Re: MS-CHAP-V2 with no retry

2011-04-27 Thread Alan DeKok
john.hayw...@wheaton.edu wrote: From your perspective which approach to getting retry enabled working do you recommend for 2.11 so we can be testing the same version: o my tweaks of Phil's single challenge patch o Phil's challenge and password change patches o a simpler two patch solution

Radius timeout when rlm_ldap module fail

2011-04-27 Thread rss ln
Hi, I've used freeradius-1.1.3-1.6.el5 with openldap backend on my old system. When OpenLDAP server was down, client requested the Freeradius doesn't get any response and then requested another radius server. Now, after upgade to freeradius-2.1.9-3.el6, the behavior has changed. When backend LDAP

Re: Radius timeout when rlm_ldap module fail

2011-04-27 Thread Alan DeKok
rss ln wrote: It seems like it is correct behavior, but is it possible to change it as before? When backend OpenLDAP is down, freeradius should not respond to client? Read raddb/policy.conf. Look for do_not_respond Alan DeKok. - List info/subscribe/unsubscribe? See

Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread akinpelu emmanuel
Hi All,   Please I am having challange building ikev2 and tncs library into the freeradius 3.0.0.   Though I have installed the latest version of ikev2_0.2 and libtnc this is the error message I keep getting, moreover could I be helped on how to indicate the tncs library path in the configure

Re: Radius timeout when rlm_ldap module fail

2011-04-27 Thread rss ln
 Read raddb/policy.conf.  Look for do_not_respond Hello Alan, Thank you, it solved the issue. I'm just not sure if I've implemented it in right way: authorize { ldap { # I don't understand next line: fail = 1 } if (fail) {

Re: Radius timeout when rlm_ldap module fail

2011-04-27 Thread Alan DeKok
rss ln wrote: Thank you, it solved the issue. I'm just not sure if I've implemented it in right way: If it works, don't worry about it. If you want to continue worrying, read man unlang Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread Alan DeKok
akinpelu emmanuel wrote: Though I have installed the latest version of ikev2_0.2 and libtnc this is the error message I keep getting, moreover could I be helped on how to indicate the tncs library path in the configure line. $ export CFLAGS=-I... $ export LDFLAGS=... $ ./configure This has

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread akinpelu emmanuel
Hi Alan,   I have set the CFLAGS and LDFLAGS but I still get same error, but when I run rlm_eap_ikev2 configure I had this line of . . . checking for ikev2_set_log_callback in -leap-ikev2... no checking EAPIKEv2/connector.h usability... yes checking EAPIKEv2/connector.h presence... yes checking

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread Alan DeKok
akinpelu emmanuel wrote: Hi Alan, I have set the CFLAGS and LDFLAGS To what? I think the problem is with the ikev2_set_log_callback in -leap-ikev2... no Is there a way I can handle this? Fix the software so it works. I don't run EAP-IKEv2, so I don't pay much attention to it.

Mac Auth - Timeout Connecting WiFi

2011-04-27 Thread John Corps
Hello, I had freeradius setup and running perfectly on an ubuntu test machine and now I have done the exact same setup and configuration on a new debian machine with the addition of daloradius for easy configuration by other members of the team. I am running latest freeradius 2.1.10. The ubuntu

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread Alan Buxey
Hi, akinpelu emmanuel wrote: Though I have installed the latest version of ikev2_0.2 and libtnc this is the error message I keep getting, moreover could I be helped on how to indicate the tncs library path in the configure line. other than a particularly neat need to make the compile

Re: Mac Auth - Timeout Connecting WiFi

2011-04-27 Thread schilling
Any ACL on AP network which might block your debian server IP but not your ubuntu IP? Schilling On Wed, Apr 27, 2011 at 3:59 PM, John Corps env...@gmail.com wrote: Hello, I had freeradius setup and running perfectly on an ubuntu test machine and now I have done the exact same setup and

Re: Mac Auth - Timeout Connecting WiFi

2011-04-27 Thread John Corps
Nope. If I set debian Ian to same ip as the ubuntu machine, obviously with ubuntu machine off, same issue happens. On 2011-04-27, at 4:15 PM, schilling schilling2...@gmail.com wrote: Any ACL on AP network which might block your debian server IP but not your ubuntu IP? Schilling On Wed,