freeradius eam sim authorization to everyone

2013-09-09 Thread Maxim Shoustin
Hello, I use freeradius 2.2.0 (runs on Ubuntu). I played enough with eap sim, (thanks for examples eapsim-02 - 06). My goal is to test client + AP but not freeradius authorization/authentication process. Ho can I configure freeradius to give success for every user, no matter what is imsi, chall

Re: my Radius goal radius and openldap.

2013-09-09 Thread John Dennis
On 09/09/2013 08:46 PM, Swenson, Chris wrote: > Yeah, bit the goal is that it is passed to the server via a secure web > page. The end goal here is getting authenticated users the right to > connect to the secure ssid's. The Aruba wireless controllers are > supposed to do that. If I am way over my

Re: my Radius goal radius and openldap.

2013-09-09 Thread Swenson, Chris
Yeah, bit the goal is that it is passed to the server via a secure web page. The end goal here is getting authenticated users the right to connect to the secure ssid's. The Aruba wireless controllers are supposed to do that. If I am way over my head I have a consultant on contract. RHIP. Sent f

Re: my Radius goal radius and openldap.

2013-09-09 Thread Arran Cudbard-Bell
On 10 Sep 2013, at 00:19, "Swenson, Chris" wrote: > No, they are encrypted in the ldap database in md5 hash. Right, but you have the plaintext version from the user? > I might be too old to do bleeding edge stuff like 3.0 RC1 > I will take a look and a poke at it though. Fair enough. Arran C

Re: problem with initial setup solved

2013-09-09 Thread A . L . M . Buxey
Hi, >NEVER agreed. still a useful reference. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

my Radius goal radius and openldap.

2013-09-09 Thread Swenson, Chris
I already have functioning openldap with SSL. (actually a neat little multi master setup.) I would like to get this radius to authenticate against the openldap. I have dug around Google and found some useful looking pages, but I wonder if anybody has any hot tips on this so I don't feel like I a

Re: my Radius goal radius and openldap.

2013-09-09 Thread Arran Cudbard-Bell
On 9 Sep 2013, at 23:00, "Swenson, Chris" wrote: > I already have functioning openldap with SSL. (actually a neat little multi > master setup.) > I would like to get this radius to authenticate against the openldap. You have plaintext passwords then? > I have dug around Google and found some

RE: my Radius goal radius and openldap.

2013-09-09 Thread Swenson, Chris
No, they are encrypted in the ldap database in md5 hash. I might be too old to do bleeding edge stuff like 3.0 RC1 I will take a look and a poke at it though. Thanks. -Original Message- From: freeradius-users-bounces+cswenson=curry@lists.freeradius.org [mailto:freeradius-users-bounce

Re: problem with initial setup

2013-09-09 Thread Alan DeKok
Swenson, Chris wrote: > Hi all, I have not used radius in about 15 years and found a need recently. > I have set up the rpm on a red hat 5.6 server and when I run radius -X the > system starts fine with the expected info. You're running a VERY old version. You may need the "freeradius2" pack

RE: problem with initial setup solved

2013-09-09 Thread Swenson, Chris
I guess I need to recycle my 2002 Shell O'Reilly book. -Original Message- From: freeradius-users-bounces+cswenson=curry@lists.freeradius.org [mailto:freeradius-users-bounces+cswenson=curry@lists.freeradius.org] On Behalf Of Swenson, Chris Sent: Monday, September 09, 2013 1:27 PM

problem with initial setup

2013-09-09 Thread Swenson, Chris
Hi all, I have not used radius in about 15 years and found a need recently. I have set up the rpm on a red hat 5.6 server and when I run radius -X the system starts fine with the expected info. When I enter the suggested as the first line in the users file testing Cleartext-Password :

Re: problem with initial setup

2013-09-09 Thread John Dennis
On 09/09/2013 12:52 PM, Swenson, Chris wrote: > Thanks for the replies: > Ok, uninstalled #1 and updated to freeradius2 > > radiusd started without a hitch with testing Cleartext-Password := > "password" in users file. > > When I ran radtest testing password localhost 0 testing123 > > Receive

Re: problem with initial setup

2013-09-09 Thread John Dennis
On 09/09/2013 12:18 PM, Swenson, Chris wrote: > Hi all, I have not used radius in about 15 years and found a need > recently. I have set up the rpm on a red hat 5.6 server and when I > run radius -X the system starts fine with the expected info. On RHEL5 make sure you install the freeradius2 set o

Re: problem with initial setup solved

2013-09-09 Thread Jeremiah Peterson
NEVER On Sep 9, 2013, at 10:34 AM, "Swenson, Chris" wrote: > I guess I need to recycle my 2002 Shell O'Reilly book. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: problem with initial setup

2013-09-09 Thread Swenson, Chris
That did it, In the version 1 the radtest must have been installed with the radius, not as a separate package. I have now also successfully tested. I wonder why the in the ticket I opened with red hat support they did not suggest the upgrade. Thanks to all. Chris S. -Original Message-

Re: problem with initial setup

2013-09-09 Thread Suman Dash
Received -bash: /usr/bin/radtest: No such file or directory It means radtest command was not found. On Mon, Sep 9, 2013 at 10:22 PM, Swenson, Chris wrote: > Thanks for the replies: > Ok, uninstalled #1 and updated to freeradius2 > > radiusd started without a hitch withtesting Cleartext-Pa

Re: problem with initial setup

2013-09-09 Thread Arran Cudbard-Bell
On 9 Sep 2013, at 17:18, "Swenson, Chris" wrote: > Hi all, I have not used radius in about 15 years and found a need recently. > I have set up the rpm on a red hat 5.6 server and when I run radius -X the > system starts fine with the expected info. That'd be version 1.x.x? Which doesn't supp

RE: problem with initial setup

2013-09-09 Thread Swenson, Chris
Thanks for the replies: Ok, uninstalled #1 and updated to freeradius2 radiusd started without a hitch withtesting Cleartext-Password := "password" in users file. When I ran radtest testing password localhost 0 testing123 Received -bash: /usr/bin/radtest: No such file or directory For aca

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Matthew Newton
On Mon, Sep 09, 2013 at 03:18:06PM +0100, Arran Cudbard-Bell wrote: > This negates problems caused by installing over the top of a > previous installation, which IMHO is always an extremely bad > idea with any unpackaged software. ...or even packaged software. FWIW, I put all freeradius config in

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Arran Cudbard-Bell
On 9 Sep 2013, at 14:24, Alan DeKok wrote: > Stefan Winter wrote: >> The idea is that make install is not supposed to touch my production >> config in any way. I don't want it to generously add directories without >> me knowing. There's also: #!/bin/sh make clean if ! git pull; then ex

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Alan DeKok
Stefan Winter wrote: > The idea is that make install is not supposed to touch my production > config in any way. I don't want it to generously add directories without > me knowing. Honestly, the simplest might be to edit Make.inc, at the top where it defines raddbdir and modconfdir: ifeq "$(rad

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Phil Mayers
On 09/09/13 14:04, Stefan Winter wrote: Hi, mv raddb raddb-noinst mkdir raddb touch raddb/all.mk make install do 'mkdir raddb/mods-config' you've 'messed around' with the configuration directory which assumes that mods-config exists... i guess that could be fixed to make dir directory first

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Stefan Winter
Hi, > Because that all.mk file for the rlm_perl module installs example perl > scripts in mod-config, the same with rlm_python and rlm_ruby. > I guess we'll have to come up with a proper fix. Does the file need to be created by the rlm's "make install"? The example scripts could be put into sou

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Stefan Winter
Hi, >>> mv raddb raddb-noinst >>> mkdir raddb >>> touch raddb/all.mk >>> make install > > do 'mkdir raddb/mods-config' > > you've 'messed around' with the configuration directory which assumes > that mods-config exists... i guess that could be fixed to make dir > directory first if it doesnt ex

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread A . L . M . Buxey
Hi, > > mv raddb raddb-noinst > > mkdir raddb > > touch raddb/all.mk > > make install do 'mkdir raddb/mods-config' you've 'messed around' with the configuration directory which assumes that mods-config exists... i guess that could be fixed to make dir directory first if it doesnt exist. alan

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Arran Cudbard-Bell
On 9 Sep 2013, at 08:44, Stefan Winter wrote: > Hi, > >> We are in feature freeze for 3.0. The configuration format and behaviour for >> 3.0 will be stable between now and the final release (as it was with >> release_3_0_0_rc0). >> >> If you are planning on deploying 3.0 and have an existing

Re: [ANN] Version 3.0.0-rc1

2013-09-09 Thread Stefan Winter
Hi, > We are in feature freeze for 3.0. The configuration format and behaviour for > 3.0 will be stable between now and the final release (as it was with > release_3_0_0_rc0). > > If you are planning on deploying 3.0 and have an existing 2.x.x configuration > you were planning to migrate when