >> Date: Wed, 19 ! May 2010 13:52:59 +0200 >> Subject: freeradius 2.x EAP-MSCHAPv2 + MySQL >> From:

RE: freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread dorra aa
hi,in sql.conf did you modify that line :readclients = no to readclients = yes ? > Date: Wed, 19 May 2010 13:52:59 +0200 > Subject: freeradius 2.x EAP-MSCHAPv2 + MySQL > From: mac...@drobniuch.pl > To: freeradius-users@lists.freeradius.org > > Hi ALL!! > I'm trying to get authenticated with m

freeradius 2.x EAP-MSCHAPv2 + MySQL

2010-05-19 Thread Maciej Drobniuch
Hi ALL!! I'm trying to get authenticated with mikrotik wireless AP. All works but only when I add the user into the users file. The thing is that i want to get the users from mysql. In this moment the authentication requests are coming from PPPoE concentrator, and the users are in MySQL database -

RE:

2010-05-19 Thread dorra aa
ok thank you David. i will test it by cheking this link:http://support.authenex.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=16&nav=0 Date: Wed, 19 May 2010 13:03:01 +0200 Subject: Re: From: davidse...@gmail.com To: freeradius-users@lists.freeradius.org Yes, it works, but you must

Re: radtest

2010-05-19 Thread Alan Buxey
Hi, > after the addition of customers in the database sql, I assay to test a client > in other computer by using radtest. > but i had those lignes in the shell: > # radtest > Le programme 'radtest' peut être trouvé dans les paquets suivants :(that's > means&! nbsp;The program 'radtest' can be f

Re:

2010-05-19 Thread shirkavand
hi, dora as david said "NTRadping (windows or wine :-D )" in other words..if you are using ubuntu you eed to use wine in order to get NTRadping up Cheers 2010/5/19 dorra aa > yes i want to try my radius server whith an extern client. i'm wrking > whith ubuntu. does NTRadping works in ubuntu?

Re:

2010-05-19 Thread David Seira
Yes, it works, but you must use with wine. It works fine. Other solution is use JRadius but is more difficult to configure. Regards, David 2010/5/19 dorra aa > yes i want to try my radius server whith an extern client. i'm wrking > whith ubuntu. does NTRadping works in ubuntu? > >

RE:

2010-05-19 Thread dorra aa
yes i want to try my radius server whith an extern client. i'm wrking whith ubuntu. does NTRadping works in ubuntu? Date: Wed, 19 May 2010 12:56:54 +0200 Subject: Re: From: davidse...@gmail.com To: freeradius-users@lists.freeradius.org Do you want it only to try your radius server? You can use

Re:

2010-05-19 Thread David Seira
Do you want it only to try your radius server? You can use NTRadping (windows or wine :-D ) or JRadius to try your freeradius server. Regards, David 2010/5/19 dorra aa > after the addition of customers in the database sql, I assay to test a > client in other computer by using radtest. > but

radtest

2010-05-19 Thread dorra aa
hi,after the addition of customers in the database sql, I assay to test a client in other computer by using radtest.but i had those lignes in the shell:# radtestLe programme 'radtest' peut être trouvé dans les paquets suivants :(that's means The program 'radtest' can be found in the following

[no subject]

2010-05-19 Thread dorra aa
after the addition of customers in the database sql, I assay to test a client in other computer by using radtest.but i had those lignes:# radtestLe programme 'radtest' peut être trouvé dans les paquets suivants :(that's means The program 'radtest' can be found in the following packages) * rad

RE: authentification

2010-05-19 Thread dorra aa
thank you for the explication Date: Wed, 19 May 2010 08:41:05 +0200 Subject: Re: authentification From: davidse...@gmail.com To: freeradius-users@lists.freeradius.org Hi. With MAC Address Authentication you can use freeradius to authenticate all the network elements (like camcorders, routers,

Re: Looking for an editor for FreeRADIUS documentation

2010-05-19 Thread Ramon J. Castillo
Need to give something back to the Open Source community. So I'd very happy to contribute with this project. I have some experience contributing to standard bodies such as WBA which I'm the Cochair of R&D and authored some of the stage 2 documents in the WiMAX Forum (GRWG) currently in RiLTE (G

RE: EAP mschapv2 Failed to authenticate the user

2010-05-19 Thread Pedro Alves
Ok, this is it radius -X logs with packets: rad_recv: Access-Request packet from host 10.1.3.17 port 1645, id=151, length=134 User-Name = "SCxx" Framed-MTU = 1400 Called-Station-Id = "0016.9df4.c3d0" Calling-Station-Id = "001a.73a8.6482" Service-Type =

Re: Freeradius 2.1.8+Windows AD+MS-CHAP with ntlm_auth

2010-05-19 Thread Alan Buxey
Hi, > I've been working on Freeradius with XP supplicants for a while but so far I > could't make it. Authentication against Active Directory works like a charm > (http://deployingradius.com/documents/configuration/active_directory.html). whats going wrong with your windows XP clients? this is

Re: EAP mschapv2 Failed to authenticate the user

2010-05-19 Thread Alan Buxey
Hi, > Radiusd –X log: ...which is useless because all it shows is the startup stuff.ie we need to see the occurances after the following lines... > Listening on authentication address * port 1812 > Listening on accounting address * port 1813 > Listening on command file /usr/local/var/run/rad

Re: windows client authentication error

2010-05-19 Thread Alan Buxey
Hi, > 5- Then uncommented the "sql" line for the following sections in the > /etc/freeradius/sites/enabled/default file: > a) authorize > b) accounting > c) session > d) post-auth > 6- Ran a radtest, and everyhtin worked fine ouch. so close! when you are doing EAP from windows,

Re: windows client authentication error

2010-05-19 Thread shirkavand
Hi there, Thanks for your help. >Does PAP work? OK as i understand (correct me if i am wrong) no matter if I use MySql or users.cof file for validating the users, if i execute: *$radtest sqltest testpwd localhost 1812 testing123* and the message i get is ( from both, the server terminal window