Re: Authenication with certifiactes

2012-07-03 Thread Andreas Meyer
Hello! alan buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, I have no luck with this. I read in some articles to make an AP with Radius-Authentication, one should create cerificates with 'make all' in the certs-directory after editing the ca.cnf and server.cnf and copy the ca.pem to the

Re: Authenication with certifiactes

2012-07-03 Thread Olivier Nicole
Hi, Where can I read what other possibilites there are to authorize a client for an AP using a radiusserver as backend. it depends what you want to do. you were talking about authenticating using a certificate - that would be EAP-TLS (or EAP-PEAP/TLS or EAP-TTLS/TLS) which means the

Re: Authenication with certifiactes

2012-07-03 Thread Scott Armitage
On 3 Jul 2012, at 09:16, Andreas Meyer wrote: Where can I read what other possibilites there are to authorize a client for an AP using a radiusserver as backend. it depends what you want to do. you were talking about authenticating using a certificate - that would be EAP-TLS (or

Re: Authenication with certifiactes

2012-07-03 Thread Iliya Peregoudov
Hello Andreas, Your supplicant have rejected EAP-MD5 method proposed by freeradius and have requested for EAP-TTLS method. freeradius have sent EAP-TTLS/Start request. But your supplicant have never replied. The problem seems to be in supplicant (AP is transparent for EAP methods anyway).

Re: Authenication with certifiactes

2012-07-03 Thread Andreas Meyer
Hello! Iliya Peregoudov iperegu...@cboss.ru wrote: Hello Andreas, Your supplicant have rejected EAP-MD5 method proposed by freeradius and have requested for EAP-TTLS method. freeradius have sent EAP-TTLS/Start request. But your supplicant have never replied. The problem seems to be in

Stuck on very basic freeradius setup

2012-07-03 Thread Tiago
Hello, I've just installed freeradius 2.x on an ubuntu server 12.04 with apt-get. I've follow documentation and I'm stuck on a very basic setup (pap auth). Basically I'm testing the default config using the users file to test auth with radtest. So, here is the thing: *users file - first line:

Re: Stuck on very basic freeradius setup

2012-07-03 Thread John Dennis
On 07/03/2012 09:33 AM, Tiago wrote: Hello, I've just installed freeradius 2.x on an ubuntu server 12.04 with apt-get. I've follow documentation and I'm stuck on a very basic setup (pap auth). Basically I'm testing the default config using the users file to test auth with radtest. So, here is

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Tiago
No, still getting errors, but it sends the reply message: [pap] login attempt with password davis45 [pap] No password configured for the user. Cannot do authentication ++[pap] returns fail Failed to authenticate the user. Login incorrect: [miles/davis45] (from client localhost port 0) Using

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Fajar A. Nugraha
On Tue, Jul 3, 2012 at 8:53 PM, Tiago syt...@gmail.com wrote: No, still getting errors, but it sends the reply message: [pap] login attempt with password davis45 [pap] No password configured for the user. Cannot do authentication Did you do what John suggests, add spaces like the example on

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Tiago
Hello Fajar, Yes, I did, here is my users file: teste Cleartext-Password := teste miles Cleartext-Password := davis45 Reply-Message = Hello, %{User-Name} The only entry refering to users file is this when I run freeradius -X: Module: Linked to module rlm_files

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Fajar A. Nugraha
On Tue, Jul 3, 2012 at 9:20 PM, Tiago syt...@gmail.com wrote: Hello Fajar, Yes, I did, here is my users file: teste Cleartext-Password := teste miles Cleartext-Password := davis45 Reply-Message = Hello, %{User-Name} The only entry refering to users file is this

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Tiago
Sorry, here is my complete debug log: http://pastebin.com/dYWb5tDs 2012/7/3 Fajar A. Nugraha l...@fajar.net On Tue, Jul 3, 2012 at 9:20 PM, Tiago syt...@gmail.com wrote: Hello Fajar, Yes, I did, here is my users file: teste Cleartext-Password := teste miles

Re: Stuck on very basic freeradius setup

2012-07-03 Thread alan buxey
Hi, Sorry, here is my complete debug log: [1]http://pastebin.com/dYWb5tDsĀ  no it isnt. thats not complete - thats just the startup...where is the actual log when an event happens..this debug log just ends with Listening on authentication address * port 1812 Listening on authentication

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Tiago
Alan, My first message had that data, I'm pasting here again - after ready to process line, thanks. Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 44400, id=204, length=57 User-Name = miles User-Password = davis45 NAS-IP-Address =

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Fajar A. Nugraha
On Tue, Jul 3, 2012 at 10:13 PM, Tiago syt...@gmail.com wrote: Alan, My first message had that data, I'm pasting here again - after ready to process line, thanks. It works on my setup. [files] users: Matched entry miles at line 3 [files] expand: Hello, %{User-Name} - Hello, miles

Re: Stuck on very basic freeradius setup

2012-07-03 Thread Tiago
Hello, Even removing users file and recreating it didn't work (same error) I did a purge/reinstall and it solved the problem O.o. Well, thanks very much for the help! 2012/7/3 Fajar A. Nugraha l...@fajar.net On Tue, Jul 3, 2012 at 10:13 PM, Tiago syt...@gmail.com wrote: Alan, My first

two freeradius + 1 db server

2012-07-03 Thread Tiago
Hello again, I'm building a scenario that initially should have: - two redundant freeradius - one mysql server (soon will be a clustered server) Should I be aware of something? I mean if requests goes to both servers, one specific customer auth session will be handled only by that specific