Re: Framed-IP-Address Question

ss-point which doesn't forward the ip-address to the radius server or the client itself which doesn't send it. Kind regards Stefan Puch - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Framed-IP-Address Question

/logout. Sure I could get the ip-address from logfile of the dhcp-server, but I would like to do it as easy as possible. Can anyone tell me why the "Framed-IP-Address" is only shown for some clients and what I would have to do that it is show for all clients which are connected to local ne

Re: NAS-Post in Netgear Accounting-Packet

y NOT connected anymore but radwho shows the following: # radwho -R User-Name = "test2" Acct-Session-Id = " 6" NAS-IP-Address = 192.168.XX.XX NAS-Port = 1 Service-type = Login-User Framed-IP-Address = Acct-Session-Time = 10255 Calling-Station-Id = "001302BE" User-Name = "test2" Acct-Session-Id = " 16" NAS-IP-Address = 192.168.XX.XX NAS-Port = 1 Service-type = Login-User Framed-IP-Address = Acct-Session-Time = 8170 Calling-Station-Id = "001302BE" # It's shows that the user is still connected... Does anyone know how this is possible? Best regards Stefan Puch - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems using EAP-TLS with freeradius version 2

to get onto all of them (if they use EAP-TLS). Thanks for the clarification, this is a good argument! In my case there is (and will be) only one server with uses the CA so it makes no difference, but in many other cases, you are right, signing with the CA is not what you really want. Thanks a

Re: Problems using EAP-TLS with freeradius version 2

Freeradius using EAP-TLS I always found it that way, that the ca cert signs all other certs and by the way, the HOWTO in the freeradius Wiki (EAPTLS.pdf) explains it that way, too ;-) Best regards Stefan Puch - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems using EAP-TLS with freeradius version 2

@Arran Cudbard-Bell > Write a regular expression to strip off the proceeding \ > Heres one I did earlier If I remember correctly it's to escape to > one \ in the username ... \\ To escape it in the RegExp string, \\ to make \ > literal in the regular expression... I'm not so familiar with

Re: Problems using EAP-TLS with freeradius version 2

rt_cn = %{User-Name}" enabled in eap.conf In short: How do I specify an empty domain (realm "" {authhost = LOCAL, accthost = LOCAL} doesn't work)? What else do I have to configure, when the realm ntdomain is set in radiusd.conf (I have also set ntdomain in "authorize&quo

Re: Problems using EAP-TLS with freeradius version 2

tificate, the CA certificate or the server certificate? The second question is: Are there any further suggestions or do I have to make an ethereal trace? Perhaps you can send me some test certs that should really work, so that I can exclude the certs when debugging/analyzing the rest? Best regards Stefan Puch - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problems using EAP-TLS with freeradius version 2

used TinyCA to generate my certificates, now I will try the Makefile provided in the source-code of freeradius. I think the extendedKeyUsage "Microsoft Smartcard Logon" should not be set in both variants. Or do you mean that the extendedKeyUsage "Microsoft Smartcard Logon" must be

Problems using EAP-TLS with freeradius version 2

blem and not to much work for me when providing useless informations. Best regards and thanks in advance Stefan Puch - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems using EAP-TLS with freeradius version 2

Stefan Puch wrote: >> Then some people came with their mobile devices which are running Windows >> Mobile 2003, Windows Mobile 5 (WM5) or Windows Mobile6 (WM6) and the >> problems began. The same EAP-TLS certificate which worked fine on a Windows >> XP machine does