Re: EAP/TTLS Auth problem

2012-05-15 Thread Steve Hopps
I was able to get this working, thanks for all your help everyone On Mon, May 14, 2012 at 4:51 PM, alan buxey wrote: > Hi, > >> Well I've been trying to follow the advice here and also what I've >> found online and in the configs. I attempted to revert to the >> 'default' config files for sites-e

Re: EAP/TTLS Auth problem

2012-05-14 Thread alan buxey
Hi, > Well I've been trying to follow the advice here and also what I've > found online and in the configs. I attempted to revert to the > 'default' config files for sites-enabled, as this project was dropped > in my lap after months of another guy working on it and being > frustrated, and I wasn'

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
Well I've been trying to follow the advice here and also what I've found online and in the configs. I attempted to revert to the 'default' config files for sites-enabled, as this project was dropped in my lap after months of another guy working on it and being frustrated, and I wasn't sure what kin

Re: EAP/TTLS Auth problem

2012-05-14 Thread Phil Mayers
On 14/05/12 15:58, Steve Hopps wrote: I'll post the full log. It should be pulling from OpenLDAP. I had to It's not. You haven't configured it to do that. Module: Instantiating module "ldap" from file /etc/freeradius/radiusd.conf ldap { server = "localhost" port = 389 O

Re: EAP/TTLS Auth problem

2012-05-14 Thread alan buxey
Hi, > We are using the correct password. There must be something broken > causing the passwords not to match. That is what I'm looking for help > to determine. WHERE are you using the correct password? if the client is being given the correct password, then where are the usernames and paswords

Re: EAP/TTLS Auth problem

2012-05-14 Thread Alan DeKok
Steve Hopps wrote: > I'll post the full log. It should be pulling from OpenLDAP. I had to > censor the log in a few places, including the IP of the system I'm > using to test, which I changed to 6.6.6.6 And please check Phil's comment. It is *still* showing this: [pap] Using CRYPT password "*"

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
I'll post the full log. It should be pulling from OpenLDAP. I had to censor the log in a few places, including the IP of the system I'm using to test, which I changed to 6.6.6.6 Thanks for helping me with this. FreeRADIUS Version 2.1.10, for host x86_64-pc-linux-gnu, built on Nov 14 2010 at 21:12

Re: EAP/TTLS Auth problem

2012-05-14 Thread Alan DeKok
Steve Hopps wrote: > We are using the correct password. You can believe what the server sees. Or you can believe a fantasy. It's that simple. > There must be something broken > causing the passwords not to match. That is what I'm looking for help > to determine. As Phil said, post the FU

Re: EAP/TTLS Auth problem

2012-05-14 Thread Phil Mayers
On 14/05/12 15:07, Steve Hopps wrote: We are using the correct password. There must be something broken causing the passwords not to match. That is what I'm looking for help to determine. Send a full debug "radiusd -X". The trimmed debug doesn't show enough info. However, at a guess, this line

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
We are using the correct password. There must be something broken causing the passwords not to match. That is what I'm looking for help to determine. On Fri, May 11, 2012 at 3:02 PM, Alan DeKok wrote: > Steve Hopps wrote: >> I'm trying to use FreeRadius with OpenLDAP for authentication of some >>

Re: EAP/TTLS Auth problem

2012-05-11 Thread Alan DeKok
Steve Hopps wrote: > I'm trying to use FreeRadius with OpenLDAP for authentication of some > Nanostation M2 access points, but have had no luck getting it to work. > When using rad_eap_test to experiment, I logged the following: ... > [pap] Passwords don't match > ++[pap] returns reject > Failed to

EAP/TTLS Auth problem

2012-05-11 Thread Steve Hopps
I'm trying to use FreeRadius with OpenLDAP for authentication of some Nanostation M2 access points, but have had no luck getting it to work. When using rad_eap_test to experiment, I logged the following: Found Auth-Type = PAP # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel +

Re: NTLM Auth Problem

2012-04-24 Thread Phil Mayers
On 24/04/12 15:48, Ali Majdzadeh wrote: Yes I did. I also read rlm_mschap sources and dependent libraries. May lead me which section explain this function? I'm sorry, I don't understand you. This discussion has become off-topic for this list. I'm afraid you are going to have to work this out

Re: NTLM Auth Problem

2012-04-24 Thread Alan DeKok
Ali Majdzadeh wrote: > Yes I did. I also read rlm_mschap sources and dependent libraries. > > May lead me which section explain this function? We did. The RFC's are clear. The source code in rlm_mschap is clear. This list is about FreeRADIUS. It is *not* the place to learn how MS-CHAP w

Re: NTLM Auth Problem

2012-04-24 Thread Ali Majdzadeh
متأسفانه فرستادم... 2012/4/24 Ali Majdzadeh > Yes I did. I also read rlm_mschap sources and dependent libraries. > > > May lead me which section explain this function? > > > 2012/4/24 Phil Mayers > >> On 24/04/12 13:44, Ali Majdzadeh wrote: >> >>> Hi >>> >>> I checked that rlm_mschap converts t

Re: NTLM Auth Problem

2012-04-24 Thread Ali Majdzadeh
Yes I did. I also read rlm_mschap sources and dependent libraries. May lead me which section explain this function? 2012/4/24 Phil Mayers > On 24/04/12 13:44, Ali Majdzadeh wrote: > >> Hi >> >> I checked that rlm_mschap converts the CHAP_CHALLENGE from radius packet >> into other format that

Re: NTLM Auth Problem

2012-04-24 Thread Phil Mayers
On 24/04/12 13:44, Ali Majdzadeh wrote: Hi I checked that rlm_mschap converts the CHAP_CHALLENGE from radius packet into other format that used in ntlm_auth. Radius Packet: MS-CHAP-Challenge = 0x7e95c31b02cd054fd1dcacea7c2fb358 Radius –X output for Ntlm_auth: expand: --challenge=%{%{mschap:Cha

Re: NTLM Auth Problem

2012-04-24 Thread Ali Majdzadeh
Hi I checked that rlm_mschap converts the CHAP_CHALLENGE from radius packet into other format that used in ntlm_auth. Radius Packet: MS-CHAP-Challenge = 0x7e95c31b02cd054fd1dcacea7c2fb358 Radius –X output for Ntlm_auth: expand: --challenge=%{%{mschap:Challenge}:-00} -> --challenge=4487f1f

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-17 Thread Gerald Krause
Am 16.04.2012 22:40, schrieb Matthew Newton: > On Mon, Apr 16, 2012 at 10:00:03PM +0200, Gerald Krause wrote: >>> Please use 2.1.12. It's better. >> >> I'll check that suggestion. In the moment this is a plain "apt-get >> install/update/upgrade" Debian box that comes with 2.1.10 (don't blame >>

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Matthew Newton
On Mon, Apr 16, 2012 at 10:00:03PM +0200, Gerald Krause wrote: > > Please use 2.1.12. It's better. > > I'll check that suggestion. In the moment this is a plain "apt-get > install/update/upgrade" Debian box that comes with 2.1.10 (don't blame > me...) but maybe I'am going to install freeradius

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Gerald Krause
Am 16.04.2012 21:22, schrieb Alan DeKok: > Gerald Krause wrote: >> after upgrading our server from 2.0.4 to 2.1.10 > > Please use 2.1.12. It's better. I'll check that suggestion. In the moment this is a plain "apt-get install/update/upgrade" Debian box that comes with 2.1.10 (don't blame me...

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Alan DeKok
Gerald Krause wrote: > after upgrading our server from 2.0.4 to 2.1.10 Please use 2.1.12. It's better. > we see a change in the > auth logic - e.g. when processing proxied requests to a home server and > their replies. We need this feature to append some special attributes to > the accept-pack

post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Gerald Krause
Hi, after upgrading our server from 2.0.4 to 2.1.10 we see a change in the auth logic - e.g. when processing proxied requests to a home server and their replies. We need this feature to append some special attributes to the accept-packet from the home server before sending it to the NAS. 1) Our

Re: NTLM Auth Problem

2012-04-16 Thread Phil Mayers
On 04/15/2012 09:51 PM, Ali Majdzadeh wrote: Hi Tnx for Ur fast reply. As I explained, I know that the format is differ from the original attributes. I want to know that: If I want to run it from commandline, how can I convert the challenge and response attributes to which they can be used in

Re: NTLM Auth Problem

2012-04-15 Thread Alan DeKok
Ali Majdzadeh wrote: > As I explained, I know that the format is differ from the original > attributes. I want to know that: > > If I want to run it from commandline, how can I convert the challenge and > response attributes to which they can be used in command line? You read the MS-CHAP RFCs,

Re: NTLM Auth Problem

2012-04-15 Thread Ali Majdzadeh
Hi Tnx for Ur fast reply. As I explained, I know that the format is differ from the original attributes. I want to know that: If I want to run it from commandline, how can I convert the challenge and response attributes to which they can be used in command line? In other word, I want to use ntl

Re: NTLM Auth Problem

2012-04-14 Thread Phil Mayers
> > >with radius –X , I saw that the challenge and response is differ from >that >I got in auth_log in same session. So if I run ntlm_auth with new >values, >it’s OK! what’s wrong? Freeradius processes the mschapv2 challenge into a different format required by samba. There's nothing "wrong". Thi

NTLM Auth Problem

2012-04-14 Thread Ali Majdzadeh
Hi I’m using FreeRadius 2.1.12 wih mschap and ntlm_auth external execution module as follows: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}"

RE: Auth Problem

2012-02-03 Thread Fazal Ahmed Malik
[mailto:freeradius-users-bounces+fam=solacetel@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, February 03, 2012 9:17 PM To: FreeRadius users mailing list Subject: Re: Auth Problem Fazal Ahmed Malik wrote: > I have been using Freeradius for couple of years. Freeradius is > instal

Re: Auth Problem

2012-02-03 Thread Alan DeKok
Fazal Ahmed Malik wrote: > I have been using Freeradius for couple of years. Freeradius is > installed on FreeBSD with mpd. All is working fine with Mac based > Calling-station. I have problem with one username. With that particular > user nothing works I mean he can bypass password, expiration and

Auth Problem

2012-02-03 Thread Fazal Ahmed Malik
Dear List, I have been using Freeradius for couple of years. Freeradius is installed on FreeBSD with mpd. All is working fine with Mac based Calling-station. I have problem with one username. With that particular user nothing works I mean he can bypass password, expiration and calling-station.

Re: AD Auth - problem with some chars in user's DN

2010-06-11 Thread Alan DeKok
Nelson Vale wrote: > The user's DN is OK now (no extra characters), but the ldap > authentication still doesn't work. I think the problem is that double > quotes must be escaped before sent to AD. OK. > In my fix in rlm_ldap (test purpose only), I did just that before > assigning the vp_user_dn

Re: AD Auth - problem with some chars in user's DN

2010-06-09 Thread Nelson Vale
2010/6/9 Alan DeKok > Nelson Vale wrote: > > Sorry, the problem occurs only with the " (double quotes) character and > > not to the other two characters. > > Try re-building from git.freeradius.org, branch v2.1.x. There's a fix > which should help. > > The user's DN is OK now (no extra charact

Re: AD Auth - problem with some chars in user's DN

2010-06-09 Thread Alan DeKok
Nelson Vale wrote: > Sorry, the problem occurs only with the " (double quotes) character and > not to the other two characters. Try re-building from git.freeradius.org, branch v2.1.x. There's a fix which should help. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.or

Re: AD Auth - problem with some chars in user's DN

2010-06-07 Thread Nelson Vale
Sorry, the problem occurs only with the " (double quotes) character and not to the other two characters. 2010/6/7 Nelson Vale > Hi all, > > > I've recently found a problem authenticating some users in AD (2003) when > the user's Distinguish Names have one or more of the following characters: >

AD Auth - problem with some chars in user's DN

2010-06-07 Thread Nelson Vale
Hi all, I've recently found a problem authenticating some users in AD (2003) when the user's Distinguish Names have one or more of the following characters: " ' ` (double quotes, apostrophe or grave accent), using freeradius 2.0.2 and 2.1.9 versions: "... [ldap] login attempt by "johndoe" with

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-20 Thread orion
i had the same problem when i wanted to authenticate the hotspot`s user with freeradius. the solution was to make a static mapping on IP - HOTSPOT - IP BINDINGS MAC address : THE MAC OF THE SERVER ADDRESS : THE IP ADDRESS OF THE SERVER TO ADDRESS : THE SAME AS ABOVE SERVER : ALL TYP

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Fajar A. Nugraha
2009/3/19 Lazar Cherveniakov : > Everything looks fine in IP addresses, but the problem is still the same. Looks like you got exactly the problem I described. See here : > Mikrotik debug log > 01:33:40 radius,debug sending 53:02 to 192.168.200.2:1812 Mikrotik thinks radius IP is 192.168.200.2 >

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread tnt
>The machines are connected to cable and on 2 meters, >in this case where to find the problem? >What and how to get to see where the real problem? Wireshark. If you see packets on the wire - Mikrotik is stopping it. If you don't see them on the wire - radius machine is stopping them. Ivan Kalik K

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Lazar Cherveniakov
The machines are connected to cable and on 2 meters, in this case where to find the problem? What and how to get to see where the real problem? -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE - Powered by Mail.BG - http://mail.bg - List

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread tnt
>Everything looks fine in IP addresses, but the problem is still the same. No, it's not looking fine. >Mikrotik debug log . has no trace of Access-Accept packet - it didn't arrive. >Here again the log of Mikrotik and freeradius: > Stop looking at the logs and start looking at the network. Iva

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Lazar Cherveniakov
Everything looks fine in IP addresses, but the problem is still the same. Here again the log of Mikrotik and freeradius: Mikrotik debug log 01:33:40 pppoe,info PPPoE connection established from 00:15:AF:1F:23:1A 01:33:40 pppoe,ppp,info : waiting for call... 01:33:40 radius,debug new request 53:0

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread tnt
>I don`t have firewall >How i solve the problem ? Yes, you do. Things like iptables are also firewalls. Use wireshark to find where are packets stopped. And then fix it. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Marinko Tarlac
ping NAS from radius server ping radius server from nas Also, check mtik logs... you can turn on radius debugging in mtik and you will see what is the problem... On Thu, Mar 19, 2009 at 9:42 AM, Fajar A. Nugraha wrote: > 2009/3/19 Lazar Cherveniakov : > > I don`t have firewall > > How i solve t

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Fajar A. Nugraha
2009/3/19 Lazar Cherveniakov : > I don`t have firewall > How i solve the problem ? Does your radius server have more than one IP address? If yes, then probably you tell mikrotik that radius IP is the secondary address while freeradius sends replies from primary IP address. There are some ways to f

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread Lazar Cherveniakov
I don`t have firewall How i solve the problem ? Tanks advanced -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE - Powered by Mail.BG - http://mail.bg - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread tnt
>Sending Access-Accept of id 2 to 192.168.200.4 port 32768 .. >rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, >length=144 >Sending duplicate reply to client TEST-RADIUS:32768 - ID: 2 >Re-sending Access-Accept of id 2 to 192.168.200.4 port 32768 .. >rad_recv: Acces

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread Lazar Cherveniakov
Sorry i`m new mail-list user While tracking installed following instructions http://abills.net.ua/wiki/doku.php?id=abills:docs_03:install:en[1] the all debug log is # radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/p

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread tnt
>I`m new radius user and i`m beginner. >I have problem with connect mikrotik with radius server. >My clients using pppoe server but i have connect to radius server but >after configuration from internet documentation my server don`t work >and i receive errors in radius.log and pppoe server show

freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread Lazar Cherveniakov
Hello, I`m new radius user and i`m beginner. I have problem with connect mikrotik with radius server. My clients using pppoe server but i have connect to radius server but after configuration from internet documentation my server don`t work and i receive errors in radius.log and pppoe server

Re: 802.1x Auth Problem - Windows Login case sensitive?

2009-03-10 Thread tnt
>I have quite a interesting problem. And I don't think it's >freeRADIUS-related You are correct. It's an AD problem. Something is wrong with the schema for those imported accounts. SAM-Account-Name should be of the type ADSTYPE_OCTET_STRING (case insensitive unicode string). Ivan Kalik Kalik Info

802.1x Auth Problem - Windows Login case sensitive?

2009-03-10 Thread cn
Hi List, I have quite a interesting problem. And I don't think it's freeRADIUS-related, but I hope somebody else already had the same issue and can give me a hint. Also a hint where to dig / ask would be very nice... Okay, the setup: I'm using freeRADIUS aus 802.1x/PEAP authenticator for our WLA

Auth problem with password

2008-04-09 Thread Mendel Mathieu
Hi, First sorry for my english... So we have a freeradius server and we have a problem of authentification. Sometimes we received in the log this kind of password if the user try to relog 2 or 3 times the log was successful but sometimes it don't work at all. For exemple : Auth: Login incorrec

Re: an intermittant PAP auth problem

2007-11-07 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > we use nagios to monitor our freeradius install. this is using > the adv_radius_check plugin to check from the nagios servers a > user on the freeradius server (in the users file), the following > are the succinct details ... > okay. so the user authentication tests fine

an intermittant PAP auth problem

2007-11-07 Thread A . L . M . Buxey
hi, we use nagios to monitor our freeradius install. this is using the adv_radius_check plugin to check from the nagios servers a user on the freeradius server (in the users file), the following are the succinct details users file entry nagios-user Huntgroup-Name == "nagios", Cleartext-Password

Re: Auth Problem !

2006-06-19 Thread Leandro Pereira de Lima e Silva - ViaLink
Emerson, change log_auth to yes in radiusd.conf Best regards, Leandro Brasil! =D Emerson escreveu: Hi, i have a freeradius 1.1.1 running in slack-10.1 My radius client is a Access Point wl-5460AP, auth with WPA working with Enterprise (Radius), in ports 1812/1813 with correct secret, but

Auth Problem !

2006-06-19 Thread Emerson
Hi, i have a freeradius 1.1.1 running in slack-10.1 My radius client is a Access Point wl-5460AP, auth with WPA working with Enterprise (Radius), in ports 1812/1813 with correct secret, but when i try to authenticate in this AP, i configure my PC with this configuration and it auth. But in m

RE: RE:[Auth Problem] FreeRADIUS with GnuGK and ATA

2006-01-12 Thread ByoungJu Jeon
"ByoungJu Jeon" <[EMAIL PROTECTED]> wrote: When authorization, RADIUS set Auth-Type as CHAP. (In the log, you can see "rlm_chap: Setting 'Auth-Type := CHAP'".) But when authentication, RADIUS set Auth-Type as Reject. (In the log, you can see "rad_check_password: Found Auth-Type Reject".) I don

[Auth Problem] FreeRADIUS with GnuGK and ATA

2006-01-12 Thread ByoungJu Jeon
Hi, I am now in using FreeRADIUS 1.0.5 with ATA 188 v3.1.2 and GunGK 2.2.2_4 on FreeBSD 6.0. When GnuGK send Access Request for ATA, RADIUS reject it. You can check the log from FreeRADIUS as below. When authorization, RADIUS set Auth-Type as CHAP. (In the log, you can see "rlm_chap: Settin

Re: [Auth Problem] FreeRADIUS with GnuGK and ATA

2006-01-11 Thread Alan DeKok
"ByoungJu Jeon" <[EMAIL PROTECTED]> wrote: > When authorization, RADIUS set Auth-Type as CHAP. (In the log, you can see > "rlm_chap: Setting 'Auth-Type := CHAP'".) But when authentication, RADIUS > set Auth-Type as Reject. (In the log, you can see "rad_check_password: > Found Auth-Type Reject".

[Auth Problem] FreeRADIUS with GnuGK and ATA

2006-01-11 Thread ByoungJu Jeon
Hi, I am now in using FreeRADIUS 1.0.5 with ATA 188 v3.1.2 and GunGK 2.2.2_4 on FreeBSD 6.0. When GnuGK send Access Request for ATA, RADIUS reject it. You can check the log from FreeRADIUS as below. When authorization, RADIUS set Auth-Type as CHAP. (In the log, you can see "rlm_chap: Settin

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-08 Thread Alan DeKok
Gandalf the Gray <[EMAIL PROTECTED]> wrote: > I would like to submit user and password to my LDAP > server, and this one have to check the right > relationship! LDAP is a database, not an authentication server. FreeRADIUS is an authentication server. > Now: is it possible to tell MSCHAP to u

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-08 Thread Gandalf the Gray
thanks for the help until now! I have another problem on freeradius, related to PEAP. The MSCHAP module needs a couple user-pw to perform authentication... and in the radiusd log I can read that is not possible to retrieve a NT-password or NL-password. But I don't want to use such thing (I read

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-05 Thread Alan DeKok
Gandalf the Gray <[EMAIL PROTECTED]> wrote: > I checked and set a single IP address on my freeradius > server. > But it seems always the same result... > this is my log by radiusd -X: ... Which shows that the client is sending a duplicate request to the server. i.e. the client is probably never

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-05 Thread Gandalf the Gray
I changed the settings of the AP, allowing Aironet Extensions and the result is a little different, now TLS is performed, but it still doesn't work fine... rad_recv: Access-Request packet from host 192.168.127.36:21646, id=158, length=145 User-Name = "fresh" Framed-MTU = 1400

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-05 Thread Gandalf the Gray
--- Alan DeKok <[EMAIL PROTECTED]> wrote: > Gandalf the Gray <[EMAIL PROTECTED]> wrote: > > It seems no EAP-challenge is really going on. > > this is the output from tre radius server after a > try > > made by AEGIS client under windows XP, with PEAP > > MSCHAPv2. > > The AEGIS client works w

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-04 Thread Alan DeKok
Gandalf the Gray <[EMAIL PROTECTED]> wrote: > It seems no EAP-challenge is really going on. > this is the output from tre radius server after a try > made by AEGIS client under windows XP, with PEAP > MSCHAPv2. The AEGIS client works with FreeRADIUS. What the debug log shows Is that the clien

EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-04 Thread Gandalf the Gray
I forgot to explain the real problem! I cannot authenticate any user, try to connect to my network through a supplicant, both from Windows and from WPA-supplicant under Linux. It seems no EAP-challenge is really going on. this is the output from tre radius server after a try made by AEGIS client

EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-04 Thread Gandalf the Gray
I forgot to explain the real problem! I cannot authenticate any user, try to connect to my network through a supplicant, both from Windows and from WPA-supplicant under Linux. It seems no EAP-challenge is really going on. this is the output from tre radius server after a try made by AEGIS client

EAP-TTLS and PEAP auth problem

2005-07-04 Thread Gandalf the Gray
Hi, I'm new on this mailing list, please help me clearly. I need to build a Wireless-net based on Freeradius as authentication server, a Cisco aironet 1200 AP, and WPA with TKIP encryption. I need to use TTLS or PEAP, for they allow users to don't user their own certificates, to make connection a

Re: Cisco SIP auth problem

2005-05-09 Thread Alan DeKok
Abdul Lateef <[EMAIL PROTECTED]> wrote: > xpgk-sip-auth4=b493b44cd7875041c11b92e638f74b2d > > But the Radius is not responding for this request and > the log apearing > SecurityDenial <> Posting the same message multiple times, and ignoring a previous answer is rude. Go ask your NAS vendor

Cisco SIP auth problem

2005-05-08 Thread Abdul Lateef
Hello, I am trying to register Cisco SIP nas using MySql db. But i could not. the cisco log is syaing : SecurityDenial Here is the format our cisco AccessRequest format: Cisco VSA( 1): xpgk-sip-auth4=b493b44cd7875041c11b92e638f74b2d But the Radius is not responding for this request and the lo

Re: WLAN auth problem

2005-04-12 Thread Emil Wilmanski
I have that problem... Now I set MACAUTH feature in chillispot and auth my clients using MAC but I dont know what about WPA sequrity in this feature... I just haven't test it yet. Dnia 12-04-2005, wto o godzinie 03:26 -0700, silvia troselj napisał(a): > Hi, > > I have set up hotspot with radius a

WLAN auth problem

2005-04-12 Thread silvia troselj
Hi, I have set up hotspot with radius authentication (AP connected to freeradius server) and everything works fine with clients that connect with wlan cards (PCI od PCMCIA). Problem is when client connecting with AP in client mode. How can such user be authenticated with freeradius? Thanks, Troky

RE: Auth problem (freeradius+mysql)

2005-04-01 Thread Miles Mawyer
?   ... Miles Mawyer -=- Webmaster . Centralva.net ... From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Gao Sent: Friday, April 01, 2005 11:31 AM To: 'freeradius-users@lists.freeradius.org' Subject: Auth problem (freeradius+mysql) H

Auth problem (freeradius+mysql)

2005-04-01 Thread Brian Gao
Title: Auth problem (freeradius+mysql) Hi, I have freeradius and mysql installed on my debian box, both of them are working fine. But when I run command:  radtest testing password localhost 17 radius I got the messages like: Sending Access-Request of id 129 to 127.0.0.1:1812     User

Re: LDAP Auth Problem

2004-12-27 Thread Alan DeKok
Mathias =?ISO-8859-1?Q?R=F6hl?= <[EMAIL PROTECTED]> wrote: > > Since you are sending EAP, you should uncomment eap in both the > > authorization and authentication section. See what that does for you. > > > I did this, but now there's no output and of course, no authentication > or authorization.

Re: LDAP Auth Problem

2004-12-27 Thread Mathias Röhl
Hi DD, thx for the fast reply > Since you are sending EAP, you should uncomment eap in both the > authorization and authentication section. See what that does for you. > I did this, but now there's no output and of course, no authentication or authorization. May be I must edit the users

Re: LDAP Auth Problem

2004-12-27 Thread Dustin Doris
> Hi > > I tried to run fr with LDAP and MYSQL. It works with EAP/TLS fine, but > with local Auth in the users file. > Now I added into radiusd.conf > > -- > authorize { > # > #preprocess > #chap > #mschap > #auth_log >

LDAP Auth Problem

2004-12-27 Thread Mathias Röhl
Hi I tried to run fr with LDAP and MYSQL. It works with EAP/TLS fine, but with local Auth in the users file. Now I added into radiusd.conf -- authorize { # #preprocess #chap #mschap #auth_log ldap #eap

Re: pppoe auth problem

2004-11-01 Thread Joel n.solanki
Uh Silly Mistake. I didnt take my tea today morning. Thanks vipul / Alan Dekok Regards, On Mon, 2004-11-01 at 18:56, Vipul Ramani wrote: > HI joe > > Well can u check out with u 1st table > mysql> select * from radcheck; > ++++---

Re: pppoe auth problem

2004-11-01 Thread Alan DeKok
"Joel n.solanki" <[EMAIL PROTECTED]> wrote: > mysql> select * from radcheck; > ++--+---+++ > | id | UserName | Attribute | op | Value | > ++--+---+++ > | 1 | d2v | d2v123| == | d2vdy | > | 2 | joel | jo

Re: pppoe auth problem

2004-11-01 Thread Vipul Ramani
HI joe Well can u check out with u 1st table mysql> select * from radcheck; ++++--+--+ | id | UserName | Attribute | Value| Op | ++++--+

pppoe auth problem

2004-11-01 Thread Joel n.solanki
Dear all, I have configured pppoe+ mysql with free-radius. Now i have used the sql file camed along with free-radius source. this is the file freeradius-0.9.2/src/modules/rlm_sql/drivers/rlm_sql_mysql/db_mysql.sql Now i made the database according to told by this document http://www.frontios.com

Re: Freeradius 1.0 + Cisco 2950 + PAM auth problem

2004-08-31 Thread Alan DeKok
Bartek Boczkaja <[EMAIL PROTECTED]> wrote: > I have Freeradius 1.0 running on Linux. Users file contains only "Default > Auth-Type = PAM", Clients file contains my whole subnet. I'd like to use it > for 802.1x authentication with Cisco 2950 switch. It's impossible. PAM needs a clear-text pass

Freeradius 1.0 + Cisco 2950 + PAM auth problem

2004-08-31 Thread Bartek Boczkaja
Hi all, I have Freeradius 1.0 running on Linux. Users file contains only "Default Auth-Type = PAM", Clients file contains my whole subnet. I'd like to use it for 802.1x authentication with Cisco 2950 switch. Radius config is OK - radtest launched from a server, using Cisco switch's secret key wor

Re: post-auth problem

2004-07-23 Thread Andrea Gabellini
At 23.44 22/07/2004, you wrote: Andrea Gabellini <[EMAIL PROTECTED]> wrote: > But If I reject the request via the rlm_perl module (returning > RLM_MODULE_REJECT) I can't see anything. > > In debug mode the server doesn't execute the post-auth module in such > situation. Try using the "Post-Auth-T

Re: post-auth problem

2004-07-22 Thread Alan DeKok
Andrea Gabellini <[EMAIL PROTECTED]> wrote: > But If I reject the request via the rlm_perl module (returning > RLM_MODULE_REJECT) I can't see anything. > > In debug mode the server doesn't execute the post-auth module in such > situation. Try using the "Post-Auth-Type Reject" block in 1.0.0.

post-auth problem

2004-07-22 Thread Andrea Gabellini
Hi, I have a little problem with the post-auth module. If I reject the user from the user file or the sql module setting Auth-Type = Reject, I can see the post-auth module writes to the sql. But If I reject the request via the rlm_perl module (returning RLM_MODULE_REJECT) I can't see anything.

post-auth problem

2004-07-06 Thread Andrea Gabellini
Hi, I have a little problem with the post-auth module. If I reject the user from the user file or the sql module setting Auth-Type = Reject, I can see the the post-auth module writes to the sql. But If I reject the request via the Exec-Program-Wait (with an exit value of 1) or via the rlm_perl m

Re: Solution for Auth-Problem

2004-06-17 Thread Alan DeKok
"Markus Ebel" <[EMAIL PROTECTED]> wrote: > users: Matched DEFAULT at 5 > modcall[authorize]: module "files" returns ok So... what's that DEFAULT? > rlm_chap: Could not find clear text password for user testuser Yup. It couldn't find a password. > It seems that the freeradius can't

Re: Solution for Auth-Problem

2004-06-17 Thread Thor Spruyt
. - Original Message - From: "Markus Ebel" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 17, 2004 2:52 PM Subject: Solution for Auth-Problem Hi, i tried but i can´t find a solution of my auth-problem. i try to connect to our Ascend Max2000 by

Solution for Auth-Problem

2004-06-17 Thread Markus Ebel
Hi, i tried but i can´t find a solution of my auth-problem. i try to connect to our Ascend Max2000 by a Windows-Client with username and password and i´cant get it working Here is the debug. -- freeradius Debug -- rad_recv: Access-Request packet from host

RE: Auth-Problem

2004-05-21 Thread RH List Account
ay 17, 2004 5:59 AM To: [EMAIL PROTECTED] Subject: Auth-Problem Hi, i´v e got a authentication-problem with a MAX2000 and freeradius. Connetions-profiles configured on freeradius with CLID a working very well. Only those with username and passwort are making trouble: (snip) - List info/subs

Auth-Problem

2004-05-18 Thread Markus Ebel
Hi, i´v e got a authentication-problem with a MAX2000 and freeradius. Connetions-profiles configured on freeradius with CLID a working very well. Only those with username and passwort are making trouble: -- freeradius Debug -- rad_recv: Access-Request packet fro

Auth-Problem

2004-05-17 Thread Markus Ebel
Hi, i´v e got a authentication-problem with a MAX2000 and freeradius. Connetions-profiles configured on freeradius with CLID a working very well. Only those with username and passwort are making trouble: -- freeradius Debug -- rad_recv: Access-Request packet from