--
Message: 5
Date: Mon, 23 Sep 2013 12:33:10 -0400 (EDT)
From: paul trader
To: freeradius-users@lists.freeradius.org
Subject: pap always returns noop for windows dialup authentication
Message-ID:
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
hi
Hi,
I am having some problems with freeradius 2.1.12 and eduroam; whilst the local
users are authenticated properly and given a specific VLAN, I haven´t been able
to do the same to roaming (proxied) users.
I have tried to place the following unlang code at the end of post-proxy, and
in another
by writing the essential data to a flat-file and then
> batch-loading that into the SQL database.
>
> The improvement came down to SQL transactions - the batch load only created
> one transaction for 1000's of accounting events rather than one transaction
> per ev
-s $T;
> done
> I can get all AD groups is into. Checking group membership
> would be even easier. But how do I set Tunnel-Private-Group-Id from an
> exec-ed script?
>
> BYtE,
> Diego.
>
I checked it up with modifying the ldap module and then using the users file,
at least
ge-ID: <4f17db3f.7040...@imperial.ac.uk>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> On 01/19/2012 12:46 AM, Rui Ribeiro wrote:
>> Hi list,
>>
>> I have freeradius working in a EDUROAM federation, all PEAP-MSCHAPv2
>> and TTLS-EAP working locally, ho
2012 at 1:56 AM, Rui Ribeiro <[hidden email]> wrote:
>>
>> Hi list,
>>
>> Been trying to compile freeradius 2.1.12 in Debian Squeeze following the
>> directions of http://wiki.freeradius.org/Build to no avail. Also tried the
>> suggestion in previous
expecting ltdl 3.x, and squeeze has 7; the
other is that the file changelog is no more in the right format. (tough the
last one is easily fixed)
Has anyone managed to compile freeradius in Debian 6.x?
Best Regards,
Rui Ribeiro
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
>
> Hi,
>
>> to authenticate with the eduroam user. It seems that although the
>> request is proxied, my server tries to locally check the authorized
>> attributes of the user against my local ldap server. And since no
>> such user exists ldap returns : object not found
>
> use unlang to
ket-Type != Accounting-Request) {
#attr_filter.pre-proxy
#}
}
I´ve already tried some approaches and at the moment I am quite at loss of how
to tackle this problem. Some ideas?
Best regards,
Rui Ribeiro
Here comes the debugging:
!free
freeradius -Xx
Thu Jan 5 21
he
> 6, rue Richard Coudenhove-Kalergi
> L-1359 Luxembourg
>
> Tel: +352 424409 1
> Fax: +352 422473
>
Stephan,
The point is not being capable of changing them, and in fact I have
both trying ulang and the attrs file -- and the debug information
shows they are indeed changed -- the point is that changing them at
that particular point seems to interfere with EAP/password
negotiation, and I haven't been able to find a specific point to
insert the VLAN quietly with roaming users.
Best regards,
Rui Ribeiro
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Session-Timeout =* ANY,
Idle-Timeout =* ANY,
MS-CHAP-MPPE-Keys =* ANY,
Service-Type := "Framed-User",
Reply-Message := "Eduroam Roaming",
Tunnel-Type := "VLAN",
Tunnel-Medium-Type := "IEEE-802",
Tunnel-Privat
>
> 1. port 1813 (Selcuk Yazar)
>
>
> --
>
> Message: 1
> Date: Mon, 19 Dec 2011 12:06:08 +0200
> From: Selcuk Yazar
> Subject: port 1813
> To: freeradius-users@lists.freeradius.org
> Message-ID:
>
> Content-Type: te
rset=ISO-8859-1; format=flowed
>
> On 12/16/2011 09:20 PM, Rui Ribeiro wrote:
>
>>> Eh? Who suggested that?
>> Another freeradius<->IAS thread in this list.
>
> Well, it's not a very useful suggestion in this instance. Setting
> Reply-Message won't mag
mat=flowed
>
> On 16/12/11 14:29, Rui Ribeiro wrote:
>> Hi all,
>>
>> I have configuring a FreeRadius, and I need to go through a IAS to reach the
>
> Ugh. Nasty. IAS as an eduroam proxy!
Actually is just for testing, will talk with the responsible entity next week,
defined a
Remote access policy in IAS.
Tried already some alternatives, and inserted Reply-Message = "Yes", as
suggested on another post in the list.
Despite all the efforts, when talking with the IAS, I receive back the error
Proxy-State = 0x3137.
Any advice?
Best Regards,
R
15 matches
Mail list logo
