Re: EAP-TTLS w/PAP using ntlm_auth

2008-05-29 Thread Bram Matthys (Syzop)
Alan DeKok wrote: I don't think you got my point. If you want to AUTHENTICATE using ntlm_auth_pap... then call it in the AUTHENTICATION section. Calling it in the AUTHORIZATION section is not AUTHENTICATION. You need to: a) set Auth-Type = ntlm_auth_pap in the authorize{} section w

Re: EAP-TTLS w/PAP using ntlm_auth

2008-05-29 Thread Bram Matthys (Syzop)
Thanks for your time / Regards, Bram. PS: I also tried 'if (!(Control:Auth-Type))' just in case, but same problem. Ivan Kalik wrote: = not :=. Or check if Auth-Type already exists. Ivan Kalik Kalik Informatika ISP Dana 29/5/2008, "Bram Matthys (Syzop)" <[EMAIL PROTECTED]&

Re: EAP-TTLS w/PAP using ntlm_auth

2008-05-29 Thread Bram Matthys (Syzop)
Hi Alan, Alan DeKok wrote: Bram Matthys (Syzop) wrote: Thanks for the hint. What would be the best place and way to do this? Putting this before pap in authorize { }: update control { Auth-Type := PAP } does indeed make pap work, but breaks anything

Re: EAP-TTLS w/PAP using ntlm_auth

2008-05-29 Thread Bram Matthys (Syzop)
tch. Also, how come it is needed to force pap usage? I thought pap was supposed to always be used when no other mod took care of it (fallthrough). Regards, Bram. Ivan Kalik wrote: Use unlang to set Auth-Type PAP even if pap returns noop. Ivan Kalik Kalik Informatika ISP Dana 28/5/2008

EAP-TTLS w/PAP using ntlm_auth

2008-05-28 Thread Bram Matthys (Syzop)
While I've EAP-TTLS w/EAP-MSCHAPv2 working now with ntlm_auth, I'd also like to have EAP-TTLS w/PAP working with ntlm_auth (mostly because the client software I use [securew2] does not save user credentials with mschap, and does save them with pap. And just to offer more options to other clients)

Re: EAP-TTLS w/MS-CHAPv2

2008-05-22 Thread Bram Matthys (Syzop)
Thanks Alan, for all your answers & hints. Upgrading to 2.0.4 did the trick, everything seems to work fine now. Alan DeKok wrote: ... ttls { default_eap_type = mschapv2 Are you using EAP-MSCHAPv2, or MS-CHAPv2? See the comments above this configurat

EAP-TTLS w/MS-CHAPv2

2008-05-21 Thread Bram Matthys (Syzop)
Hi all, I'd like to use EAP-TTLS with MS-CHAP(v2), so I can use SecureW2 with Freeradius. To be more exact, I'd be using ntlm_auth, so that wireless users will be able to get on the wireless network using their usual windows username / password. I'm using FreeRadius 2.0.3. I've seen several tutor