Re: EAP-TLS used to be working, replaced Wifi AP, reimported backed-up config, EAP-TLS not working anymore

2012-06-25 Thread Benjamin Malynovytch
Alan,Thank you for your answer.I know you must be right, but I still didn't manage to have it working again.I'm still getting troubles with TLS exchanges and don't know enough of it to be able to debug it.I read tons of threads where Alan DeKok kept repeating to read his website, as well as using

FW: SQLm_counter and 64 bit values

2012-06-25 Thread Jonathan Bastin
I am using Freeradius 2 on Ubuntu 64 bit machine. I am trying to add up the months' worth of data the user has used and make sure they don't go over capacity. So far I have counter.conf: sqlcounter monthlydata { counter-name = Total-Octets-Monthly

Re: EAP-TLS used to be working, replaced Wifi AP, reimported backed-up config, EAP-TLS not working anymore

2012-06-25 Thread Alan DeKok
Benjamin Malynovytch wrote: I read tons of threads where Alan DeKok kept repeating to read his website, as well as using default configuration which is know to work. I also read that those EAP sessions not finishing where only due to certs problems or fragmentation. Certs are fine,

Re: EAP-TLS used to be working, replaced Wifi AP, reimported backed-up config, EAP-TLS not working anymore

2012-06-25 Thread Benjamin Malynovytch
Dear Alan, I was wondering how long you would wait to answer me to RTFM ! Thank you for your *great* contribution. Benjamin. PS: Do you sometimes read peoples messages or do you just use automatic answers ? Le Mon, 25 Jun 2012 14:29:23 +0200, Alan DeKok al...@deployingradius.com a

Re: Can't figure out Group Authentication

2012-06-25 Thread Alan DeKok
Julson, Jim wrote: Okay, so I think I’m getting closer. But I have a few challenges still. I am slowly learning how to parse the RADIUS –X debug output, now it’s a matter of knowing what to do with the information. Use the handy form at: networkradius.com/freeradius.html It tells you

Re: EAP-TLS used to be working, replaced Wifi AP, reimported backed-up config, EAP-TLS not working anymore

2012-06-25 Thread Alan DeKok
Benjamin Malynovytch wrote: Thank you for your *great* contribution. You're welcome. PS: Do you sometimes read peoples messages or do you just use automatic answers ? I read *everything* on this list. I generally answer *good* questions. I ignore *bad* questions. But yes, many

Re: FreeRadius2 Krb

2012-06-25 Thread Lisa Besko
Just and FYI. I moved to CentOS from FreeBSD, installed FreeRadius2 and krb5, put my config in place and it worked just fine. I'm suspecting a library issue on FreeBSD but just thought I would post my results incase someone else runs into the issue of radius dying when it goes to kerberos

RE: Can't figure out Group Authentication

2012-06-25 Thread Julson, Jim
Thank you once again Alan. I know you probably have to face palm yourself sometimes when you see the same questions over and over. I appreciate your patience with me. I don't want someone to do it for me, I want to learn it so I can support it. I have decided to start fresh. I had clean

radwho with nas-ip-address behind NAT

2012-06-25 Thread Sergio Belkin
Hi, I wonder radwho can show the actual Nas-IP-Address os and not the Nat device IP nat. Another interesting option would be NAS-Identifier. Is that feasible? Thanks in advance! -- -- Sergio Belkin  http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified -

Re: radwho with nas-ip-address behind NAT

2012-06-25 Thread Fajar A. Nugraha
NAS-IP-Address should be whatever the NAS sends, which can be its loopback/admin address, or it's private IP address in case of NAT. Packet-Src-IP-Address, on the other hand, is whatever the radius sees the packet coming from, which should be the NAS/firewal's public IP address in your case. --