Re: Certificate Properties.

2008-05-06 Thread Andrew Olson
2 integer END-VENDOR FreeRADIUS On Mon, May 5, 2008 at 2:54 PM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Andrew Olson wrote: > > You still haven't indicated why the perl module isn't running after > > eap. If I put it before eap in the config, the m

Re: Certificate Properties.

2008-05-05 Thread Andrew Olson
On Mon, May 5, 2008 at 10:40 AM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Andrew Olson wrote: > > Here is the pertinent part of the trace output. As you can see I am > > able to parse the Cert SN and put it back on the request. However, my > > perl module never gets

Re: Certificate Properties.

2008-05-05 Thread Andrew Olson
On Mon, May 5, 2008 at 9:48 AM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Andrew Olson wrote: > > Is it safe to assume that the config below is correct? If so, is FR > > just not behaving in the manner that I expect. > > I suggest tracing execution to see what it&#

Re: Certificate Properties.

2008-05-05 Thread Andrew Olson
Is it safe to assume that the config below is correct? If so, is FR just not behaving in the manner that I expect. Thanks, Andrew On Fri, May 2, 2008 at 3:31 PM, Andrew Olson <[EMAIL PROTECTED]> wrote: > On Fri, May 2, 2008 at 2:47 PM, Alan DeKok <[EMAIL PROTECTED]> wrote: &g

Re: Certificate Properties.

2008-05-02 Thread Andrew Olson
On Fri, May 2, 2008 at 2:47 PM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Andrew Olson wrote: > > I would like to have my Perl authenticate method called after > > eaptls_process is done. I gather that since eap returns "handled" > > that no more processing

Re: Certificate Properties.

2008-05-02 Thread Andrew Olson
correctly, since it gets called on other requests. Am I missing something? If I ever get this working, I'll post the patch. Thanks, Andrew Olson On Tue, Apr 29, 2008 at 3:50 AM, Alan DeKok <[EMAIL PROTECTED]> wrote: > > Andrew Olson wrote: > > Are there attributes availab

Certificate Properties.

2008-04-28 Thread Andrew Olson
Are there attributes available to get at properties of a certificate. I want to look at properties like Subject DN, Serial number, etc. So, somewhere in the FR config, I could do something like '%{cert-serial-number} == blah'. Thanks, Andrew Olson - List info/subscribe/unsubscribe

Re: rlm_sql - Different table for User authentication

2008-04-17 Thread Andrew Olson
I was trying to do something just like this. I have an existing user database that is already in production. My user table looks something like: user_name, status, etc(no Attribute, Value, op columns) My SQL query ended up looking something like: authorize_check_query = "SELECT 1 as id, user_nam

Re: Proxy request after TLS.

2008-04-14 Thread Andrew Olson
On Mon, Apr 14, 2008 at 11:32 AM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Andrew Olson wrote: > > I'd like to proxy a request to another server after the EAP-TLS > > handshake is finished. > > Which EAP type? PEAP, TTLS? > Sorry, my previous email was a

Proxy request after TLS.

2008-04-14 Thread Andrew Olson
k. I guess I'm looking for something like proxy-inner-tunnel configuration that is available for PEAP. Is something like this possible? I tried to add the following block to post-auth: update control { FreeRadius-Proxied-To := blah } It returns noop, though. Thanks, Andrew Olson -

Re: PEAP mschapv2 Proxy not working.

2008-02-07 Thread Andrew Olson
The virtual_server = "inner-tunnel" seems to have done the trick. Thanks for your help. -andrew Dmitry Sergienko wrote: Hi! If you still have no luck with 1.1.7 proxying mschapv2, try to move to 2.0.1 with patches in event.c discussed yesterday in freeradius-users. I'm trying to do the sam

Re: PEAP mschapv2 Proxy not working.

2008-02-06 Thread Andrew Olson
I got 2.0.1 patched, compiled and configured. I'm still seeing the same behaving listed below. Could it be something with my config. I'm simply doing: DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Proxy-To-Realm := "realm" Thanks, Andrew Olson Dmitry Sergienko wrote

PEAP mschapv2 Proxy not working.

2008-02-05 Thread Andrew Olson
returned 7 rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: Received EAP-TLV response. I'm running a pretty standard config, I think. I can send copies of it, if that would help. Thanks, Andrew Olson The complete proxied debug start