Wireless EAP-TLS Login from Notebook with User and PASSWORD

2012-11-07 Thread sierramailpapa
Hey there, I’ve setup a freeradius Server and am using EAP-TLS, and would need some help from you. The users file contains the username and the password beeing allowed to connect after TLS Connection has been established, and this is working on an android phone with no problems so far. One

Re: Wireless EAP-TLS Login from Notebook with User and PASSWORD

2012-11-07 Thread Phil Mayers
On 11/07/2012 08:33 AM, sierramailp...@gmx.de wrote: Hey there, I’ve setup a freeradius Server and am using EAP-TLS, and would need some help from you. The users file contains the username and the password beeing allowed to connect after TLS Connection has been established, and this is working

Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
Hello, I have a problem with originate-coa I want to send coa to mikrotik to change bandwith But if I do that I get the folowing error: (0)update coa { ASSERT FAILED evaluate.c[1154]: output_vps Aborted (core dumped) I'm using freeradius version 3.0 (I have tried it with radius version

Re: EAP-SIM authentication failed

2012-11-07 Thread Francois Gaudreault
Didn't you make another fix afterward regarding AT_IDENTITY (commit cfd61d24b99022eb613054bbf7e0da4fa3af1bde)? Not the patch from Microsoft. I know I have to patch the 2.2.0 source in our RPMs with this commit otherwise it fails ;) On 2012-11-06, at 10:15 AM, Alan DeKok wrote: Phil Mayers

Re: Coa problem

2012-11-07 Thread Arran Cudbard-Bell
On 7 Nov 2012, at 11:25, Mixmasterontour PureDJ mixmasteront...@hotmail.com wrote: Hello, I have a problem with originate-coa I want to send coa to mikrotik to change bandwith But if I do that I get the folowing error: (0)update coa { ASSERT FAILED evaluate.c[1154]: output_vps

Re: No EAP Start, assuming it's an on-going EAP conversation

2012-11-07 Thread Alberto Martínez
Maybe is that Samba bug? The one that makes it apparently work: [mschap] adding MS-CHAPv2 MPPE keys ++[mschap] returns ok MSCHAP Success but the client refuses to go on? I can't search the archive right now, but I think it would be useful to know the Samba version. 2012/11/7 Matthew Newton

RE: EAP-SIM authentication failed

2012-11-07 Thread Yann R. Moupinda
Hi guys, Thanks for your help. After reading your suggestions, i installed a new version of FreeRADIUS (FreeRADIUS 2.2.1). I haven't worked with the the patch yet (i'm going to do that later) but, just to show what i got with the new version 2.2.1 and changing the content of the

Dynamic Home Server For Sending CoA

2012-11-07 Thread Stanislav Lorenc
Hi, I have problem with Home servers for sending CoA packets. This service works fine, but i have clients in sql (rml_sql). When NAS are in sql, home servers for configuring coa must be in sql too. But now they are stationary in text file defined. Is there some way how to change this ? Or I

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
The core dump was off, now when I enable the coredumps radiusd won't dump anymore. Every other program dumps with SEGV signal, but radiusd won't So I don't know how te get a dump. now it aborts with: (0)update coa { ASSERT FAILED evaluate.c[1154]: output_vps Aborted Thanks in advance

Re: Dynamic Home Server For Sending CoA

2012-11-07 Thread Arran Cudbard-Bell
On 7 Nov 2012, at 13:52, Stanislav Lorenc stanislav.lor...@cernovice.net wrote: Hi, I have problem with Home servers for sending CoA packets. This service works fine, but i have clients in sql (rml_sql). When NAS are in sql, home servers for configuring coa must be in sql too. But now

Re: Coa problem

2012-11-07 Thread Alan DeKok
Mixmasterontour PureDJ wrote: The core dump was off, now when I enable the coredumps radiusd won't dump anymore. Every other program dumps with SEGV signal, but radiusd won't So I don't know how te get a dump. now it aborts with: (0)update coa { ASSERT FAILED evaluate.c[1154]:

Cannot Authenticate Local User

2012-11-07 Thread Manjith Gajadhar
Hi, I am new to using FreeRadius and I need help trying to authenticate a local user account using FreeRadius. I have installed FreeRadius 2.1.12 on Centos 6.3 I have created a local user with the following details: Username : rtest Password :rtest When I use the radtest rtest rtest

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
Small update. I have run radiusd -X in gdb And get this as result: (0)update coa { ASSERT FAILED evaluate.c[1154]: output_vps Program received signal SIGABRT, Aborted. 0x76b97425 in raise () from /lib/x86_64-linux-gnu/libc.so.6 Hope this give some ideas? Subject: Re: Coa problem

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
Thanks, This is much better, it won't crash anymore. It doesn't work yet, but now I have something to search for. I get this error, maybe someone knows where to look for (1) update coa { (1) WARNING: List 'coa' doesn't exist for this packet (1) } # update coa = invalid As what I can make

Mysql, Accounting and DialupAdmin

2012-11-07 Thread Erich Titl
Hi Folks I succeeded to get my set up running with FR 2.2.0 and Mysql, e.g. I can connect through a ZyXEL NWA 3160 using credentials in the MySQL database using a M$ Windows 7 client. Everything is still quite raw and blurry to me. Could someone point me to the right dos for the following? 1) I

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
I have been searching, but to be honest, I have no clue what I'm doing wrong here. Tried some different sections (authenticate, preact etc.) but all give the same warning. what do I do wrong? From: mixmasteront...@hotmail.com To: freeradius-users@lists.freeradius.org Subject: RE: Coa problem

Re: Cannot Authenticate Local User

2012-11-07 Thread Matthew Newton
On Wed, Nov 07, 2012 at 04:16:23PM +0200, Manjith Gajadhar wrote: I am new to using FreeRadius and I need help trying to authenticate a local user account using FreeRadius. I have installed FreeRadius 2.1.12 on Centos 6.3 I have created a local user with the following details: Created

Re: Coa problem

2012-11-07 Thread Alan DeKok
Mixmasterontour PureDJ wrote: I have been searching, but to be honest, I have no clue what I'm doing wrong here. Tried some different sections (authenticate, preact etc.) but all give the same warning. what do I do wrong? Nothing. I'll see if I can push a fix. Alan DeKok. - List

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
Nothing. I'll see if I can push a fix. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Thanks! If I could assist with something, let me know.. - List info/subscribe/unsubscribe? See

Re: Coa problem

2012-11-07 Thread Alan DeKok
Mixmasterontour PureDJ wrote: I have been searching, but to be honest, I have no clue what I'm doing wrong here. Tried some different sections (authenticate, preact etc.) but all give the same warning. I've pushed a fix. Please test it. Alan DeKok. - List info/subscribe/unsubscribe? See

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
I've pushed a fix. Please test it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Thanks Alan, I've run the test.. It passes the the output_vps test, however I get a segmentation fault (0) expand: %{User-Name} - Groen (0)

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
I've pushed a fix. Please test it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Some extra info from gdb, I don't know if this is usefull: (gdb) exec-file /usr/local/sbin/radiusd -X (gdb) r Starting program: /usr/local/sbin/radiusd

Re: Coa problem

2012-11-07 Thread Alan DeKok
Mixmasterontour PureDJ wrote: I've run the test.. It passes the the output_vps test, however I get a segmentation fault (0) expand: %{User-Name} - Groen (0) expand: %{Acct-Session-Id} - 80e1 (0) expand: %{NAS-IP-Address} - 192.168.8.97 (0) expand: %{Framed-IP-Address} -

RE: ntlm_auth child domain

2012-11-07 Thread Menard, Yannick
Hi, Just to update I was able to do what I intended to : Here what I did, In the authenticate of inner-tunnel and default I added this: Auth-Type MS-CHAP { group { mschap { reject = 1 ok = return

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Fajar A. Nugraha
On Wed, Nov 7, 2012 at 10:16 PM, Erich Titl erich.t...@think.ch wrote: Hi Folks I succeeded to get my set up running with FR 2.2.0 and Mysql, e.g. I can connect through a ZyXEL NWA 3160 using credentials in the MySQL database using a M$ Windows 7 client. Everything is still quite raw and

Re: No EAP Start, assuming it's an on-going EAP conversation

2012-11-07 Thread Iliya Peregoudov
Sending tunneled request EAP-Message = 0x0208004f1a0208004a319afcbf0d90146863dcce62e55cbf6b263213a6 67f5405fe084a9e7291e326e0f0c68ce28482c998a0053554d4f4c434f4d50414c5c53433130 31383536 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = DOMAIN\\userADaccount

Re: EAP-SIM authentication failed

2012-11-07 Thread Iliya Peregoudov
I have the same problem with Nokia E51 handset. EAP-SIM authentication interrupted by Nokia supplicant. Unfortunately there is no useful diagnostic on the handset. On other hand EAP-SIM authentication succeeds when I use wpa_supplicant on Windows using smart card reader with the same SIM card

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Erich Titl
Hi Fajar on 08.11.2012 03:35, Fajar A. Nugraha wrote: On Wed, Nov 7, 2012 at 10:16 PM, Erich Titl erich.t...@think.ch wrote: Hi Folks I succeeded to get my set up running with FR 2.2.0 and Mysql, e.g. I can connect through a ZyXEL NWA 3160 using credentials in the MySQL database using a M$

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Fajar A. Nugraha
On Thu, Nov 8, 2012 at 2:08 PM, Erich Titl erich.t...@think.ch wrote: Thanks, I read that URL, actually that one guided me to enter a Cleartext Password at all. See the column labeled NT hash? mysql select * from radcheck;

RE: Coa problem

2012-11-07 Thread Mixmasterontour PureDJ
Well, that's a typo. I've pushed another fix. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Perfect, it's working now! Thanks one other small thing: in freeradius-server/raddb/sql/mysql/dialup.conf there is an error in accounting {

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Erich Titl
Hi Fajar on 08.11.2012 08:16, Fajar A. Nugraha wrote: ... IIRC only one of them will be used. I suggest you dop MD5 (since it's useless for your purpose) and Cleartext (you don't want that, right?) and verify you use the correct NT-Password (use smbencrypt if you haven't already done so)

RE: No EAP Start, assuming it's an on-going EAP conversation

2012-11-07 Thread dvmp
Maybe is that Samba bug? The one that makes it apparently work: [mschap] adding MS-CHAPv2 MPPE keys ++[mschap] returns ok MSCHAP Success but the client refuses to go on? I can't search the archive right now, but I think it would be useful to know the Samba version. Hello Alberto #smbd -V