Re: Acct-Terminate-Cause

2011-10-14 Thread James J J Hooper
On 15/10/2011 01:18, OzSpots - Carl Sawers wrote: Hi All, I have searched high and low for a Radacct Terminate cause description for Freeradius, the terminate cause states “Lost-Session” , anyone know what it refers too? Please set a subject when posting to a mailing list. http://freeradius.or

RE:

2011-10-14 Thread Michael Hartwick
Check your NAS' documentation. The NAS sends that to FreeRADIUS to log. Michael -- Michael J. Hartwick, VE3SLQ hartw...@hartwick.com Hartwick Communications Consulting (519) 396-7

[no subject]

2011-10-14 Thread OzSpots - Carl Sawers
Hi All, I have searched high and low for a Radacct Terminate cause description for Freeradius, the terminate cause states "Lost-Session" , anyone know what it refers too? Regards Carl - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Workload in freeradius? platform

2011-10-14 Thread Fajar A. Nugraha
On Fri, Oct 14, 2011 at 10:47 PM, Guillaume Sigui wrote: > Ok, sorry. I explain below with more details: Guillaume, let me put this another way. Most of the things you've wrote is irrelevant to this list. This list is freeradius mailing list. Not alcatel list, not mysql list, not some support fo

FreeRADIUS EAP-TLS Lookup Client Cert From LDAP DIT

2011-10-14 Thread subcon
I've searched for this sort of posting, but found issues unrelated that responded to my search string, so I decided to post it here. OK, currently I have Radius authenticating LDAP users via PAP. Works great. Imagine I want to store x509 certificate data (specifically a client certificate) in

Windows (7) Machine Certificates (Half Domain).

2011-10-14 Thread Christ Schlacta
I've got a handful of windows clients. I'm most concerned about the Windows 7 machines, but there are a few Vista, and even an XP client. I want to deploy "Machine account certificates" for wifi authentication, so machines will be able to connect to the network BEFORE the user logs on (mainly

Re: Workload in freeradius? platform

2011-10-14 Thread Alexander Clouter
Arran Cudbard-Bell wrote: > >> If you keep this up, I'll unsubscribe nabble.com, too. Very little >> of anything worthwhile comes from there. > > Really though. The majority of the posts from nabble are just idiotic. > There's something about actually taking the time to subscribe to the > ma

Re: Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

2011-10-14 Thread James J J Hooper
On 14/10/2011 16:13, Martin Ubank wrote: Here’s the full output from ‘radiusd –X’: The bit at the top that tells us what radiusd has read from the config files is missing. It's not executing ntlm_auth by the looks of what you posted, so you need to look at why. The first bit of radiusd -X w

RE: Workload in freeradius? platform

2011-10-14 Thread Guillaume Sigui
Ok, sorry. I explain below with more details: - DESCRIPTION OF WORKLOAD PROBLEM WITH FREERADIUS PLATFORM I- OBJECTIVES It was a project that was im

Re: Newbie starting up - with problem, of course; and questions

2011-10-14 Thread Alan DeKok
Dale Grice wrote: > Yes, I did indent the reply line. Found that out the hard way. I > indented the user line also. I'll take out the user name line indent and > try that. Read "man users", or the comments at the top of the "users" file, or the examples in the "user" file. This is documented

Re: FreeRadius with Eduroam - Accounting

2011-10-14 Thread Arran Cudbard-Bell
On 14 Oct 2011, at 15:33, Mike Diggins wrote: > > On Fri, 14 Oct 2011, Alan DeKok wrote: > >> Mike Diggins wrote: >>> Accounting feature on the WLAN controllers (for now), I noticed that a >>> similar failure is a happening on the Authentication side. Some >>> authentication requests proxied to

Re: Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

2011-10-14 Thread Arran Cudbard-Bell
> > I can see from the 'radiusd -X' output that FreeRadius is not using MS-CHAP > correctly: > > > [eap] processing type mschapv2 > [mschapv2] +- entering group MS-CHAP {...} > [mschap] No Cleartext-Password configured. Cannot create LM-Password. > [mschap] No Cleartext-Password configured.

Re: Workload in freeradius? platform

2011-10-14 Thread Arran Cudbard-Bell
On 14 Oct 2011, at 16:41, Alan DeKok wrote: > siguillaume wrote: >> Ok, thanks. >> I give more details in the files attached. > ... >> *DESCRIPTION OF WORKLOAD PROBLEM WITH FREERADIUS.pdf* (291K) Download >> Attachment > > I wish you were joking, but I'm sure you're not. > > As a hint, postin

Re: Workload in freeradius? platform

2011-10-14 Thread Alan DeKok
siguillaume wrote: > Ok, thanks. > I give more details in the files attached. ... > *DESCRIPTION OF WORKLOAD PROBLEM WITH FREERADIUS.pdf* (291K) Download > Attachment I wish you were joking, but I'm sure you're not. As a hint, posting PDFs is rude. *NO ONE* else is doing it. Go read the d

Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

2011-10-14 Thread Martin Ubank
I've been following the FreeRadius Deployment guide http://deployingradius.com/documents/configuration/active_directory.html The following software is installed on a Centos 6 VM: -Samba 3.5.4, Freeradius 2.1.9, wpa_supplicant-0.7.3, gcc v4.4.4-13, openssl, winbind. I successfully perfo

Re: FreeRadius with Eduroam - Accounting

2011-10-14 Thread Mike Diggins
On Fri, 14 Oct 2011, Alan DeKok wrote: Mike Diggins wrote: Accounting feature on the WLAN controllers (for now), I noticed that a similar failure is a happening on the Authentication side. Some authentication requests proxied to other radius servers (via Eduroam) are either failing or taking a

Re: Newbie starting up - with problem, of course; and questions

2011-10-14 Thread Dale Grice
On Thu, Oct 13, 2011 at 6:02 PM, Alan Buxey wrote: > Hi, > > >What startup script in Debian starts freeradius? I would like to > add > >the -X option to it. > > why? just run 'radiusd -X' - as the main service script isnt designed > to be run in foreground (it would be a standard

RE: Workload in freeradius? platform

2011-10-14 Thread siguillaume
Ok, thanks. I give more details in the files attached. Guillaume Sigui Date: Thu, 13 Oct 2011 18:53:16 -0700 From: ml-node+s1045715n4901160...@n5.nabble.com To: gsi...@live.fr Subject: Re: Workload in freeradius? platform Guillaume Sigui wrote: > What is going slow? > Answer: The re

Re: more explanation for "EAP session for state ... did not finish!"

2011-10-14 Thread Alan DeKok
Zeus V Panchenko wrote: > i was long time struggling the problem with this warning, and the > cause was *not* in incompatibility of certificates at all (I was > writing that in thread "EAP-TLS + Symbian = weird behavior") > > the cause was MTU issue, and it is due to it the last response from > cl

more explanation for "EAP session for state ... did not finish!"

2011-10-14 Thread Zeus V Panchenko
Hi, I'd like to offer to add some details to this warning or to mention the details somewhere else WARNING: !! WARNING: !! EAP session for state 0x6097435463935ad2 did not finish! WARNING: !! Please read http://wiki.freeradius.or

Re: 802.1x authentication

2011-10-14 Thread Zeus V Panchenko
hi, gary (gary.y...@browan.com) [11.10.13 09:21] wrote: > Hi All > I am trying to set up 802.1x with EAP PEAP/TTLS method by using intel PROSset > client tool with the PC. > Sometimes authentication success but mostly it fail. > Log attached could someone give me some direction?thanks a lot. >

Re: EAP-TLS + Symbian = weird behaviour

2011-10-14 Thread Zeus V Panchenko
finally the cause was found! in my case it was MTU, the default value for ethernet and ADSL was not allowing for the client responce with certificate to get radius side after decreasing mtu to 1350 i finally got every mobile device in my network authenticated Zeus V Panchenko (z...@ibs.dn.ua

Re: Problems with my radrelay configuration?

2011-10-14 Thread tonimanel
I think that I have detected an error. In radiusd.conf I had two listeners, I have commented the second listener (appears in the last post): listen { type = auth ipaddr = * port = 0 } listen { ipaddr = * port = 0 type = acct } This is corr

Re: Problems with my radrelay configuration?

2011-10-14 Thread tonimanel
Hi, Yes I have written more. I have modified proxy.conf file with home_servers configuration. This is its content: proxy server { default_fallback = no } home_server radiusa { type = auth+acct ipaddr = 192.168.1.129 port = 1812 secret = testing