Re: Question on proxy setting

2010-07-27 Thread Alan DeKok
柴崎 昌一 wrote: We want to re-send Accounting-Request again by using the Proxy server. Because our NAS doesn't send Accounting-Request again. We want to set it to Synchronous=no. Can I make it to Synchronous=no? No. See raddb/sites-available/robust-proxy-accounting Alan DeKok. -

Bug #17 (MS-CHAP user names)

2010-07-27 Thread Alan DeKok
I've had a chance to look at the final set of patches for bug #17. This is the bug where the supplicant sends Name for EAP-Identity, but uses name for the EAP-MSCHAPv2 calculations. I've done some minor editing to the patches, and put them into the code for 2.1.10. Thanks to Neal Garber

Re: Another LDAP/RADIUS integration problem.

2010-07-27 Thread Alan DeKok
Tom Leach wrote: Alan, I changed the ldap.attrmap file from checkItem Crypt-Password userPassword to checkItem User-Password userPassword and it's authenticating now, but I now have a new message in the debug output and I'm not sure if it's a problem, suggestion, or otherwise. It's a

Re: Error: ASSERT FAILED threads.c[406]

2010-07-27 Thread Alan DeKok
Meyers, Dan wrote: Will do :) Just to check I've understood properly - Do you expect the new version to just fix the ASSERT FAILED error, and what's happening in the perl is still something I need to investigate (and is probably thread related), Yes. or should the fix also stop me

Re: Unable to perform CHAP Authentication: after modifying client with CHAP-Password.

2010-07-27 Thread Alan DeKok
Santosh Kumar wrote: Need help for modifying the radius client or updating for CHAP authentication, You need to do the CHAP calculations. See the RFC's for details. Modified the below attribute, instead of PW_USER_PASSWORD to PW_CHAP_PASSWORD, but its rejecting please do know if i'm wrong

Re: Setting up pam_radius_auth

2010-07-27 Thread Alan DeKok
Mike J wrote: It is a PPC module. However, since I was having problems with it I decided to install the PAM module for my x86 workstation (from the Ubuntu Hardy repository). I'm getting the same results. The client/server talk to each other but the password doesn't seem to be decrypted when

Re: Reg: Accounting RequestAuthenticator Secret

2010-07-27 Thread Alan DeKok
Karthikeyan Gopal - ERS, HCL Tech wrote: *My config:* *NAS shared secret = testing123* *Accounting server Secret = 123testing* The NAS is sending accounting packets, too. There is no NAS secret and accounting secret. There may be different secrets for authentication and accounting, but

Query regarding sending the data in Radius Message

2010-07-27 Thread Vijay Badola
Hi, I want to know that, can we send 'long long' (byte size 8) and 'double log'( byte size is 12) type Variable in Radius message using freeradius APIs. If yes how ,Regards Vijay Badola * P We have responsibility to the environment. Before printing this e-mail or any other document,

Re: Query regarding sending the data in Radius Message

2010-07-27 Thread Alan DeKok
Vijay Badola wrote: Hi, I want to know that, can we send ‘long long’ (byte size 8) and ‘double log’( byte size is 12) type Variable in Radius message using freeradius APIs. If yes how You send it as type octets. An 8 byte long long typ is not part of RADIUS. See:

Re: Reg: Accounting RequestAuthenticator Secret

2010-07-27 Thread Karthikeyan Gopal - ERS, HCL Tech
Hi Alan, In my actual deployment I have Radius client, RADIUS proxy and RADIUS Server. Accounting-Request is originated form Radius client after success-full authentication. Accounting request authenticator is generated using RADIUS proxy secret in RADIUS client. RADIUS proxy functionality is

Re: Reg: Accounting RequestAuthenticator Secret

2010-07-27 Thread Alan DeKok
Karthikeyan Gopal - ERS, HCL Tech wrote: *In my actual deployment I have Radius client, RADIUS proxy and RADIUS Server.* Yes... that's common. *Please tell me whether my understanding about Accounting-Request authenticator and secret is correct.* This is all documented in the

Re: SV: FR proxy to ACS and NPS with MS CHAP v2

2010-07-27 Thread SagiBarOr
Thank you for the info Jan. The radiusd-x files were included in the zip files. Though I guess the other logs were overwhelming. I now posted the two log files here. The file cn-check_splitauth.log is from the first free radius. The file ldap_mschapv2.log is from the second FR server which

RHDS

2010-07-27 Thread Natr Brazell
Anyone using the Redhat Directory Server (RHDS) or 389-server versions of LDAP with their freeradius services? Curious really? Thanks, Nate Brazell - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Bug #17 (MS-CHAP user names)

2010-07-27 Thread Garber, Neal
I've done some minor editing to the patches, and put them into the code for 2.1.10. I just downloaded and installed 2.1.10 on my test server. So far, everything looks good. Thank you Alan. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

incorrect auth-type

2010-07-27 Thread Sallee, Stephen (Jake)
I am new to FreeRADIUS so please be patient with me. I am scouring the docs as I write this but so far I have been stumped. Below I have included the debug output of my server when I send it a authentication request. You will see that the user is found and authenticated by the ntlm_auth_Cru

Re: RHDS

2010-07-27 Thread John Dennis
On 07/27/2010 12:59 PM, Natr Brazell wrote: Anyone using the Redhat Directory Server (RHDS) or 389-server versions of LDAP with their freeradius services? Curious really? Yes (but I guess that's obvious given my .sig) -- John Dennis jden...@redhat.com Looking to carve out IT costs?

coa proxy'ing with a NAC device

2010-07-27 Thread Kevin Ehlers
I'm having a really hard time with proxying or just dealing with CoA's. The documentation just isn't working for me. I can configure the coa server. I can get the originate-coa server up too. I can send CoA's to the server, but I can't get it to proxy them or re-send them as if it was

Passing variables from inner tunnel

2010-07-27 Thread newtownz
Hi, I'm trying to pass the value of LDAP-UserDn from the inner-tunnel to the default server. I have read unlang and also tried many combinations including update outer.control from the inner tunnel and nothing worked... Here is a debug output where we can see that the User-Dn get expanded