Re: LDAP authentication trouble on 3.0

On 07/05/2012 12:24 AM, David Aldwinckle wrote: Hello, I am having a problem getting LDAP authentication working on FreeRADIUS Version 3.0.0. The behaviour I am experiencing is that the server will send an Access-Accept message without doing any checking of credentials. I would expect to see an

Re: working with vouchers

Hi! alan buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, Hello! Without considering any security is it possible to hand out a voucher to a client with just the ESSID, the username and the password written down and this client can authenticate to the radiusserver over the authenticator?

Stuck with exec script from radgroupreply sql table

Hello List, I am stuck with executing a script from my radgroupreply sql table and hope someone can point me into the right direction, as I have been fiddling around with this for days and lost my way. I want to set a dynamic Session-Timeout for certain groups. For testing purposes I created a

ntlm_auth --require-membership-of breaks eap-conversation

Hello List, i've got a strange behavior here. I've got a running freeradius with peap and ntlm_auth authentication and everything works fine. But if i enhance the ntlm_auth with the --require-membership-of Switch, authentication still works, but i get no EAP-Response from the client anymore.

Re: ntlm_auth --require-membership-of breaks eap-conversation

Hi, --require-membership-of=%{Huntgroup-Name} ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ntlm_auth --require-membership-of breaks eap-conversation

Yes, i get the Groupname out of the DB : Huntgroup-Name := %{sql:select groupname from radhuntgroup where nasipaddress=\%{NAS-IP-Address}\} mysql select * from radhuntgroup; ++---++---+ | id | groupname | nasipaddress | nasportid |

Re: LDAP authentication trouble on 3.0

Hi, That is what I originally hoped for. Your post made me go back and rewrite my ldap module config, which in the end didn't change anything. I also did a search on the entire directory for any instances of Auth-Type to verify that I had not set it to Accept. I found no occurrences that

Active Directory Authentication problem with ppp

hello all, I am always getting this error, when I am trying to authenticate user against Active Directory ad_recv: Access-Request packet from host 127.0.0.1 port 54512, id=249, length=151 Service-Type = Framed-User Framed-Protocol = PPP User-Name = harry MS-CHAP-Challenge =

Re: working with vouchers

On Thu, Jul 5, 2012 at 3:43 PM, Andreas Meyer anme...@anup.de wrote: Hi! alan buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, Hello! Without considering any security is it possible to hand out a voucher to a client with just the ESSID, the username and the password written down and this

RES: Stuck with exec script from radgroupreply sql table

I want to set a dynamic Session-Timeout for certain groups. For testing purposes I created a TESTGROUP in the database table radgroupreply with an entry like this: id GroupName Attribute Value op 263TESTGROUP Session-Timeout `%{exec:/var/skripte/test.sh}`

Re: working with vouchers

Fajar A. Nugraha l...@fajar.net wrote: On Thu, Jul 5, 2012 at 3:43 PM, Andreas Meyer anme...@anup.de wrote: Without considering any security is it possible to hand out a voucher to a client with just the ESSID, the username and the password written down and this client can authenticate

Re: RES: Stuck with exec script from radgroupreply sql table

lscrlstld schrieb: I want to set a dynamic Session-Timeout for certain groups. For testing purposes I created a TESTGROUP in the database table radgroupreply with an entry like this: id GroupName Attribute Value op 263TESTGROUP Session-Timeout

Re: working with vouchers

On Thu, Jul 5, 2012 at 11:05 PM, Andreas Meyer anme...@anup.de wrote: Is there a big picture somewhere available for the freeradius-server like it is for postfix for example? I want to understand the contiguities between proxiing, outer-tunnel, inner-tunnel for example. That's a different