Re: Active Directory authentication question

2013-09-25 Thread Roberto Carna
- From: freeradius-users- bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users- bounces+stefan.paetow=diamond.ac...@lists.freeradius.org] On Behalf Of Roberto Carna Sent: 24 September 2013 15:17 To: FreeRadius users mailing list Subject: Re: Active Directory

Re: Active Directory authentication question

2013-09-25 Thread Roberto Carna
=diamond.ac...@lists.freeradius.org] On Behalf Of Roberto Carna Sent: 25 September 2013 14:27 To: FreeRadius users mailing list Subject: Re: Active Directory authentication question Dear Stephan, just the last question pleasein your guide you say: In /etc/raddb/eap.conf, change the ttls

Re: Active Directory authentication question

2013-09-25 Thread Roberto Carna
Message- From: freeradius-users- bounces+stefan.paetow=diamond.ac...@lists.freeradius.org [mailto:freeradius-users- bounces+stefan.paetow=diamond.ac...@lists.freeradius.org] On Behalf Of Roberto Carna Sent: 25 September 2013 15:44 To: FreeRadius users mailing list Subject: Re: Active

Re: Active Directory authentication question

2013-09-24 Thread Roberto Carna
to date on Debian specifically. Stefan -Original Message- From: Roberto Carna [mailto:robertocarn...@gmail.com] Sent: 23 September 2013 19:16 To: Paetow, Stefan (DLSLtd,RAL,LSCI) Subject: Re: Active Directory authentication question Dear Stepahn, I use Debian 7 for my Freeradius

Re: Active Directory authentication question

2013-09-19 Thread Roberto Carna
Thanks Stepahn for all your important help. Regards, Roberto 2013/9/19 stefan.pae...@diamond.ac.uk: What I mean is that EAP-TLS is easier to me than AD authentication at this point, because I've just put it to work...and if I want to use AD auth I have to take EAP-TLS out and start again

Active Directory authentication question

2013-09-18 Thread Roberto Carna
Dear, I have several Windows 7 clients over WiFi autheticating throug EAP-TLS to a Freeradius 2.1 service against a local MySQL database, it works OK. Now I have to change the authentication from MySQL to a remote Active Directory on a Windows 2012 server. Because I don't know so much about

Re: Active Directory authentication question

2013-09-18 Thread Roberto Carna
to work. Thanks a lot, Roberto 2013/9/18 Alan DeKok al...@deployingradius.com: Roberto Carna wrote: Dear, I have several Windows 7 clients over WiFi autheticating throug EAP-TLS to a Freeradius 2.1 service against a local MySQL database, it works OK. EAP-TLS doesn't use MySQL for storing

Re: Active Directory authentication question

2013-09-18 Thread Roberto Carna
it to work...and if I want to use AD auth I have to take EAP-TLS out and start again with NTLM / AD authenticationis it OK ??? Regards 2013/9/18 Arran Cudbard-Bell a.cudba...@freeradius.org: On 18 Sep 2013, at 15:39, Roberto Carna robertocarn...@gmail.com wrote: Sorry, so I'm a bit confused

Apple devices can´t authenticate

2013-08-14 Thread Roberto Carna
Dear, I have installed the Easyhotspot captive portal product which uses the freeradius 2.1.0 service in order to authenticate users. I can authenticate with Windows, Linux and Android devices, but I can't authenticate with Apple devices (iphone and ipad) at all. Is it an intrinsic problem of

Re: Apple devices can´t authenticate

2013-08-14 Thread Roberto Carna
other Windos and Android devices the authentication works OK. Thanks again 2013/8/14 Brian Julin bju...@clarku.edu: Roberto Carna wrote: I can authenticate with Windows, Linux and Android devices, but I can't authenticate with Apple devices (iphone and ipad) at all. Is it an intrinsic

Re: Apple devices can´t authenticate

2013-08-14 Thread Roberto Carna
in 0.9 seconds. Sending delayed reject for request 1 Sending Access-Reject of id 0 to 127.0.0.1 port 47716 Waking up in 4.9 seconds. Cleaning up request 1 ID 0 with timestamp +66 Ready to process requests. THANKS A LOT 2013/8/14 Alan DeKok al...@deployingradius.com: Roberto Carna wrote: Dear

I don't want to see clear text password in debug mode

2013-08-06 Thread Roberto Carna
Dear, when I execute freeradius -X the daemon starts in debug mode. After that when a any user authenticate againts freradisu service, I can see in the screen something like this: [sql] expand: %{User-Name} - roberto [sql] sql_set_user escaped user -- 'roberto' [sql] expand: %{User-Password} -

Accounting: visualize login, logout and commands

2013-06-03 Thread Roberto Carna
Dear, I've implemented a Freeradius server for SSH Linux and Telnet Switch authentication. How can I do in order to get accounting of logins, logouts and -if possible- the commands executed by the users authenticated ??? I'm using Daloradius to have a friendly graphical mode. Thanks a lot,

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Roberto Carna
Dear, and what can I do to accont jus login, logout and sesson times fr swithes and Linux boxes ??? Because by default I can see any accounting event. Thanks again. Roberto 2013/6/3 Alan DeKok al...@deployingradius.com Roberto Carna wrote: Dear, I've implemented a Freeradius server

Re: Freeradius: change user passwords through pam_radius

2013-05-28 Thread Roberto Carna
2013, at 15:26, Roberto Carna robertocarn...@gmail.com wrote: Dear, I have a Linux box authenticating SSH users against Freeradius. It works OK. When the users go into the Linux box via SSH, I need them to change their own radius passwords. For this reason, I edited the /etc/pam.d/passwd

Freeradius: change user passwords through pam_radius

2013-05-27 Thread Roberto Carna
Dear, I have a Linux box authenticating SSH users against Freeradius. It works OK. When the users go into the Linux box via SSH, I need them to change their own radius passwords. For this reason, I edited the /etc/pam.d/passwd file as follow: passwordsufficient

Fwd: Freeradius: change user passwords through pam_radius

2013-05-27 Thread Roberto Carna
Dear, I have a Linux box authenticating SSH users against Freeradius. It works OK. When the users go into the Linux box via SSH, I need them to change their own radius passwords. For this reason, I edited the /etc/pam.d/passwd file as follow: password sufficient pam_radius_auth.so @include

Problem: switch authentication against Freeradius server

2013-05-23 Thread Roberto Carna
Dear, I've implemented Linux SSH authentication using PAM against a Freeradius server, it was OK !!! But know I'm trying to authenticate some Allied switch users against the same Freeradius server...in the Allied switch I've defined the radius server IP, port and secret, and when I try to telnet

Re: Problem: switch authentication against Freeradius server

2013-05-23 Thread Roberto Carna
Hi, what exactly means double-checked the secret ??? I've defined the same secret in client.conf from Freeradius and in the config from Allied switch Thanks again... 2013/5/23 Øystein Gyland oyst...@usit.uio.no On 05/23/2013 03:34 PM, Roberto Carna wrote: Dear, I've implemented Linux SSH

Re: Problem: switch authentication against Freeradius server

2013-05-23 Thread Roberto Carna
Dear Alan, my shared secret is testing123 in bothe switch and freeradius.it's the default shared secret as you can seeso I get lost :( 2013/5/23 Alan DeKok al...@deployingradius.com Roberto Carna wrote: But know I'm trying to authenticate some Allied switch users against the same

Re: Problem: switch authentication against Freeradius server

2013-05-23 Thread Roberto Carna
OK, just a last questionI have Freeradius with MySQL, where is the NAS in order to check the pre-shared secret ??? Thanks again. 2013/5/23 Alan DeKok al...@deployingradius.com Roberto Carna wrote: Dear Alan, my shared secret is testing123 in bothe switch and freeradius.it's

Re: Problem: switch authentication against Freeradius server

2013-05-23 Thread Roberto Carna
/23 Alan DeKok al...@deployingradius.com Roberto Carna wrote: OK, just a last questionI have Freeradius with MySQL, where is the NAS in order to check the pre-shared secret ??? If you have already edited the shared secret, you should know where it is. Go read the documentation

Re: Basic question to authenticate switches and Linux boxes

2013-05-15 Thread Roberto Carna
accessing the boxes... Regards, E:S On 09.05.2013 21:38, Roberto Carna wrote: Dear Matt, my second question is: If I have to authenticate Linux boxes and switches against Freeradius, do I have to use libpam-radius-auth for both devices or what ??? Thanks again, Roberto 2013/5/8 Matt

Re: Basic question to authenticate switches and Linux boxes

2013-05-09 Thread Roberto Carna
Dear Matt, my second question is: If I have to authenticate Linux boxes and switches against Freeradius, do I have to use libpam-radius-auth for both devices or what ??? Thanks again, Roberto 2013/5/8 Matt Zagrabelny mzagr...@d.umn.edu On Wed, May 8, 2013 at 3:26 PM, Roberto Carna