RE: Ldap group troubles

2007-06-07 Thread Dourty, Brian R. (IATS)
] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Phil Mayers Sent: Tuesday, June 05, 2007 6:50 PM To: FreeRadius users mailing list Subject: Re: Ldap group troubles Dourty, Brian R. (IATS) wrote: I'm having some trouble with the ldap group configuration against AD and need a little help

RE: Ldap group troubles

2007-06-06 Thread Dourty, Brian R. (IATS)
] On Behalf Of Phil Mayers Sent: Tuesday, June 05, 2007 6:50 PM To: FreeRadius users mailing list Subject: Re: Ldap group troubles Dourty, Brian R. (IATS) wrote: I'm having some trouble with the ldap group configuration against AD and need a little help. Freeradius 1.1.4 Upgrade. - List info

RE: Ldap group troubles

2007-06-06 Thread Dourty, Brian R. (IATS)
: entering group LDAP for request 0 rlm_ldap: - authenticate rlm_ldap: login attempt by dourtyb with password password rlm_ldap: user DN: CN=Dourty\, Brian R. (IATS),CN=Users,DC=col,DC=missouri,DC=edu rlm_ldap: (re)connect to x.x.x.x:3268, authentication 1 rlm_ldap: starting TLS rlm_ldap: bind as CN=Dourty

Ldap group troubles

2007-06-05 Thread Dourty, Brian R. (IATS)
I'm having some trouble with the ldap group configuration against AD and need a little help. Freeradius 1.1.4 MS 2003 Active Directory radiusd.conf groupname_attribute = cn groupmembership_filter = (member=%{Ldap-UserDn})

radiusd and oracle accounting

2007-01-22 Thread Dourty, Brian R. \(IATS\)
We have configured our radius servers to send accounting information to an Oracle database. It works our really well except when the oraclce database server isn't available (I.E. maintenance or cold backups). The radius process dies when it loses connectivity to the oracle server. Has anyone else

RE: Windows Vista doing PEAP

2006-11-30 Thread Dourty, Brian R. \(IATS\)
The patch did improve things, but is still isn't perfect. If I configure my VISTA client to prompt me for my credentials the authentication works and I get connected. If I configure my VISTA client to use my windows login credentials (This is the default behavior) the Auth fails. For some reason

RE: Windows Vista doing PEAP

2006-10-23 Thread Dourty, Brian R. \(IATS\)
Got this patch to work with 1.1.3 without seg faulting... I've sent Alan the debug output. Can download it here: http://bengal.missouri.edu/~dourtyb/freeradius/vista.patch Index: src/modules/rlm_eap/rlm_eap.c === RCS file:

RE: Windows Vista doing PEAP

2006-10-20 Thread Dourty, Brian R. \(IATS\)
) -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius-users- [EMAIL PROTECTED] On Behalf Of Dourty, Brian R. (IATS) Sent: Thursday, October 19, 2006 4:44 PM To: FreeRadius users mailing list Subject: RE: Windows Vista doing PEAP We have also posted here about our

RE: Windows Vista doing PEAP

2006-10-19 Thread Dourty, Brian R. \(IATS\)
We have also posted here about our difficulties with Windows Vista and our FR. It isn't working for us either. Brian -Original Message- From: freeradius-users- [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of King, Michael Sent: Thursday, October 19, 2006 2:52

RHEL4 and Oracle Instant Client

2006-10-10 Thread Dourty, Brian R. \(IATS\)
Has anyone gotten the source RPM's from RHEL4 to build with the oracle module using the Oracle instant client? It keeps giving me the following error no matter what I try: checking for oci.h... yes checking for oracle_init in -loracleclient... no configure: warning: oracle libraries not found.

AD Group based ldap auth

2006-10-10 Thread Dourty, Brian R. \(IATS\)
I'm trying to get group based authentication working using LDAP against AD. Right now I'm getting a failure related to the group search filter. What filter should I be using? groupmembership_filter = (|((objectClass=group)(member=%{Ldap-UserDn}))((objectClass=top)(uniq uemember=%{Ldap-UserDn})))

MS Vista RC1 and Freeradius 802.1x

2006-09-21 Thread Dourty, Brian R. \(IATS\)
We are having some difficulties getting MS Vista RC1 build (5600) to work with our Freeradius server using 802.1x. Has anyone been able to get this to work? Brian Dourty System Administrator - Team Lead IAT Services University of Missouri - Columbia 573-882-1035 - List

RE: MS Vista RC1 and Freeradius 802.1x

2006-09-21 Thread Dourty, Brian R. \(IATS\)
] On Behalf Of Alan DeKok Sent: Thursday, September 21, 2006 9:54 AM To: FreeRadius users mailing list Subject: Re: MS Vista RC1 and Freeradius 802.1x Dourty, Brian R. \(IATS\) [EMAIL PROTECTED] wrote: We are having some difficulties getting MS Vista RC1 build (5600) to work with our

RE: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-05-03 Thread Dourty, Brian R. \(IATS\)
Dourty, Brian R. (IATS) [EMAIL PROTECTED] wrote: Ok, but isn't the with_ntdomain_hack =3D yes directive in the raidusd.conf file suppose to correct this behavior? Theoretically, yes. But when you're calling ntlm_auth, the with_ntdomain_hack isn't being used. Why would it? You're

RE: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-05-03 Thread Dourty, Brian R. \(IATS\)
. Brian D. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, May 03, 2004 1:07 PM To: [EMAIL PROTECTED] Subject: Re: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question Dourty, Brian R. (IATS) [EMAIL PROTECTED] wrote

RE: Freeradius on redhat ES 3.0

2004-05-03 Thread Dourty, Brian R. \(IATS\)
Our radius servers are both RHEL 3.0 AS machines. We recompiled freeradius from redhat supplied source RPMS to get oracle support. We use them to handle dialup modem pools and VPN client. We haven't had any problem with the production systems. What are you trying to use your radius server for?

Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-04-30 Thread Dourty, Brian R. \(IATS\)
Hello all, We are in the process of testing 802.1x authentication for future deployment on campus. Our test setup includes the following: freeradius-snapshot-20040427 running on RHEL 3.0 AS Configured for PEAP with MSCHAPv2 using SAMBA's winbind/ntlm_auth Multiple AD domains (smb.conf points to

RE: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-04-30 Thread Dourty, Brian R. \(IATS\)
Dourty, Brian R. (IATS) [EMAIL PROTECTED] wrote: 1. Keeping in mind that user1 in domain1 can auth as long as domain1 isn't supplied why does supplying domain1 cause the auth to fail? Because the MS client does the MS-CHAP calculations using the username without the domain