Re: Help connecting to remote ldap server

2010-06-25 Thread John Dennis
On 06/25/2010 06:54 PM, Raymond Norton wrote: Got things working (yeah!) Had to reset the users password with ldappassword. For some reason freeradius couldn't read what was exported to the ldif file. Once I changed passwords with ldappassword, radtest and WPA worked perfectly. Also had to com

Re: Help connecting to remote ldap server

2010-06-25 Thread Josip Rodin
On Fri, Jun 25, 2010 at 05:54:38PM -0500, Raymond Norton wrote: > Got things working (yeah!) > > Had to reset the users password with ldappassword. For some reason > freeradius couldn't read what was exported to the ldif file. Once I > changed passwords with ldappassword, radtest and WPA worke

Re: Help connecting to remote ldap server

2010-06-25 Thread Raymond Norton
Got things working (yeah!) Had to reset the users password with ldappassword. For some reason freeradius couldn't read what was exported to the ldif file. Once I changed passwords with ldappassword, radtest and WPA worked perfectly. Also had to comment out this line in /etc/ldap/slapd.conf:

Re: PAP with LDAP and PEAP/MSCHANPv2 with ntlm_auth

2010-06-25 Thread Alan DeKok
Neil Prockter wrote: > this is a config that works for PAP/LDAP but not PEAP/MSCHANPv2 Change the version of Samba. From eap.conf: # If is still doesn't work, and you're using Samba, # you may be encountering a Samba bug. See: #

chroot

2010-06-25 Thread Mike Hammett
I read the appropriate section in radiusd.conf, but I don't know what needs to be in whatever folder I'm pointing the config to. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PAP with LDAP and PEAP/MSCHANPv2 with ntlm_auth

2010-06-25 Thread Neil Prockter
On 24/06/10 11:03, Alan DeKok wrote: > Neil Prockter wrote: >> I have a working config for PAP with LDAP against AD and a working >> config for PEAP/MSCHANPv2 with ntlm_auth. >> >> I need the server to do both but when I combine the configs one thing or >> another breaks. > > And debug output sa

Re: EAP issue

2010-06-25 Thread Phil Mayers
On 25/06/10 15:44, David Peterson wrote: I am having EAP issues with MSCHAPv2 packets. Does this output point to misconfiguration of FR or a NAS issue or both? Since you trimmed the debug output, it's impossible to be sure, but it points to the password on the client and server not being the

EAP issue

2010-06-25 Thread David Peterson
I am having EAP issues with MSCHAPv2 packets. Does this output point to misconfiguration of FR or a NAS issue or both? Fri Jun 25 10:42:30 2010 : Info: ++[pap] returns noop Fri Jun 25 10:42:30 2010 : Info: Found Auth-Type = MSCHAP Fri Jun 25 10:42:30 2010 : Info: +- entering group MS-CHAP {.

Freeradius + ldap

2010-06-25 Thread Marzieh Raoufnezhad
Hi, I installed freeradius and configured it with LDAP and installed pptp also in debian lenny. I can login to radius server from windows and I have VPN connection and internet. Now I want to restrict my VPN users' bandwidth and internet charge(for example 4G charge for each user), but I don't kno

RE: PEAP - AD Disabled

2010-06-25 Thread Nathan McDavit-Van Fleet
Isn't the same certificate used in the TLS tunnel for TTLS? Anyhow, it appears to be something to do with the person who configed Samba. They clustered the servers and the privileges changes in /var/cache/samba/winbind_privileged. That directory has been one of the biggest problems we've had so fa

Re: PEAP - AD Disabled

2010-06-25 Thread Phil Mayers
On 25/06/10 14:21, Nathan McDavit-Van Fleet wrote: Okay, I’ve had a working config with the following for the past month. TTLS->LDAP PEAP->AD PEAP->Local Users File After a month running everything perfectly, 3 days ago the “PEAP-AD” portion of the AAA failed. This is for wireless auth. Str

RE: PEAP - AD Disabled

2010-06-25 Thread Danner, Mearl
Have you checked the certificate? That's one major difference. ntlm-auth is the auth after the cert conversation in PEAP is done. Maybe a radiusd -X log to help us along? From: freeradius-users-bounces+jmdanner=samford@lists.freeradius.org [mailto:freeradius-users-bounces+jmdanner=samford.

PEAP - AD Disabled

2010-06-25 Thread Nathan McDavit-Van Fleet
Okay, I've had a working config with the following for the past month. TTLS->LDAP PEAP->AD PEAP->Local Users File After a month running everything perfectly, 3 days ago the "PEAP-AD" portion of the AAA failed. This is for wireless auth. Strangely, I can still auth from the CLI usi

Re: Help connecting to remote ldap server

2010-06-25 Thread Phil Mayers
On 24/06/10 17:33, John Dennis wrote: On 06/24/2010 12:21 PM, Raymond Norton wrote: [ldap] looking for reply items in directory... WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? You don't have the userPassword mapped in /etc/raddb/lda