Re: Unlang clarification

the Access-Accept packet need not be the same as the User-Name attribute in the Access-Request. Nick On Mon, May 20, 2013 at 3:46 PM, stefan.pae...@diamond.ac.uk wrote: The real username in an EAP conversation is inside the encrypted EAP packets, i.e. inside an EAP-TLS tunnel. The one in plain-text

Re: Unlang clarification

*You can of course mandate something like the outer identity must equal the inner identity, or require anonymous@..., which would make the identity spoofing issue one of anonymisation alone. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Any One-Time password system.

which supports radius (via a 3rd party, licensed module). I would love it if someone would do a freeradius module using our API: http://www.wikidsystems.com/downloads/network-clients. We have a python package. nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Adding variable to logs

It seems that the sql module of freeraedius does not support calls to stored mysql procedures. Is this correct? PS Sorry for the noise. Cheers, Nick On 5/1/13, Alan DeKok al...@deployingradius.com wrote: Nick Khamis wrote: Thanks so much for your response. I can provide a specific example

Re: Adding variable to logs

No calls to stored procedures do not work? Or no. that is not correct? Thanks in Advance, N. On 5/1/13, Alan DeKok al...@deployingradius.com wrote: Nick Khamis wrote: It seems that the sql module of freeraedius does not support calls to stored mysql procedures. Is this correct

Re: Adding variable to logs

Thank you guys so much for your time. Kind Regards, N. On 5/1/13, Alan DeKok al...@deployingradius.com wrote: Nick Khamis wrote: No calls to stored procedures do not work? Or no. that is not correct? Q: Is this correct? A: No. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Adding variable to logs

, and put this part together correctly. Thank you so much for your help, even though I did not even take the time to ask a proper question. Kind Regards, Nick. On 5/1/13, Alan DeKok al...@deployingradius.com wrote: Nick Khamis wrote: Thank you guys so much for your time. If you care to look, good

Adding variable to logs

= f538381d8187adf7 Timestamp = 1367315408 Is NAS-PORT-TYPE not being included in the log because it's null? Please excuse the noob question. Kind Regards, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Adding variable to logs

Hello Arran, Thank you so much for your response. I have added the following to the SIP dictionary we are using: ATTRIBUTE NAS-Port-Type 61 integer Please excuse my learning process. Is this considered an accounting request? Cheers, Nick. On 4/30/13, Arran

Re: Adding variable to logs

in the log file: Sip-From-Tag = E94C56E1-DE9870DE Sip-To-Tag = as53e58d9c Thanks in Advance, Nick. On 4/30/13, Alan DeKok al...@deployingradius.com wrote: Nick Khamis wrote: Hello Arran, Thank you so much for your response. I have added the following to the SIP dictionary we are using

Normalising the User-Name AVP in an Access-Accept

and in a normalised form. Is this possible? Thanks, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Normalising the User-Name AVP in an Access-Accept

authentication FreeRADIUS were able to inherently spit out the identity in a normalised form knowing the username and the realm. (Perhaps I am not thinking things through here properly though for the general case though...) Regards, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: Normalising the User-Name AVP in an Access-Accept

I would have thought that it is perfectly reasonable to return the identity back in the case you have roaming federations as long as it was an agreed requirement beforehand. I am of the opinion that this -should- be mandated as part of Eduroam, for example. - List info/subscribe/unsubscribe? See

Re: Normalising the User-Name AVP in an Access-Accept

I would default the behaviour to not send the User-Name attribute in the Access-Accept but give the ability to have it trivially enabled with a toggle. And where it is enabled, by default, send it in the normalised user@realm format unless configured otherwise. (That would be the general case as

Re: Normalising the User-Name AVP in an Access-Accept

with PKI EAPs being to protect the identity from being trivially snooped by an outsider. With federations, I think it would be perfectly reasonable to expect and require the real identity be returned back to the host institution. (I expect others will, perhaps, disagree here though!? :P) Nick - List

Re: Normalising the User-Name AVP in an Access-Accept

That's a very fair point. A problem with anonymous identities though also comes where you have features at the edge that 'do things' based on the identity. Often you will just want an anonymised unique identity for each discrete user, but not necessarily their real identity. Food for thought...

Re: Normalising the User-Name AVP in an Access-Accept

I honestly don't see what the problem is with writing it yourself - it's not rocket science - but OTOH a set of examples in the default config would be a good thing too. No problem at all, rather, I would have simply thought that it lowers the barrier to entry, requiring less concious thought

Re: Normalising the User-Name AVP in an Access-Accept

nothing about the user as you do not have their real identity.) Thinking about things, I think an appropriate compromise for Eduroam, therefore, would be to mandate the return an anonymised unique id with realm for each user in the User-Name AVP in the Access-Accept. Thoughts? Nick - List info

Re: Normalising the User-Name AVP in an Access-Accept

Eduroam visited ORPS and home server ORPS should support CUI. Where the NAS at the visited site lacks support for CUI, and the NAS supports setting values for attributes associated with a session, a globally and temporarily unique identifier should be set (via Access-Accept/COA/SNMP) and

Comware 3 Switches (3Com 4500, 5500, 5500G - H3C S3600, S5600) - EAPOL v2 and v3 being dropped.

to get this fixed. (We are seeing supplicants now using v2 by default so it was causing pain, and in the case of Cisco's AnyConnect, v3.) Regards, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Comware 3 Switches (3Com 4500, 5500, 5500G - H3C S3600, S5600) - EAPOL v2 and v3 being dropped.

is: 8021X/8/PACKET:- 1 -Port:2,Received a EAPOL packet. 8021X/8/Error::- 1 -Port:2,Failed to cut ethernet head. Thanks, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Comware 3 Switches (3Com 4500, 5500, 5500G - H3C S3600, S5600) - EAPOL v2 and v3 being dropped.

Great, hit send by accident with a sentence half constructed. Hopefully you'll get the gist! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Time based bandwidth control

Il 21/09/2012 16.29, Antonio Modesto ha scritto: Hi, Is there any attribute on radius that I can use to provided time based bandwidth control? My boss asked me to implement a solution to double the client's rate limit during the night, we use mikrotik here. - List

another CHAP issue

Hi, I have recently installed freeradius and am having some trouble authenticating a test adsl user. The users file is default plus the following additions:- DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP,

Re: another CHAP issue

Ahh I was told the the nas ip address doesn't matter. They will be getting a poke in the eye later. Nick On 16 Aug 2012, at 16:42, Alan DeKok al...@deployingradius.com wrote: Nick wrote: testu...@randomdomain.net.uk Cleartext-Password :=test123, NAS-IP-Address == 1.1.1.1 ... rad_recv

RE: another CHAP issue

== IP, Service-Type = Framed-User, Tunnel-Password = blahblah, Tunnel-Server-Endpoint = 192.168.0.1, Tunnel-Client-Auth-ID = Tunnel-21CN, Fall-Through = Yes Thanks again. Nick -Original Message- From: freeradius-users-bounces+nick=njryce

Re: Radius authentication against LDAP question

-and-freeradius HTH, Nick -- -- Nick Owen WiKID Systems, Inc. http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius - IIS Outlook Web Access (OWA)

http://www.tcpdata.com - but they're site is currently down and all my calls emails have gone unanswered. Thanks! Abedi Have you seen MS Forefront? -- -- Nick Owen WiKID Systems, Inc. http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe

FreeRadius-supported Billing System?

... What solutions are out there that might be appropriate? (commercial is ok). Could I maybe adapt some of the more WISP-oriented solutions to my needs? Thanks in advance,, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius as a PIN server?

Sorry to be off-topic... nick -Original Message- From: freeradius-users-bounces+rudolf.susnik=telekom...@lists.freeradius.org [mailto:freeradius-users-bounces+rudolf.susnik=telekom...@lists.freeradius.org] On Behalf Of Nick Owen Sent: Tuesday, December 13, 2011 6:58 PM

Re: Freeradius as a PIN server?

://www.wikidsystems.com/downloads/network-clients Nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS with LDAP Support

Hello Everyone, I do have libldap2-dev installed however, it seems like openldap in all it's totality is needed? Thanks in Advnace, Nick. On Thu, Dec 8, 2011 at 5:31 AM, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Dec 8, 2011 at 9:51 AM, Nick Khamis sym...@gmail.com wrote: Hello Everyone

Radius Client vs. Radius Client-NG

Hello Everyone, When installing the client, some documentation point to: radiusclient-ng 0.5.6: http://developer.berlios.de/projects/radiusclient-ng/, and freeradius-client-1.1.6.tar: ftp://ftp.freeradius.org/pub/freeradius/ Is there a difference between the two? Is one recommended or have

FreeRADIUS with LDAP Support

Hello Everyone, I tried to compile FreeRADIUS with LDAP support however, rlm_ldap has not been compiled. Are libldap-2.4-2 libldap-dev not sufficent? Do I need to install OpenLDAP? Thanks in Advance, Nick. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Yet another multiple SSID setup question

Ok, I've gotten a little bit further with setting up my multiple SSID stuff. I'm still working with just the test SSID, trying to get PEAP/MSCHAP working, but running into problems with the inner virtual server and would appreciate any further help. It's failing on the inner tunnel with an error

Re: Yet another multiple SSID setup question

On Fri, 15 Jul 2011 08:15 +0700, Fajar A. Nugraha l...@fajar.net wrote: I'd look at these lines: [ldap_parrotfish] performing search in ou=CUESTA,dc=cuesta,dc=org, with filter (sAMAccountName=nicholas_kartsioukas) [ldap_parrotfish] No default NMAS login sequence [ldap_parrotfish] looking

Re: Yet another multiple SSID setup question

The LDAP queries are against the AD server, btw. I forgot to paste the mschap module config, but that's pretty basic... mschap mschap_cuesta { ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --domain=CUESTA --username=%{%{Stripped-User-Name}:-%{User-Name:-None}}

Re: Yet another multiple SSID setup question

On Wed, 13 Jul 2011 09:33 +0100, Alexander Clouter a...@digriz.org.uk wrote: I would *strongly* recommend you run just one SSID and use VLAN assignment in post-auth to The huge advantage is that *every* user at your organisation can follow the same instructions to connect to the wireless

Re: How to setup Freeradius in a Domain

On Wed, 13 Jul 2011 08:20 -0700, sgilmour sgilm...@enterasys.com wrote: I just want to make sure I understand this. The only way is to be able to login to my PC with a Domain is to incorporate freeradius with an Active Directory server. There isn't a way to do this without using Active

Re: Yet another multiple SSID setup question

On Tue, 12 Jul 2011 07:17 +0100, Alexander Clouter a...@digriz.org.uk wrote: authorize { ... if (Airespace-Wlan-Id == student_ssid) { EAP_student } else { EAP_staff } ... } Thanks for the hints! I think I've got my eap.conf set up as I need it. After some

Yet another multiple SSID setup question

I've been looking through the wiki and staring at the config files and I'm...confused. I've successfully gotten our Cisco WLC to authenticate against ActiveDirectory as well as a Sun LDAP server (just one at a time) via FreeRADIUS for a single test SSID, but now I'm trying to figure out how to

patch files for pam_radius - adding an 'Always Prompt' option for one-time passcodes

LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL X11Forwarding yes UseDNS no Subsystem       sftp    /usr/libexec/openssh/sftp-server The key change is that ChallengeResponseAuthentication is yes. Hopefully, others will find this of use. Nick -- Nick Owen WiKID Systems, Inc

patch files for pam_radius - adding an 'Always Prompt' option for one-time passcodes

LC_IDENTIFICATION LC_ALL X11Forwarding yes UseDNS no Subsystem sftp/usr/libexec/openssh/sftp-server The key change is that ChallengeResponseAuthentication is yes. Hopefully, others will find this of use. Nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com

multiple authentication methods

Hello, looking at the docs, it looks like it's not possible to try to authenticate against a local LDAP server and in case it failes send it to another radius server? Can someone please prove me wrong? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: The story of PAP, CHAP and the blank password

://www.wikidsystems.com/support/wikid-support-center/how-to/how-to-add-two-factor-authentication-to-openldap-and-freeradius/?searchterm=freeradius HTH, Nick Cheers, Ken - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- -- Nick Owen WiKID Systems, Inc

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

Il 24/11/2010 5.05, Pableus ha scritto: I have not got the exact number right now. We're still doing tests, so for now a few clients authenticate with RADIUS, the rest follows as usual. What catches my attention is that users only have problems when they are passed to the RADIUS, otherwise do

Re: Authenticating agains AD issues

. I do give credit to MS for their support of the standard. nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authenticating agains AD issues

This may be 100% off the mark, but have tried using the AD radius plugin IAS? I have tested its support for proxying for a proof-of-concept and it was quite simple to setup. I have no production experience. nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open

Re: ippool and disconnection

We use the same sort of setup, have a look through your radius.log at the same time that the unclosed accounting session went bad, you'll probably find that you have a lot of duplicate discarded records. We're looking into some solutions ourselves, as mikrotik will often take requests from

RE: freeradius authentication stops working after some time...

certificate authentication rather than PEAP. Also, if I use Microsoft IAS as my radius server PEAP works every time, therefore I don't believe my network equipment is having any problems. Any additional ideas would be greatly appreciated. Thanks, Nick - List info/subscribe/unsubscribe

A question about disconnections

the PoD to get the NAS to actually disconnect it. Is what I'm requesting something strange (or conversely idiotic, because it's only our Mikrotik base stations that don't do something like this) ? Thanks, Nick Warr - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Is Centralized SSH Public Key Authentication Possible?

to use Freeradius to route the OTPs to the auth server. HTH, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to make an open auth realm?

not seeing how to do it. I will of course continue to review the documentation after sending this message, but I would appreciate any tips that the mailing list can offer. -- --- - Nick Bright Network Administrator Valnet Telecommunications, LLC Tel 888-332-1616 x 315 Fax 620-332-1201

Re: How to make an open auth realm?

That worked wonderfully. Thanks for the great tip! --- - Nick Bright Network Administrator Valnet Telecommunications, LLC Tel 888-332-1616 x 315 Fax 620-332-1201 Benjamin Marvin wrote: Hi Nick, You should be able to update your users file with your realm, similar to this: DEFAULT

Re: FreeBSD 8.0 port + perl hook problem

: Nick Rogers wrote: I'm having problems getting the latest FreeBSD port of freeradius2 to work with a perl hook that requires the IO perl module. I realize this is likely a FreeBSD ports compilation problem but I am hoping someone here can shed some light. It's likely a problem resolving

Re: FreeBSD 8.0 port + perl hook problem

FYI. I got it to work with libltdl/libtools 2.2 by enabling the function that uses the new libltdl API as you suggested. Thanks again . If anyone has the same problem, I had to add a patch to the FreeBSD port and upgrade it to FreeRADIUS 2.1.8. The following is the patch I added to the port in

FreeBSD 8.0 port + perl hook problem

I'm having problems getting the latest FreeBSD port of freeradius2 to work with a perl hook that requires the IO perl module. I realize this is likely a FreeBSD ports compilation problem but I am hoping someone here can shed some light. There seems to be some kind of shared library linking issue

Freeradius load balancing.

from giving out the same ip address? I've been doing a fair bit of googling, but without a whole lot of luck in this respect. Thanks for any info, Nick Warr. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius load balancing.

Alan DeKok ha scritto: nick wrote: At the moment we have a freeradius 1.1.3 server on CentOS which is functioning fine, but due to circumstances, and the devices we are using as NASes, the ip pools are located on the NAS instead of being centralized on the RADIUS server as we'd like

Re: Multiple Services - Single Login

I have gotten it down to NAS-Port-Type but when I add multiple port types (i.e. two groups to a user). It gives me a SQL cannot find the user error in the log. On Tue, Jun 30, 2009 at 11:34 AM, Alan DeKok al...@deployingradius.comwrote: Nick Huanca wrote: I am curious to understand the best

Re: Multiple Services - Single Login

returned. Post the debug. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Nick Huanca - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Multiple Services - Single Login

having mixed results. Is there a better way to determine the type of service? Thanks, -- Nick Huanca - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple Services - Single Login

be mac address, for VPN IP address and for dial phone number. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Nick Huanca Inside Plant Manager GAW High-Speed Internet 1300 Putney Rd Brattleboro, VT 05301 [offices

re: Filtering in sites-enabled default file

id has `_02 on it. Regards, Nick. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

undefined reference to `lt_preloaded_symbols'

I am running Ubuntu 8.10 and trying to build the debian package for FreeRADIUS 2.1.4 as described on the FreeRADIUS web site. When I issue the command: fakeroot dpkg-buildpackage -b -uc The process starts but at some point along the way, I get this error message: libtool: link: gcc

Re: OT: Implementing RSA's SecurID

for RSA. I suggest you try there. I would think you could also try RSA itself. -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius with PAM authentication

-center/how-to/how-to-secure-ssh-with-two-factor-authentication-from-wikid/ Mostly these are based on Redhat flavors. Keep in mind that each OS has different methods of handling their /etc/pam.d/sshd settings. HTH, Nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http

Freeradius integration

issues - we can do a complete opensource offering. What's the best way to get this started? What are the programming requirements? One concern is that while we have support for java, python, C#, PHP and Ruby, we do not have any C libraries. Is it of interest? -- Nick Owen WiKID Systems, Inc

Re: Freeradius integration

On Sun, Feb 1, 2009 at 12:58 PM, Alan DeKok al...@deployingradius.com wrote: Nick Owen wrote: We're interested in getting libraries integrated with Freeradius and there would be no licensing issues - we can do a complete opensource offering. What's the best way to get this started? What

Re: PAM for RADIUS

list or from Sun. In your pam.d/sshd file, check the setting for account and session. Does your log say that the user is being authenticated? What messages are you getting? hth. nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two

RE: Issue reading from detail to sql (buffered-sql virtual server)

Hi, The below was added and recompiled with the same result - the virtual server writing to the database stops at Ready to process requests. Thanks, Nick -- It looks like it isn't noticing that it's finished reading the file. I would suggest going to line 482 of src/main/detail.c

RE: Issue reading from detail to sql (buffered-sql virtual server)

# it makes no difference. } accounting { detail_rewrite # sql_logger1 } } Thanks, Nick Freeman ihug engineering -Original Message- Do you have a *minimal* configuration that can reproduce this? i.e. read from detail, log to detail-x

RE: Issue reading from detail to sql (buffered-sql virtual server)

. Cleaning up request 0 ID 37069 with timestamp +20 Ready to process requests. Any help would be appreciated, thanks! Nick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] s.org] On Behalf Of Nick Freeman Sent: Wednesday, January 30, 2008 10:06 AM To: freeradius-users

Issue reading from detail to sql (buffered-sql virtual server)

listens in the server startup. Thanks in advance, Nick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: local ssh authentication via radius possible?

running. hth, nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PAM_RADIUS_AUTH

be helpful too. HTH, Nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mod_auth_radius

and can be applied? Any idea on a time-frame for a new release? thanks, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: access only particular website through RADIUS

been problems reported using a version of Apache later than 2.2.2. http://www.wikidsystems.com/documentation/howtos/how-to-add-two-factor-authentication-to-apache/ HTH, Nick On 8/26/07, *zamshed* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: dear Friends. I am a very new

Re: How to add OTP validation to FreeRadius

On 4/25/07, Ouahiba MACHANI [EMAIL PROTECTED] wrote: Thanks Nick for replaying. can you give me exemples of such systems? If you are looking for a software-based two-factor authentication system: http://www.wikidsystems.com - our commercial server supports radius and will work with freeradius

Re: How to add OTP validation to FreeRadius

that supports radius. Luckily, most do. hth, Nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius-apache authentication problem

FWIW, I have had a chance to test this on 2.2.3 and it did not work for me either. Not sure if it is a bug in apache or a change has been made and the mod_auth modules need updating. On 3/29/07, Nick Owen [EMAIL PROTECTED] wrote: On 3/28/07, Ramazan Ulker [EMAIL PROTECTED] wrote: Hi

Re: radius-apache authentication problem

/Location /VirtualHost So, perhaps apache is getting confused about what mechanism to use where, putting it all in one place might clarify things. HTH, Nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 (desk) 404.542.9453 (cell) http://www.wikidsystems.com At last, two-factor authentication

Re: radius-apache authentication problem

On 3/27/07, Ramazan Ulker [EMAIL PROTECTED] wrote: no change, same errors. mod_auth_xradius don't work in apache 2.2.3 I have only tested with 2.2.2. FWIW, authn_file_module is loaded. Why don't you post the relevant portions of your htaccess and httpd.conf files. -- Nick Owen WiKID Systems

Re: radius-apache authentication problem

You might try using mod_auth_xradius: http://www.outoforder.cc/projects/apache/mod_auth_xradius/ More information can be found here: http://www.howtoforge.com/apache_radius_two_factor_authentication HTH, Nick On 3/26/07, Ramazan Ulker [EMAIL PROTECTED] wrote: Hi I want to implement otp

Re: Apache2 - PAM - freeRADIUS - users

- radius working with mod_auth_xradius with apache-2.2.2 on FC6. a very basic how-to is here: http://www.howtoforge.com/apache_radius_two_factor_authentication hth. nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 (desk) 404.542.9453 (cell) http://www.wikidsystems.com At last, two-factor

Re: Management of temporary users

On 2/7/07, Alan DeKok [EMAIL PROTECTED] wrote: Nick Owen wrote: I am looking for the best way to provision groups of users for temporary access across multiple servers. The users would be using ssh and sudo. They would be assigned to a group of servers, then removed after the job

Management of temporary users

was thinking that I could use freeradius with dialup_admin to quickly add and remove users from huntgroup, but it doesn't appear that huntgroups are supported in dialup_admin, or am I missing something? Any suggestions welcome. Sincerely, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 (desk

Re: Freeradius users

and accounting. Regards,Nick LarsenOn 9/29/06, Adrian Acuna [EMAIL PROTECTED] wrote: Hello Everybody: In my new job they want to implement Radius for PPP connection. I have installed Freeradius-1.1.3. The instalation messages show that everything is OK. But I really don't know how create new users

Re: Segfault with EAP-PEAP/MSCHAPv2

think I'll give Debian Sarge a shot. I'll let you know if it works (which would mean FreeBSD has some issues with EAP-PEAP).Regards,Nick LarsenOn 9/26/06, Alan DeKok [EMAIL PROTECTED] wrote: Paul A Roberts [EMAIL PROTECTED] wrote: This is the core dump.FreeBSD 6.1 host, 1.1.2

Re: FreeRADIUS crashes after EAP/PEAP authentication

://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog-List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Regards,Nick LarsenWellingtonNEW ZEALAND - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP PEAP, unable to load certificate

Hi,I have forcibly set Auth-Type to Local, so perhaps that's the problem.Here's my debug output anyway...rad_recv: Access-Request packet from host 10.10.1.199:1812, id=1, length=73 User-Name = nick Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x02010009016e69636b NAS-IP

Re: EAP PEAP, unable to load certificate

trawling through the net again. Thanks again,Nick LarsenOn 8/25/06, K. Hoercher [EMAIL PROTECTED] wrote: On 8/25/06, Nick Larsen [EMAIL PROTECTED] wrote:tls: certificate_file = (null)You have to fill in this information. See the comment in eap.confabove the pertinent line.regardsK. Hoercher-List

EAP PEAP, unable to load certificate

what could cause this, or is there a better method to get ease of use for wireless clients? Please let me know if there's other info you need which may help, as I'm sure I would have forgotten something.Thanks in advance,-- Regards,Nick LarsenWellingtonNEW ZEALAND - List info/subscribe/unsubscribe

Automatic redirection

Is there a way to redirect a authenticated user to a specific web address depending on there login information? Nick Marino - IT Solutions - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: [radius] Re: Automatic redirection

- Original Message - From: Sebastian Wild [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, May 09, 2006 10:29 AM Subject: Re: [radius] Re: Automatic redirection I can't imagine that it is that specific. Well at least I dunno...we

Re: [radius] RE: Automatic redirection

Nick Marino - IT Solutions - Original Message - From: Bogdan Dumitriu - Technical Support Team [EMAIL PROTECTED] To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Sent: Tuesday, May 09, 2006 12:21 PM Subject: [radius] RE: Automatic redirection I've just tried

Auth question

Can anyone tell me why I am getting trashed passwords when attempting to authenticate? Login incorrect: [nickm/d\313f`\247+4\203\360/\367] Nick Marino - IT Solutions - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: [radius] Re: Auth question

Nick Marino - IT Solutions - Original Message - From: Lewis Bergman [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, February 07, 2006 5:56 AM Subject: [radius] Re: Auth question Can anyone tell me why I am getting trashed

Re: [radius] Re: Auth question

Nick Marino - IT Solutions - Original Message - From: futhwo [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, February 07, 2006 9:57 AM Subject: Re: [radius] Re: Auth question Maybe you are not loading the right dictionary

Re: [radius] Re: Auth question

Nick Marino - IT Solutions - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, February 07, 2006 11:49 AM Subject: Re: [radius] Re: Auth question Nick Marino [EMAIL PROTECTED] wrote

  1   2   3   >