Re: Question about Access-Challenge

2011-07-08 Thread Fajar A. Nugraha
On Fri, Jul 8, 2011 at 10:14 AM, Jamshid Abedi udptele...@gmail.com wrote: Hello, I've got Mobile OTP to work with FreeRadius, I'd like to take this one step further and turn this into a two phase process. The objective is to first take the pin, authenticate that and then communicate to the

Re: Re: use_tunnel_reply not working in EAP-PEAP (Proxied as plain MSCHAPv2) in eap.conf

2011-07-08 Thread Nitin Bhardwaj
On 01:29 AM, Phil Mayers wrote: On 07/07/11 14:43, Nitin Bhardwaj wrote: Thanks Phil. I found this recent patch added to 2.x, regarding inner-MSCHAP broken: https://lists.freeradius.org/pipermail/freeradius-users/2011-April/msg00295.html Yes, that's what I was thinking of. I think

Re: Re: use_tunnel_reply not working in EAP-PEAP (Proxied as plain MSCHAPv2) in eap.conf

2011-07-08 Thread Nitin Bhardwaj
On 01:29 AM, Nitin Bhardwaj wrote: On 01:29 AM, Phil Mayers wrote: The (untested) patch below might help on 2.1.x: https://github.com/philmayers/freeradius-server/commit/3c1ed71cde100268dba57cbd87953af2bfda6d87 ...or for 3.x:

Re: use_tunnel_reply not working in EAP-PEAP (Proxied as plain MSCHAPv2) in eap.conf

2011-07-08 Thread Phil Mayers
On 08/07/11 11:20, Nitin Bhardwaj wrote: However, one doubt: Shouldn't this code be conditional based on whether use_tunneled_reply is yes/no. Presently the outer PEAP does take care of it, is this taken care of in this callback (mschap_postproxy) ? No. The code doesn't need to be

Re: use_tunnel_reply not working in EAP-PEAP (Proxied as plain MSCHAPv2) in eap.conf

2011-07-08 Thread Alan DeKok
Phil Mayers wrote: The (untested) patch below might help on 2.1.x: https://github.com/philmayers/freeradius-server/commit/3c1ed71cde100268dba57cbd87953af2bfda6d87 ...or for 3.x: https://github.com/philmayers/freeradius-server/commit/6877b70f442536c93ed097f3c9f6d17d9c960b19 Added,

Re: use_tunnel_reply not working in EAP-PEAP (Proxied as plain MSCHAPv2) in eap.conf

2011-07-08 Thread Nitin Bhardwaj
On 08/07/11 11:20, Nitin Bhardwaj wrote: However, one doubt: Shouldn't this code be conditional based on whether use_tunneled_reply is yes/no. Presently the outer PEAP does take care of it, is this taken care of in this callback (mschap_postproxy) ? No. The code doesn't need to

Re: Question about Access-Challenge

2011-07-08 Thread Udptelecom
Yes, it works this way. But the requirements are for a two phase authentication. Sent from my iPhone On Jul 8, 2011, at 2:11 AM, Fajar A. Nugraha l...@fajar.net wrote: On Fri, Jul 8, 2011 at 10:14 AM, Jamshid Abedi udptele...@gmail.com wrote: Hello, I've got Mobile OTP to work with

Re: Re: use_tunnel_reply not working in EAP-PEAP (Proxied as plain MSCHAPv2) in eap.conf

2011-07-08 Thread Nitin Bhardwaj
/ Phil Mayers wrote: The (untested) patch below might help on 2.1.x: https://github.com/philmayers/freeradius-server/commit/3c1ed71cde100268dba57cbd87953af2bfda6d87 ...or for 3.x: https://github.com/philmayers/freeradius-server/commit/6877b70f442536c93ed097f3c9f6d17d9c960b19

auth fails

2011-07-08 Thread Paulo Maia
Hello everyone, Im trying to use plain mac auth ( http://wiki.freeradius.org/Mac%20Auth#Plain+Mac-Auth) and at the radius server says Login Ok , Acceptin user , but at the client says auth fails (w7) here is the output of it : Does any1 knows what might be the problem ? Thanks , *rad_recv:

Re: auth fails

2011-07-08 Thread Alan DeKok
Paulo Maia wrote: Im trying to use plain mac auth No, you're not. (http://wiki.freeradius.org/Mac%20Auth#Plain+Mac-Auth) and at the radius server says Login Ok , Acceptin user , but at the client says auth fails (w7) here is the output of it : Does any1 knows what might be the problem ?

Re: auth fails

2011-07-08 Thread Paulo Maia
Ow i cannot authenticate just the mac-address ? i must have user and pass ? Did not knew that . Thanks Alan , On Fri, Jul 8, 2011 at 12:16 PM, Alan DeKok al...@deployingradius.comwrote: Paulo Maia wrote: Im trying to use plain mac auth No, you're not.

Re: auth fails

2011-07-08 Thread Phil Mayers
On 08/07/11 16:30, Paulo Maia wrote: Ow i cannot authenticate just the mac-address ? i must have user and pass ? Yes. EAP is a challenge/response protocol. You must send correct responses, and this means you must know the password. - List info/subscribe/unsubscribe? See