Re: EAP-TTLS: Access Reject comes randomly from AAA

2012-10-22 Thread Iliya Peregoudov
2012/06/04 15:52:41:686525 :rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal unknown_ca This means WiMAX supplicant sends TLS Alert message. This is because supplicant do not trust CA that have issued AAA server certificate. CA certificate of the CA that have issued AAA server certific

Re: No Realm in table radacct

2012-10-22 Thread Iliya Peregoudov
Sending Access-Accept of id 188 to 172.16.3.225 port 1814 User-Name = "markus" MS-MPPE-Recv-Key = 0x19bfda63662c5eda0d0cfd34c617f262ae8611b10aab33c89598e9478000e667 MS-MPPE-Send-Key = 0xa653fb00f50ffb9b86c15b777bc4d6807912c23511749aef1d030b87cb3b0619 EAP-Message = 0x03e4

MS-CHAP-V2 allow_retry on ldap authentification

2012-10-22 Thread Daniel Ekman
Hi list, I have a fairly large user base doing WPA2-enterprise from various OS'es and smartphones, our FreeRADIUS is running v.2.1.12 and is authenticating via LDAP and things are running pretty well, only snag I have currently with this is when people change their password. I realize this has be

eap module failed to start

2012-10-22 Thread Prateek Kumar
Hi, I have freeradius server ( ver. 2.1.10 ) compiled with openssl-0.9.8l. Now by method given in raddb/certs I created the certificates on a machine having OpenSSL 1.0.0e. After loading ca.pem,server.pem & private.pem ( which is copy of server.pem ) certificates under raddb/certs and then

Re: eap module failed to start

2012-10-22 Thread Fajar A. Nugraha
On Mon, Oct 22, 2012 at 9:32 PM, Prateek Kumar wrote: > Hi, >I have freeradius server ( ver. 2.1.10 ) compiled with > openssl-0.9.8l. Now by method given in raddb/certs I created the > certificates on a machine having OpenSSL 1.0.0e. > > After loading ca.pem,server.pem & private.pem ( whi

Re: eap module failed to start

2012-10-22 Thread alan buxey
Hi, >       I have freeradius server ( ver. 2.1.10 ) compiled >with openssl-0.9.8l.  Now by method given in raddb/certs I created the >certificates on a machine having OpenSSL 1.0.0e. new OpenSSL and old OpenSSL may have issues with things like this - depending on the settings of that

Re: eap module failed to start

2012-10-22 Thread Prateek Kumar
So I have to compile freeradius with new openssl version else use old openssl for creating certificates. Also will I have to change random & dh file every time I change the server.pem & ca.pem. Thanks for your inputs. Regards, Prateek - List info/subscribe/unsubscribe? See http://www.freeradius.o

Re: eap module failed to start

2012-10-22 Thread John Dennis
On 10/22/2012 10:32 AM, Prateek Kumar wrote: rlm_eap: SSL error error:06074079:digital envelope routines:EVP_PBE_CipherInit:unknown pbe algorithm rlm_eap_tls: Error reading private key file /etc/raddb/certs/private.pem Just in case it helps to understand what the error message is attempting t

Re: No Realm in table radacct

2012-10-22 Thread xylakant
Hi Guys, thank you for your answers. I killed the attribute user-name on my global radius server in post-proxy and post-auth sections by unlang. Now I have got the full username on my server, because it is not overwritten by other radius communicatons. The realm is not in the radacct table of

Re: No Realm in table radacct

2012-10-22 Thread Fajar A. Nugraha
On Mon, Oct 22, 2012 at 11:13 PM, wrote: > Hi Guys, > > thank you for your answers. I killed the attribute user-name on my global > radius server in post-proxy and post-auth sections by unlang. > > Now I have got the full username on my server, because it is not overwritten > by other radius co

Re: Debug Directory

2012-10-22 Thread Aidan Rowe
You need to run radiusd with the -X flag: radiusd -X Aidan. On 23/10/2012, at 7:55 AM, George Innocent wrote: > Hello; > > I have been running the radius and can only see the radius.log files; what is > the directory for debug logs. > > > > -- > - > List info/subscribe/unsubscribe? See ht

Re: Debug Directory

2012-10-22 Thread John Dennis
On 10/22/2012 05:55 PM, George Innocent wrote: Hello; I have been running the radius and can only see the radius.log files; what is the directory for debug logs. Debugging info is only written to stdout, never to a log. If you read the documentation you would know that without having to bothe

Re: New attribute on old freeradius server

2012-10-22 Thread Tiago
Thanks Alan, So basically the correct way would be create a vendor dict, and there can I use any number or I need to follow some guideline? 2012/10/20 Alan DeKok : > Tiago wrote: >> I think its not my case, because I'll need to get these attributes on >> my NAS (rp-pppoe server) and with it set

Accounting Start Request error

2012-10-22 Thread QASIM RAO
essing the accounting section of radiusd.confmodcall: entering group accounting for request 2radius_xlat: '/usr/local/var/log/radius/radacct/192.168.22.79/detail-20121022:18'rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d:%H expands to /usr/local/

radclient coa example

2012-10-22 Thread jobhunts02
I've read where radclient can be used to send a change-of-authorization message (COA) from the server to a NAS to change the bandwidth limit but I have not been able to find an example of this. Does any have an example of radclient sending a coa message to change the bandwidth limit? - List in