Re: what does the attribute PW_DIGEST_NONCE represent in the rlm_digest module?

2011-04-19 Thread Alan DeKok
maximus wrote: I would like to know what does the attribute PW_DIGEST_NONCE (1064) represent in rlm_digest module in radius server? Read doc/draft-sterman... In my setup, the radius client uses SIP. I want to know whether the PW_DIGEST_NONCE in the digest attributes can be used as a

Re: what does the attribute PW_DIGEST_NONCE represent in the rlm_digest module?

2011-04-19 Thread maximus
Duly moving freeradius2. Thanks Alan! ./maximus -- View this message in context: http://freeradius.1045715.n5.nabble.com/what-does-the-attribute-PW-DIGEST-NONCE-represent-in-the-rlm-digest-module-tp4312363p4312735.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

Re: what does the attribute PW_DIGEST_NONCE represent in the rlm_digest module?

2011-04-19 Thread maximus
Duly moving to FreeRadius2 Thanks Alan. ./maximus -- View this message in context: http://freeradius.1045715.n5.nabble.com/what-does-the-attribute-PW-DIGEST-NONCE-represent-in-the-rlm-digest-module-tp4312363p4312737.html Sent from the FreeRadius - User mailing list archive at Nabble.com. -

Re: The last piece of the puzzle - XP host authentication

2011-04-19 Thread Phil Mayers
On 04/18/2011 08:39 PM, East, Bill wrote: Like the man says, other people are doing it so I know it's not impossible. What seems to be happening from reading the debug is that domain/user requests are coming in using EAP, doing the TLS interchange, then using MSCHAPv2 to verify the

Re: Proxy state attribute in accounting

2011-04-19 Thread Alan DeKok
Waqas Toor wrote: Ok here is my robust-example-accounting that I am using for proxy Which I didn't ask for. It works fine, but when one of the server goes down of a long period, It sends a lot of proxy state attributes. Then you didn't follow the example. You configured it so that the

Freeradius + EAP-TLS + LDAP

2011-04-19 Thread Alexandros Gougousoudis
Hi, with my FR 1.x installation I'am authenticating via EAP-TLS Computers against my Switches. User are authenticated with PEAP, all are held in the users-textfile in $RADDB/users But with rising number of PCs and Users the edit of the users file is a bit uncomfortable. I want to upgrade

RE: The last piece of the puzzle - XP host authentication

2011-04-19 Thread East, Bill
-Original Message- From: freeradius-users-bounces+eastb=pffcu@lists.freeradius.org [mailto:freeradius-users- bounces+eastb=pffcu@lists.freeradius.org] On Behalf Of Phil Mayers Sent: Tuesday, April 19, 2011 4:38 AM To: freeradius-users@lists.freeradius.org Subject: Re: The

Re: Freeradius + EAP-TLS + LDAP

2011-04-19 Thread Sven Hartge
Alexandros Gougousoudis gougousoudis-l...@servicecenter-khs.de wrote: The users should be checked by uid and the password should be checked, but I have of course no cleartext-password in my LDAP, they are all crypt or MD5 (depends on tree). Is this possible or not? No, impossible. If you

Re: The last piece of the puzzle - XP host authentication

2011-04-19 Thread Phil Mayers
On 19/04/11 14:59, East, Bill wrote: Have you made sure that your root cert is present in the right stores - remember windows clients have both machine and per-user cert stores. Machine auth requires it be in the machine store. Bah, I should have known that. It's fixed, now. Cool This

Re: Freeradius + EAP-TLS + LDAP

2011-04-19 Thread Phil Mayers
On 19/04/11 15:24, Sven Hartge wrote: Alexandros Gougousoudisgougousoudis-l...@servicecenter-khs.de wrote: The users should be checked by uid and the password should be checked, but I have of course no cleartext-password in my LDAP, they are all crypt or MD5 (depends on tree). Is this

Re: Freeradius + EAP-TLS + LDAP

2011-04-19 Thread Phil Mayers
On 19/04/11 13:55, Alexandros Gougousoudis wrote: Hi, with my FR 1.x installation I'am authenticating via EAP-TLS Computers against my Switches. User are authenticated with PEAP, all are held in the users-textfile in $RADDB/users EAP-TLS and PEAP are different. Which do you mean? But with

MS-CHAPv2 password change implementation

2011-04-19 Thread Phil Mayers
All, I have spent the last few days writing the code to allow rlm_mschap and rlm_eap_mschapv2 to support password changes. Rather than slinging tarballs around, the patches are in a branch here: https://github.com/philmayers/freeradius-server/tree/v2.1.x-mschap-changepass It basically

Re: Freeradius + EAP-TLS + LDAP

2011-04-19 Thread Sven Hartge
Phil Mayers p.may...@imperial.ac.uk wrote: On 19/04/11 15:24, Sven Hartge wrote: Alexandros Gougousoudisgougousoudis-l...@servicecenter-khs.de wrote: The users should be checked by uid and the password should be checked, but I have of course no cleartext-password in my LDAP, they are all

RE: The last piece of the puzzle - XP host authentication

2011-04-19 Thread East, Bill
-Original Message- From: freeradius-users-bounces+eastb=pffcu@lists.freeradius.org [mailto:freeradius-users- bounces+eastb=pffcu@lists.freeradius.org] On Behalf Of Phil Mayers Sent: Tuesday, April 19, 2011 11:15 AM To: freeradius-users@lists.freeradius.org Subject: Re: The

Freeradius, rlm_perl and tagged attributes from rlm_sql

2011-04-19 Thread Igor V. Malinovskiy
I'm using Freeradius 2.1.10. I need to reply to NAS same attributes with tags using rlm_sql and rlm_perl. But in result number of tags is missing and in reply only attributes with :0. mysql select * from radreply; ++--+---++--+ | id | username |

Freeradius + EAP TLS + MySQL + PPTP

2011-04-19 Thread Gregoire leroy
Hi, I want to setup a PPTP server with EAP TLS and authentication by FreeRadius. I've seen in a documentation that we must set Auth-type, but the documentation is out-dated and on freeradius.org, it's specified that Auth-type shouldn't be set manually. So, I don't know which data I must set in

RE: MS-CHAPv2 password change implementation

2011-04-19 Thread Garber, Neal
I have spent the last few days writing the code to allow rlm_mschap and rlm_eap_mschapv2 to support password changes. This is huge Phil! Thanks for taking the time to write this enhancement. I will test it in our environment over the couple weeks and report findings. - List