[PATCH] Regexp for realms

2004-07-15 Thread Arne Brutschy
on all servers of a fail-over and round-robin realm. I included the patch at the end of this mail. Alternativly, you can download it from: http://projects.nuschkys.net/patches/freeradius-CVS-2004-07-15_regex-realms.patch.gz Regards, Arne Brutschy ---8--- diff -urN freeradius-CVS-2004-07-15.orig/raddb

Rewrite local realm and strip username

2004-07-12 Thread Arne Brutschy
? Or does someone know a way around it? Regards, Arne Brutschy -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFA8mH7lKz+zKOoy+oRAmvzAJwIOUJwbSyUvSTbil/7zQuNTDMdEACfV4HM 5WX8bt05c0Ax05oLqfd+sOY= =jrKv -END PGP

Re: Using wildcards in realm

2004-07-08 Thread Arne Brutschy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alan DeKok wrote: | You can use the preproxy_users file to re-write the User-Name | before it's proxied. | Yes, but it's never being processed, because uni-leipzig.de is my local realm. So the proxying request gets canceled: ~ WARNING: You set

Re: Using wildcards in realm

2004-07-05 Thread Arne Brutschy
-Through = Yes ..but it does not work. Any suggestions? Regards, Arne Brutschy -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFA6RUxlKz+zKOoy+oRAu/ZAKDimnYo1DiNPQHWKaIPyb00IUV2ZQCfbOt4 VDuQgysdsVZdo58SF7Ka9vk= =W+Jp

Client member in multiple huntgroups

2004-07-05 Thread Arne Brutschy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I have clients that are in multiple huntgroups (ie. in dot1xswitches, used for 802.1x auth and shellaccess used to give access to the config shell of this switch. Is it possible to have a client in multiple huntgroups? Regards, Arne -BEGIN PGP

Re: Client member in multiple huntgroups

2004-07-05 Thread Arne Brutschy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas MARCHESSEAU wrote: | DEFAULT Realm == realm.net, Huntgroup-Name == bas, Autz-Type := | autz.realm1.net | DEFAULT Realm == realm.net, Huntgroup-Name == lns, Autz-Type := | autz.realm2.net | | I check for Nas-Ip-Address to assign the correct

Schema file for iPlanet/Sun One Directory Servers 5.x

2004-07-01 Thread Arne Brutschy
by Jochen Friedrich jochen at scram.de # Updates by Adrian Pavlykevych pam at polynet.lviv.ua # Converted for use with iPlanet/Sun Directory Servers 5.x by Arne Brutschy abrutschy at xylon.de ## dn: cn=schema attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.1 NAME 'radiusArapFeatures' DESC

Re: Schema file for iPlanet/Sun One Directory Servers 5.x

2004-07-01 Thread Arne Brutschy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arne Brutschy wrote: | or simply copy it from this mail: | Ups, sorry, my stupid mail program wrapped the lines. So just download it, in case you need it. I still can't figure out why my da** Thunderbird disables the Paste Without Formatting button

Using wildcards in realm

2004-07-01 Thread Arne Brutschy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I want to use wildcards in my realm for proxying. But the method posted by Alan does not work. If I set ~ DEFAULT User-Name =~ @foo, Proxy-To-Realm := foo.com I get an error: ~ WARNING: You set Proxy-To-Realm = foo.com but it is a LOCAL realm! ~

Re: [OT] Freeradius Cisco Aironet 1200 with 802.1x, EAP, VLANs and WEP key rotation

2004-03-25 Thread Arne Brutschy
Michael Griego wrote: Amazingly enough, I ran into this exact scenario last night as I was testing RADIUS-assigned VLANs for the first time on an Aironet 1100. Setting up dummy ssid sections with the same settings as my primary ssid (with the exception of the vlan) fixed this problem. ie: [..]

[OT] Freeradius Cisco Aironet 1200 with 802.1x, EAP, VLANs and WEP key rotation

2004-03-24 Thread Arne Brutschy
encountered this type of behavior or can someone tell me how to set up this stucture properly? Regards, Arne Brutschy My cisco config: .. interface Dot11Radio0 no ip address no ip route-cache ! encryption vlan 226 mode wep mandatory ! encryption vlan 225 mode wep mandatory

EAP-TTLS multiple ldap settings

2004-02-26 Thread Arne Brutschy
Hi, I'm trying to use freeradius with EAP-TTLS and multiple ldap setting. Multiple ldap settings because each of them is looking on a different access attribute and profile dn attribute. I want to select one of the ldap sources for the huntgroup used for wireless clients, the other one for

Re: Problems with EAP/TTLS+PAP and LDAP

2004-02-16 Thread Arne Brutschy
Alan DeKok wrote: Why the heck are you doing packet sniffing when you could run the server in debugging mode to see what it's doing? I was running debug mode - but the setting use_tunneled_reply didn't change anything. After a day of debugging I realized that this was the most idiotic