How to access 3GPP2 Attributes in rlm module

2011-12-28 Thread Ratnesh Sinha
Hi, Pl. let me know how to access for example 3GPP2 attribute in the module. Regards, Ratnesh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem with mysql-user

2011-12-28 Thread Koenraad Lelong
Hi, I'm new to freeradius, I'm trying to setup freeradius to authenticate wifi-users using mysql. I'm running freeradius 2.1.12 from Fajar A. Nugraha (see post on 20 Dec 2011 11:16:27) on ubuntu 10.04. I'm using the daloradius-gui to create users. When I try via wifi using a user in the users-

Re: Problem with mysql-user

2011-12-28 Thread Fajar A. Nugraha
On Wed, Dec 28, 2011 at 7:22 PM, Koenraad Lelong wrote: > When I try via wifi using a user in the users-file, that user is accepted, a > user in the mysql database is rejected. > > When I try the "mysql-user" with radtest, the user is authenticated : > # radtest mtester1 mtester1 localhost 0 test

ppp and eap-tls

2011-12-28 Thread Frank
Hi, I'm using freeradius for EAP-TLS authentication with my WPA NAS, with MS-CHAPv2 for ppp auth (in a L2TP/IPSEC VPN) and for a while for EAP-TLS for ppp auth (about half a year ago). However, without me consciously changing anything in my setup (running Debian Squeeze, connecting clients run

Re: eap/tls questions with freeradius

2011-12-28 Thread Phil Mayers
On 12/26/2011 02:44 PM, vazoumana fofana wrote: sorry, i ve got persistents problems : - i filter client certificate under authenticate section (under eap) with : Auth-Type eap { if ( "%{TLS-Client-Cert-Subject}" =~ /OU=x/ ) { reject } }. Firstly, it s' written on "default" file : /Please do

Re: How to access 3GPP2 Attributes in rlm module

2011-12-28 Thread Alan DeKok
Ratnesh Sinha wrote: > Pl. let me know how to access for example 3GPP2 attribute in the module. What does that mean? Learn how to ask *good* questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ppp and eap-tls

2011-12-28 Thread Alan DeKok
Frank wrote: > I now get the following error in my radius log on an auth attempt: > > Error: TLS Alert write:fatal:decrypt error > Error: TLS_accept: failed in SSLv3 read certificate verify B > Error: rlm_eap: SSL error error:0407006A:rsa > routines:RSA_padding_check_PKCS1_type_1:block type i

Re: GUID based Authentication on FreeRadius

2011-12-28 Thread Alan DeKok
McSparin, Joe wrote: > Anyone know if this is possible. I have found information on MAC Based > Authentication but nothing on GUID. What does that mean? The GUID isn't sent in a RADIUS packet. So doing GUID authentication makes no sense. Alan DeKok. - List info/subscribe/unsubscribe? See

RE: ppp and eap-tls

2011-12-28 Thread Frank
Hi, > -Original Message- > From: Alan DeKok [mailto:al...@deployingradius.com] > Sent: Wednesday, December 28, 2011 15:40 > To: FreeRadius users mailing list > [mailto:freeradius-users@lists.freeradius.org] > Subject: Re: ppp and eap-tls > > Alan wrote: > > I now get the following error

RE: GUID based Authentication on FreeRadius

2011-12-28 Thread McSparin, Joe
Well that answers that then. My goal is, I have users that will connect wirelessly using their NT domain username and password on the hospitals wireless devices. I also however have doctors that will bring in their own laptops and connect. When they connect with their laptops though I do not w

Re: Logging User Accounts

2011-12-28 Thread Alan Buxey
Yes, look at the linelog module alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: GUID based Authentication on FreeRadius

2011-12-28 Thread Alan DeKok
McSparin, Joe wrote: > My goal is, I have users that will connect wirelessly using their NT > domain username and password on the hospitals wireless devices. > I also however have doctors that will bring in their own laptops and > connect. When they connect with their laptops though I do not wan

Re: ppp and eap-tls

2011-12-28 Thread Alan DeKok
Frank wrote: > This statement is confusing! I'm using freeradius for EAP-TLS auth and set up > the client for WPA2 enterprise with EAP-TLS. If this is not using > certificates for authentication, then what is it using? WPA != "WPA2 enterprise" You're confused because you're confusing two

Re: GUID based Authentication on FreeRadius

2011-12-28 Thread Rudolph Bott
We have two different SSIDs - one with EAP-TLS for company-owned mobile devices (which will automatically receive a machine certificate to validate that) and a second one with PEAP and local users stored in a radius userfile. Both SSIDs correspond to separate VLANs on the wireless controllers

RE: GUID based Authentication on FreeRadius

2011-12-28 Thread McSparin, Joe
rlm_passwd looks like the way to go... Thanks. Joseph R. McSparin Network Administrator Hill Country Memorial Hospital 830 990 6638 phone 830 990 6623 fax jmcspa...@hillcountrymemorial.org -Original Message- From: freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freerad

Re: Problem with mysql-user

2011-12-28 Thread Koenraad Lelong
On 28-12-11 14:12, Fajar A. Nugraha wrote: On Wed, Dec 28, 2011 at 7:22 PM, Koenraad Lelong wrote: ... /etc/freeradius/sites-enabled/inner-tunnel see that config file? ... sql module is not configure on authorize section in that file. Fix it. Thanks, That fixed it. Regards, Koenraa