Re: MS-CHAPv2, allow_retry=yes, but no code to handle the retry?

James J J Hooper wrote: > Ok - More delving into the code (rlm_eap_mschapv2.c) seems to indicate > that the bits missing in 2.1.x are possibly there in FR3: It might be useful to get that into the 2.1.x stream... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/lis

Re: EAP-PEAP + Windows 7 with SSO and Password change

Hi, it seems that is not possible that a user can change the password on loggon screen in windows 7 with freeradius after it has expired, except i use a windows IAS / NPS Server, or not ? I debugged the RAS crap on windows side and in the Logs i have: [3564] 04-12 12:02:33:182: EapChapBeginMS

kill -HUP sometimes causes "rlm_pap: mschap xlat failed"

Hi, I've got a strange problem with FR 2.1.12, sometimes (not always) when logrotate ran, freeradius goes bonkers and responds to every pap request with "mschap xlat failed". Restarting FR fixes this magically and all works fine again. I created a small and hackish script, which restarts FR when t

Re: kill -HUP sometimes causes "rlm_pap: mschap xlat failed"

On 04/12/2012 09:59 AM, Jan Weiher wrote: Hi, I've got a strange problem with FR 2.1.12, sometimes (not always) when logrotate ran, freeradius goes bonkers and responds to every pap request with "mschap xlat failed". Restarting FR fixes this magically and all works fine again. I created a small

Re: kill -HUP sometimes causes "rlm_pap: mschap xlat failed"

Hi, it does the first - calling kill -HUP on postrotate: /var/log/freeradius/*.log { weekly rotate 52 compress notifempty postrotate kill -HUP `cat /var/run/freeradius/freeradius.pid` endscript } I checked the init script as well, it does

Re: kill -HUP sometimes causes "rlm_pap: mschap xlat failed"

Hi, On Thu, Apr 12, 2012 at 03:59:56PM +0200, Jan Weiher wrote: > I've got a strange problem with FR 2.1.12, sometimes (not always) when > logrotate ran, freeradius goes bonkers and responds to every pap request > with "mschap xlat failed". Restarting FR fixes this magically and all > works fine a

Re: kill -HUP sometimes causes "rlm_pap: mschap xlat failed"

Hi, Am 12.04.2012 16:32, schrieb Matthew Newton: > > I'll dig a bit more, but the easy solution is to change the > logrotate script to restart, rather than reload/HUP. > Yes, that would be a solution for me as well, because when logrotate runs, the freeradius server is basically idle, but I don

Re: kill -HUP sometimes causes "rlm_pap: mschap xlat failed"

On Thu, Apr 12, 2012 at 04:45:56PM +0200, Jan Weiher wrote: > Am 12.04.2012 16:32, schrieb Matthew Newton: > > I'll dig a bit more, but the easy solution is to change the > > logrotate script to restart, rather than reload/HUP. > > > > Yes, that would be a solution for me as well, because when lo

Re: kill -HUP sometimes causes "rlm_pap: mschap xlat failed"

> So that seems to indicate it's the HUP that causes the problem. Okay, I thought it might me the config a.k.a "me"... I think I'm going to modify the logrotate script until this issue is fixed. best, Jan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

adding mschap to an existing ttls/pap setup

We currently have an existing freeradius setup using eap-ttls/pap with an openldap backend. Up until now, our userPassword has always been SHA encoded. I've been working to add sambaNTPassword hashes so that we can use either eap-ttls/mschap or peap/mschap. I've got the nt hashes set, but I'm hav

Authentication with radiusclient 1.4

Hi every one , I have 2 major problems : 1.I can't found documentation on radiusclient 1.4 to use it for authenticate an asterisk server 2. Capturing with wireshark can't show radius accounting requestes even if I specify the filter, and thgis requests are shown on the server with console mode pl

Re: adding mschap to an existing ttls/pap setup

Am 12.04.2012 17:49, schrieb Brian Gold: > We currently have an existing freeradius setup using eap-ttls/pap with an > openldap backend. Up until now, our userPassword has > always been SHA encoded. I've been working to add sambaNTPassword hashes so > that we can use either eap-ttls/mschap or pea

Re: adding mschap to an existing ttls/pap setup

Brian Gold wrote: > We currently have an existing freeradius setup using eap-ttls/pap with an > openldap backend. Up until now, our userPassword has > always been SHA encoded. I've been working to add sambaNTPassword hashes so > that we can use either eap-ttls/mschap or peap/mschap. > I've got th

RE: adding mschap to an existing ttls/pap setup

> Hi, > > I think I had a similar problem and fixed it by setting set_auth_type = no in > modules/ldap. But I'm not sure if this is the only thing I > changed... > > all the best, > Jan I have the same behavior after making this change unfortunately. - List info/subscribe/unsubscribe? See http

RE: adding mschap to an existing ttls/pap setup

> -Original Message- > From: freeradius-users-bounces+bgold=simons-rock@lists.freeradius.org > [mailto:freeradius-users-bounces+bgold=simons- > rock@lists.freeradius.org] On Behalf Of Alan DeKok > Sent: Thursday, April 12, 2012 12:02 PM > To: FreeRadius users mailing list > Subject

We still lack IBM DB2 connection

Dear All FreeRadius 2.1 users, I have browsed the source code of Freeradius 2.1 and also the freeradius.org main site, there is still no IBM DB2 connection available. Perhaps, we can invite IBM to write this for Freeradius 2.1. I know they have provided DB2 connection for php 5. Don't forget

Re: We still lack IBM DB2 connection

Timmy wrote: > I have browsed the source code of Freeradius 2.1 and also the > freeradius.org main site, there is still no IBM DB2 connection available. You haven't looked very hard then. It exists, and people use it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius