Re: MSCHAPv2 followed by a smsotp authentication

2012-03-31 Thread Alan DeKok
Thomas Glanzmann wrote: > my initial thought that the state may only contain numbers, was wrong. > Now I want to verify that the message authenticator sent by freeradius > is correct, can you please walk me through how to do that? Read the code. > I also added debugging code to freeradius so th

Re: MSCHAPv2 followed by a smsotp authentication

2012-03-31 Thread Thomas Glanzmann
Hello Alan, my initial thought that the state may only contain numbers, was wrong. Now I want to verify that the message authenticator sent by freeradius is correct, can you please walk me through how to do that? I also added debugging code to freeradius so that it tells me that it creates the Aut

Re: Windows 7 prompting several times

2012-03-31 Thread Alan Buxey
Hi, > Do you know the solution for this? if the request doesnt get to the server. then as others have said, this is no RADIUS problem - this is something wrong elsewhere in the network. now, could be an issue with the AP communication...could be a L2 issue, a L3 issue, could be a bug in the A

Re: understanding

2012-03-31 Thread Alan Buxey
Hi, > All in all you can say that if I use PEAP-EAP-MS-CHAPv2 I don't need to > create certificates and put them in the FreeRADIUS Server. There is nothing > checked if you don't check the checkbox 'check certificate'. Actually the > existing certificates in the certs subdirectory could be dele

Re: openLDAP authorization with PAP authentication

2012-03-31 Thread Alan Buxey
Take the default supplied config. Add ldap to the authorize section in default and inner-tunnel, and to the authenticate section of both. Add your AP into clients.conf. now edit the ldap module to your requirements That should work pretty much as is Rinse, repeat. Ie now edit other things to o

Re: Challenge-Response

2012-03-31 Thread Valentin Mercier
Ho thanks a lot Thomas, I'll check this tonight. Le 31 mars 2012 12:12, "Thomas Glanzmann" a écrit : > Hello Mercier, > > > According to the Radius RFC, Chapter 2.1 Challenge-response > > (http://www.ietf.org/rfc/rfc2865.txt), I read that it's possible to > > activate a challenge-reponse (Access-

Re: Challenge-Response

2012-03-31 Thread Thomas Glanzmann
Hello Mercier, > According to the Radius RFC, Chapter 2.1 Challenge-response > (http://www.ietf.org/rfc/rfc2865.txt), I read that it's possible to > activate a challenge-reponse (Access-Request, Access-Challenge, > Access-Request, Access-Accept) with Radius, is that possible with Free > Radius, an

Challenge-Response

2012-03-31 Thread Mercier Valentin
Hi everybody According to the Radius RFC, Chapter 2.1 Challenge-response (http://www.ietf.org/rfc/rfc2865.txt), I read that it's possible to activate a challenge-reponse (Access-Request, Access-Challenge, Access-Request, Access-Accept) with Radius, is that possible with Free Radius, and if it

Re: MSCHAPv2 followed by a smsotp authentication

2012-03-31 Thread Thomas Glanzmann
Hello Alan, > Possibly. If so, the proprietary client doesn't implement RADIUS. thanks a lot. However, I'm going to hunt that one down, because I think I'm very close to solve it and than I'll document it here. As soon as the product is released to the public I'll also add a wiki entry or howto g

Re: openLDAP authorization with PAP authentication

2012-03-31 Thread Matthew Newton
On Fri, Mar 30, 2012 at 03:52:50PM -0700, Jay Ludlow wrote: > Found Auth-Type = EAP > > WARNING: Unknown value specified for Auth-Type. Cannot perform requested > action. You've got "eap" in the authorize section of your outer (default) virtual server, but you've removed it from the authentic

Re: Windows 7 prompting several times

2012-03-31 Thread Alan DeKok
Ricardo89 wrote: > I think you don’t understand what my problem is. I answered the question you asked, using the message you sent. If you're not describing the real problem, then you're wasting my time. > My main problem is to > understand why when the user is asked to enter his credentials

Re: Proxy + copy accounting to passive home server

2012-03-31 Thread Alan DeKok
mimir wrote: > I wonder another thing. Is it possible to get log/error or sth else if one > of the replicated servers do not response? No. That's the whole POINT of the replicate module: it doesn't care if the home server responds. If you want a response, configure proxying. Alan DeKok.

Re: FreeRADIUS + MySQL + DHCP Opt82

2012-03-31 Thread Alan DeKok
IVB wrote: > But I don't see in debug output what exactly was returned in SQL query. Have you tried running the SQL queries from an SQL client on the command line? That's why they're printed out in debugging mode: so you can see them, and re-run them yourself. Alan DeKok. - List info/subsc

Re: MSCHAPv2 followed by a smsotp authentication

2012-03-31 Thread Alan DeKok
Thomas Glanzmann wrote: > the only difference I see here is that radius has a hex number in the > state field while the propietary has digits. I assume that is why my > propiertary client chokes. Possibly. If so, the proprietary client doesn't implement RADIUS. The State field is not interpr

Re: openLDAP authorization with PAP authentication

2012-03-31 Thread Alan DeKok
Jay Ludlow wrote: > I have a working RADIUS server for localhost lookup, but when I try and > authenticate with my HP Procurve 420 Wireless Access Point using these > wireless connection methods with Ubuntu 10.04LTS: ... > I get the following result: > Found Auth-Type = EAP > WARNING: Unknown va