Re: Repeating the same attribute in reply message

2011-05-31 Thread Alan DeKok
Shai Mizrachi wrote: My problem is that the attributes I have entered in the users file (under the specific user) are not present inside the Access-Accept message replied to the ASN-GW/NAS. The problem is that you did not read my response, and you did not follow the instructions in it. If

I would like help for Freeradius integration on AD domain

2011-05-31 Thread edgardolenza
Hello everybody, I apologize because I'm new with linux and freeradius also. I've readen many forums and many howtos but I've got some trouble with user authentication on domain controller. This is my working layout: -I've got an appliance (radius client) getting authentication requests from

Re: I would like help for Freeradius integration on AD domain

2011-05-31 Thread Alan DeKok
edgardolenza wrote: -the client radius sends authentication requests to the freeradius (using CHAP) -freeradius has to ask to AD if the user can be authenticated This is impossible. http://deployingradius.com/documents/protocols/compatibility.html See the NT Hash column. Alan DeKok. -

Re: I would like help for Freeradius integration on AD domain

2011-05-31 Thread edgardolenza
Hi Alan, Is this a STANDARD? Excuse me but I'm not expert on this things. Have you got suggestions on how to implement this? Isn't it possible to create a copy of the AD's users on a local Database? Do you know if there ara other solutions? Thank you very much. Eddy PS: I've also tried

Re: I would like help for Freeradius integration on AD domain

2011-05-31 Thread Alan DeKok
edgardolenza wrote: Is this a STANDARD? I have no idea what you mean by that. Excuse me but I'm not expert on this things. What's so hard about reading that web page? Have you got suggestions on how to implement this? What part of impossible is unclear? Isn't it possible to create

Re: I would like help for Freeradius integration on AD domain

2011-05-31 Thread Martin Goldstone
On 31/05/11 14:39, edgardolenza wrote: Hello everybody, Hello I apologize because I'm new with linux and freeradius also. I've readen many forums and many howtos but I've got some trouble with user authentication on domain controller. This is my working layout: -I've got an appliance

Freeradius + Alvarion 4Motion specify filter-id value inaccess-accept from value in user conf file ?

2011-05-31 Thread Hahusseau, Thomas
Hello, I'm running latest version form Master Branch of Freeradius. I managed to connect an Alvarion CPE to an Alvarion 4M BS with Freeradius server as authenticator. Everything works well except that I directly specified in my /site-enable/default configuration file the value of Filter-Id

RE: Freeradius + Alvarion 4Motion specify filter-id value inaccess-accept from value in user conf file ?

2011-05-31 Thread David Peterson
Make sure you configure FR to delete the MPPE keys. This can be found in the /modules/wimax file. Set the value from No to Yes. As well, you need to configure the server to use the inner-tunnel. I would start from the default FR settings, uncomment the wimax entries you see in

FreeRadius with Active DIR - Access by being in a group in active dir

2011-05-31 Thread Eric Lovrien
I have gotten freeradius up and going and authenicating to Active directory by using the following how to: http://deployingradius.com/documents/configuration/active_directory.html. I am using ntlm_auth to authenicate the users agaist Active Directory. The question i have is, is there a way I can

RE: FreeRadius with Active DIR - Access by being in a group in active dir

2011-05-31 Thread Gary Gatten
Check out the command options of ntlm_auth: --require-membership-of. If group name doesn't work, try the SID of the group. G From: freeradius-users-bounces+ggatten=waddell@lists.freeradius.org

FreeRADIUS wiki changes

2011-05-31 Thread John Center
Hi, The following FreeRADIUS wiki pages have been updated to the new RST format. The content of first 5 pages have been updated to the versions in the v2.1.x branch. http://wiki.freeradius.org/Radiusd.conf http://wiki.freeradius.org/Clients.conf http://wiki.freeradius.org/Proxy.conf

Re: FreeRadius with Active DIR - Access by being in a group in active dir

2011-05-31 Thread Eric Lovrien
This afternoon I amde the changes as you suggested and it worked like a charm. Thank you Eric On Tue, May 31, 2011 at 2:33 PM, Gary Gatten ggat...@waddell.com wrote: Check out the command options of ntlm_auth: --require-membership-of. If group name doesn’t work, try the SID of the

Offsite linking to the new wiki

2011-05-31 Thread Arran Cudbard-Bell
Hi All, It's come to our attention that some offsite links were using hardcoded underscores to substitute spaces in wiki URLs. Because gollum uses hyphens (-) as a substitute for whitespace instead of underscores (_), these pages appeared not to exist in the new wiki. I've created a patch