Re: EAP/TTLS Auth problem

2012-05-15 Thread Steve Hopps
I was able to get this working, thanks for all your help everyone On Mon, May 14, 2012 at 4:51 PM, alan buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, Well I've been trying to follow the advice here and also what I've found online and in the configs. I attempted to revert to the 'default' config

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
We are using the correct password. There must be something broken causing the passwords not to match. That is what I'm looking for help to determine. On Fri, May 11, 2012 at 3:02 PM, Alan DeKok al...@deployingradius.com wrote: Steve Hopps wrote: I'm trying to use FreeRadius with OpenLDAP for

Re: EAP/TTLS Auth problem

2012-05-14 Thread Phil Mayers
On 14/05/12 15:07, Steve Hopps wrote: We are using the correct password. There must be something broken causing the passwords not to match. That is what I'm looking for help to determine. Send a full debug radiusd -X. The trimmed debug doesn't show enough info. However, at a guess, this line:

Re: EAP/TTLS Auth problem

2012-05-14 Thread Alan DeKok
Steve Hopps wrote: We are using the correct password. You can believe what the server sees. Or you can believe a fantasy. It's that simple. There must be something broken causing the passwords not to match. That is what I'm looking for help to determine. As Phil said, post the FULL

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
I'll post the full log. It should be pulling from OpenLDAP. I had to censor the log in a few places, including the IP of the system I'm using to test, which I changed to 6.6.6.6 Thanks for helping me with this. FreeRADIUS Version 2.1.10, for host x86_64-pc-linux-gnu, built on Nov 14 2010 at

Re: EAP/TTLS Auth problem

2012-05-14 Thread Alan DeKok
Steve Hopps wrote: I'll post the full log. It should be pulling from OpenLDAP. I had to censor the log in a few places, including the IP of the system I'm using to test, which I changed to 6.6.6.6 And please check Phil's comment. It is *still* showing this: [pap] Using CRYPT password *

Re: EAP/TTLS Auth problem

2012-05-14 Thread alan buxey
Hi, We are using the correct password. There must be something broken causing the passwords not to match. That is what I'm looking for help to determine. WHERE are you using the correct password? if the client is being given the correct password, then where are the usernames and paswords

Re: EAP/TTLS Auth problem

2012-05-14 Thread Phil Mayers
On 14/05/12 15:58, Steve Hopps wrote: I'll post the full log. It should be pulling from OpenLDAP. I had to It's not. You haven't configured it to do that. Module: Instantiating module ldap from file /etc/freeradius/radiusd.conf ldap { server = localhost port = 389 Ok,

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
Well I've been trying to follow the advice here and also what I've found online and in the configs. I attempted to revert to the 'default' config files for sites-enabled, as this project was dropped in my lap after months of another guy working on it and being frustrated, and I wasn't sure what

Re: EAP/TTLS Auth problem

2012-05-14 Thread alan buxey
Hi, Well I've been trying to follow the advice here and also what I've found online and in the configs. I attempted to revert to the 'default' config files for sites-enabled, as this project was dropped in my lap after months of another guy working on it and being frustrated, and I wasn't

EAP/TTLS Auth problem

2012-05-11 Thread Steve Hopps
I'm trying to use FreeRadius with OpenLDAP for authentication of some Nanostation M2 access points, but have had no luck getting it to work. When using rad_eap_test to experiment, I logged the following: Found Auth-Type = PAP # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel

Re: EAP/TTLS Auth problem

2012-05-11 Thread Alan DeKok
Steve Hopps wrote: I'm trying to use FreeRadius with OpenLDAP for authentication of some Nanostation M2 access points, but have had no luck getting it to work. When using rad_eap_test to experiment, I logged the following: ... [pap] Passwords don't match ++[pap] returns reject Failed to

Re: NTLM Auth Problem

2012-04-24 Thread Ali Majdzadeh
Hi I checked that rlm_mschap converts the CHAP_CHALLENGE from radius packet into other format that used in ntlm_auth. Radius Packet: MS-CHAP-Challenge = 0x7e95c31b02cd054fd1dcacea7c2fb358 Radius –X output for Ntlm_auth: expand: --challenge=%{%{mschap:Challenge}:-00} -

Re: NTLM Auth Problem

2012-04-24 Thread Phil Mayers
On 24/04/12 13:44, Ali Majdzadeh wrote: Hi I checked that rlm_mschap converts the CHAP_CHALLENGE from radius packet into other format that used in ntlm_auth. Radius Packet: MS-CHAP-Challenge = 0x7e95c31b02cd054fd1dcacea7c2fb358 Radius –X output for Ntlm_auth: expand:

Re: NTLM Auth Problem

2012-04-24 Thread Ali Majdzadeh
Yes I did. I also read rlm_mschap sources and dependent libraries. May lead me which section explain this function? 2012/4/24 Phil Mayers p.may...@imperial.ac.uk On 24/04/12 13:44, Ali Majdzadeh wrote: Hi I checked that rlm_mschap converts the CHAP_CHALLENGE from radius packet into

Re: NTLM Auth Problem

2012-04-24 Thread Ali Majdzadeh
متأسفانه فرستادم... 2012/4/24 Ali Majdzadeh ali.majdza...@gmail.com Yes I did. I also read rlm_mschap sources and dependent libraries. May lead me which section explain this function? 2012/4/24 Phil Mayers p.may...@imperial.ac.uk On 24/04/12 13:44, Ali Majdzadeh wrote: Hi I checked

Re: NTLM Auth Problem

2012-04-24 Thread Alan DeKok
Ali Majdzadeh wrote: Yes I did. I also read rlm_mschap sources and dependent libraries. May lead me which section explain this function? We did. The RFC's are clear. The source code in rlm_mschap is clear. This list is about FreeRADIUS. It is *not* the place to learn how MS-CHAP

Re: NTLM Auth Problem

2012-04-24 Thread Phil Mayers
On 24/04/12 15:48, Ali Majdzadeh wrote: Yes I did. I also read rlm_mschap sources and dependent libraries. May lead me which section explain this function? I'm sorry, I don't understand you. This discussion has become off-topic for this list. I'm afraid you are going to have to work this

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-17 Thread Gerald Krause
Am 16.04.2012 22:40, schrieb Matthew Newton: On Mon, Apr 16, 2012 at 10:00:03PM +0200, Gerald Krause wrote: Please use 2.1.12. It's better. I'll check that suggestion. In the moment this is a plain apt-get install/update/upgrade Debian box that comes with 2.1.10 (don't blame me...) but

Re: NTLM Auth Problem

2012-04-16 Thread Phil Mayers
On 04/15/2012 09:51 PM, Ali Majdzadeh wrote: Hi Tnx for Ur fast reply. As I explained, I know that the format is differ from the original attributes. I want to know that: If I want to run it from commandline, how can I convert the challenge and response attributes to which they can be used in

post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Gerald Krause
Hi, after upgrading our server from 2.0.4 to 2.1.10 we see a change in the auth logic - e.g. when processing proxied requests to a home server and their replies. We need this feature to append some special attributes to the accept-packet from the home server before sending it to the NAS. 1) Our

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Alan DeKok
Gerald Krause wrote: after upgrading our server from 2.0.4 to 2.1.10 Please use 2.1.12. It's better. we see a change in the auth logic - e.g. when processing proxied requests to a home server and their replies. We need this feature to append some special attributes to the accept-packet

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Gerald Krause
Am 16.04.2012 21:22, schrieb Alan DeKok: Gerald Krause wrote: after upgrading our server from 2.0.4 to 2.1.10 Please use 2.1.12. It's better. I'll check that suggestion. In the moment this is a plain apt-get install/update/upgrade Debian box that comes with 2.1.10 (don't blame me...) but

Re: post-auth problem after update from 2.0.4 to 2.1.10

2012-04-16 Thread Matthew Newton
On Mon, Apr 16, 2012 at 10:00:03PM +0200, Gerald Krause wrote: Please use 2.1.12. It's better. I'll check that suggestion. In the moment this is a plain apt-get install/update/upgrade Debian box that comes with 2.1.10 (don't blame me...) but maybe I'am going to install freeradius from

Re: NTLM Auth Problem

2012-04-15 Thread Ali Majdzadeh
Hi Tnx for Ur fast reply. As I explained, I know that the format is differ from the original attributes. I want to know that: If I want to run it from commandline, how can I convert the challenge and response attributes to which they can be used in command line? In other word, I want to use

Re: NTLM Auth Problem

2012-04-15 Thread Alan DeKok
Ali Majdzadeh wrote: As I explained, I know that the format is differ from the original attributes. I want to know that: If I want to run it from commandline, how can I convert the challenge and response attributes to which they can be used in command line? You read the MS-CHAP RFCs, and

NTLM Auth Problem

2012-04-14 Thread Ali Majdzadeh
Hi I’m using FreeRadius 2.1.12 wih mschap and ntlm_auth external execution module as follows: ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}

Re: NTLM Auth Problem

2012-04-14 Thread Phil Mayers
with radius –X , I saw that the challenge and response is differ from that I got in auth_log in same session. So if I run ntlm_auth with new values, it’s OK! what’s wrong? Freeradius processes the mschapv2 challenge into a different format required by samba. There's nothing wrong. This is

Auth Problem

2012-02-03 Thread Fazal Ahmed Malik
Dear List, I have been using Freeradius for couple of years. Freeradius is installed on FreeBSD with mpd. All is working fine with Mac based Calling-station. I have problem with one username. With that particular user nothing works I mean he can bypass password, expiration and

Re: Auth Problem

2012-02-03 Thread Alan DeKok
Fazal Ahmed Malik wrote: I have been using Freeradius for couple of years. Freeradius is installed on FreeBSD with mpd. All is working fine with Mac based Calling-station. I have problem with one username. With that particular user nothing works I mean he can bypass password, expiration and

RE: Auth Problem

2012-02-03 Thread Fazal Ahmed Malik
[mailto:freeradius-users-bounces+fam=solacetel@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, February 03, 2012 9:17 PM To: FreeRadius users mailing list Subject: Re: Auth Problem Fazal Ahmed Malik wrote: I have been using Freeradius for couple of years. Freeradius is installed

Re: AD Auth - problem with some chars in user's DN

2010-06-12 Thread Alan DeKok
Nelson Vale wrote: The user's DN is OK now (no extra characters), but the ldap authentication still doesn't work. I think the problem is that double quotes must be escaped before sent to AD. OK. In my fix in rlm_ldap (test purpose only), I did just that before assigning the

Re: AD Auth - problem with some chars in user's DN

2010-06-09 Thread Alan DeKok
Nelson Vale wrote: Sorry, the problem occurs only with the (double quotes) character and not to the other two characters. Try re-building from git.freeradius.org, branch v2.1.x. There's a fix which should help. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: AD Auth - problem with some chars in user's DN

2010-06-09 Thread Nelson Vale
2010/6/9 Alan DeKok al...@deployingradius.com Nelson Vale wrote: Sorry, the problem occurs only with the (double quotes) character and not to the other two characters. Try re-building from git.freeradius.org, branch v2.1.x. There's a fix which should help. The user's DN is OK now

AD Auth - problem with some chars in user's DN

2010-06-07 Thread Nelson Vale
Hi all, I've recently found a problem authenticating some users in AD (2003) when the user's Distinguish Names have one or more of the following characters: ' ` (double quotes, apostrophe or grave accent), using freeradius 2.0.2 and 2.1.9 versions: ... [ldap] login attempt by johndoe with

Re: AD Auth - problem with some chars in user's DN

2010-06-07 Thread Nelson Vale
Sorry, the problem occurs only with the (double quotes) character and not to the other two characters. 2010/6/7 Nelson Vale nelsonduv...@gmail.com Hi all, I've recently found a problem authenticating some users in AD (2003) when the user's Distinguish Names have one or more of the

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-20 Thread orion
i had the same problem when i wanted to authenticate the hotspot`s user with freeradius. the solution was to make a static mapping on IP - HOTSPOT - IP BINDINGS MAC address : THE MAC OF THE SERVER ADDRESS : THE IP ADDRESS OF THE SERVER TO ADDRESS : THE SAME AS ABOVE SERVER : ALL

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Lazar Cherveniakov
I don`t have firewall How i solve the problem ? Tanks advanced -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE - Powered by Mail.BG - http://mail.bg - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Fajar A. Nugraha
2009/3/19 Lazar Cherveniakov laz...@mail.bg: I don`t have firewall How i solve the problem ? Does your radius server have more than one IP address? If yes, then probably you tell mikrotik that radius IP is the secondary address while freeradius sends replies from primary IP address. There are

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Marinko Tarlac
ping NAS from radius server ping radius server from nas Also, check mtik logs... you can turn on radius debugging in mtik and you will see what is the problem... On Thu, Mar 19, 2009 at 9:42 AM, Fajar A. Nugraha fa...@fajar.net wrote: 2009/3/19 Lazar Cherveniakov laz...@mail.bg: I don`t have

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread tnt
I don`t have firewall How i solve the problem ? Yes, you do. Things like iptables are also firewalls. Use wireshark to find where are packets stopped. And then fix it. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Lazar Cherveniakov
Everything looks fine in IP addresses, but the problem is still the same. Here again the log of Mikrotik and freeradius: Mikrotik debug log 01:33:40 pppoe,info PPPoE connection established from 00:15:AF:1F:23:1A 01:33:40 pppoe,ppp,info pppoe-0: waiting for call... 01:33:40 radius,debug new

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread tnt
Everything looks fine in IP addresses, but the problem is still the same. No, it's not looking fine. Mikrotik debug log . has no trace of Access-Accept packet - it didn't arrive. Here again the log of Mikrotik and freeradius: Stop looking at the logs and start looking at the network. Ivan

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread tnt
The machines are connected to cable and on 2 meters, in this case where to find the problem? What and how to get to see where the real problem? Wireshark. If you see packets on the wire - Mikrotik is stopping it. If you don't see them on the wire - radius machine is stopping them. Ivan Kalik

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Fajar A. Nugraha
2009/3/19 Lazar Cherveniakov laz...@mail.bg: Everything looks fine in IP addresses, but the problem is still the same. Looks like you got exactly the problem I described. See here : Mikrotik debug log 01:33:40 radius,debug sending 53:02 to 192.168.200.2:1812 Mikrotik thinks radius IP is

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-19 Thread Lazar Cherveniakov
The machines are connected to cable and on 2 meters, in this case where to find the problem? What and how to get to see where the real problem? -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE - Powered by Mail.BG - http://mail.bg - List

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread tnt
I`m new radius user and i`m beginner. I have problem with connect mikrotik with radius server. My clients using pppoe server but i have connect to radius server but after configuration from internet documentation my server don`t work and i receive errors in radius.log and pppoe server show 691

freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread Lazar Cherveniakov
Hello, I`m new radius user and i`m beginner. I have problem with connect mikrotik with radius server. My clients using pppoe server but i have connect to radius server but after configuration from internet documentation my server don`t work and i receive errors in radius.log and pppoe

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread Lazar Cherveniakov
Sorry i`m new mail-list user While tracking installed following instructions http://abills.net.ua/wiki/doku.php?id=abills:docs_03:install:en[1] the all debug log is # radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file:

Re: freeradius and mikrotik auth problem pppoe error 691

2009-03-18 Thread tnt
Sending Access-Accept of id 2 to 192.168.200.4 port 32768 .. rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, length=144 Sending duplicate reply to client TEST-RADIUS:32768 - ID: 2 Re-sending Access-Accept of id 2 to 192.168.200.4 port 32768 .. rad_recv:

802.1x Auth Problem - Windows Login case sensitive?

2009-03-10 Thread cn
Hi List, I have quite a interesting problem. And I don't think it's freeRADIUS-related, but I hope somebody else already had the same issue and can give me a hint. Also a hint where to dig / ask would be very nice... Okay, the setup: I'm using freeRADIUS aus 802.1x/PEAP authenticator for our

Re: 802.1x Auth Problem - Windows Login case sensitive?

2009-03-10 Thread tnt
I have quite a interesting problem. And I don't think it's freeRADIUS-related You are correct. It's an AD problem. Something is wrong with the schema for those imported accounts. SAM-Account-Name should be of the type ADSTYPE_OCTET_STRING (case insensitive unicode string). Ivan Kalik Kalik

Auth problem with password

2008-04-09 Thread Mendel Mathieu
Hi, First sorry for my english... So we have a freeradius server and we have a problem of authentification. Sometimes we received in the log this kind of password if the user try to relog 2 or 3 times the log was successful but sometimes it don't work at all. For exemple : Auth: Login

an intermittant PAP auth problem

2007-11-07 Thread A . L . M . Buxey
hi, we use nagios to monitor our freeradius install. this is using the adv_radius_check plugin to check from the nagios servers a user on the freeradius server (in the users file), the following are the succinct details users file entry nagios-user Huntgroup-Name == nagios, Cleartext-Password

Re: an intermittant PAP auth problem

2007-11-07 Thread Alan DeKok
[EMAIL PROTECTED] wrote: we use nagios to monitor our freeradius install. this is using the adv_radius_check plugin to check from the nagios servers a user on the freeradius server (in the users file), the following are the succinct details ... okay. so the user authentication tests fine with

Auth Problem !

2006-06-19 Thread Emerson
Hi, i have a freeradius 1.1.1 running in slack-10.1 My radius client is a Access Point wl-5460AP, auth with WPA working with Enterprise (Radius), in ports 1812/1813 with correct secret, but when i try to authenticate in this AP, i configure my PC with this configuration and it auth. But in

Re: Auth Problem !

2006-06-19 Thread Leandro Pereira de Lima e Silva - ViaLink
Emerson, change log_auth to yes in radiusd.conf Best regards, Leandro Brasil! =D Emerson escreveu: Hi, i have a freeradius 1.1.1 running in slack-10.1 My radius client is a Access Point wl-5460AP, auth with WPA working with Enterprise (Radius), in ports 1812/1813 with correct secret, but

[Auth Problem] FreeRADIUS with GnuGK and ATA

2006-01-12 Thread ByoungJu Jeon
Hi, I am now in using FreeRADIUS 1.0.5 with ATA 188 v3.1.2 and GunGK 2.2.2_4 on FreeBSD 6.0. When GnuGK send Access Request for ATA, RADIUS reject it. You can check the log from FreeRADIUS as below. When authorization, RADIUS set Auth-Type as CHAP. (In the log, you can see rlm_chap:

RE: RE:[Auth Problem] FreeRADIUS with GnuGK and ATA

2006-01-12 Thread ByoungJu Jeon
ByoungJu Jeon [EMAIL PROTECTED] wrote: When authorization, RADIUS set Auth-Type as CHAP. (In the log, you can see rlm_chap: Setting 'Auth-Type := CHAP'.) But when authentication, RADIUS set Auth-Type as Reject. (In the log, you can see rad_check_password: Found Auth-Type Reject.) I don't know

Re: [Auth Problem] FreeRADIUS with GnuGK and ATA

2006-01-11 Thread Alan DeKok
ByoungJu Jeon [EMAIL PROTECTED] wrote: When authorization, RADIUS set Auth-Type as CHAP. (In the log, you can see rlm_chap: Setting 'Auth-Type := CHAP'.) But when authentication, RADIUS set Auth-Type as Reject. (In the log, you can see rad_check_password: Found Auth-Type Reject.) I don't

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-08 Thread Gandalf the Gray
thanks for the help until now! I have another problem on freeradius, related to PEAP. The MSCHAP module needs a couple user-pw to perform authentication... and in the radiusd log I can read that is not possible to retrieve a NT-password or NL-password. But I don't want to use such thing (I read

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-08 Thread Alan DeKok
Gandalf the Gray [EMAIL PROTECTED] wrote: I would like to submit user and password to my LDAP server, and this one have to check the right relationship! LDAP is a database, not an authentication server. FreeRADIUS is an authentication server. Now: is it possible to tell MSCHAP to use

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-05 Thread Gandalf the Gray
--- Alan DeKok [EMAIL PROTECTED] wrote: Gandalf the Gray [EMAIL PROTECTED] wrote: It seems no EAP-challenge is really going on. this is the output from tre radius server after a try made by AEGIS client under windows XP, with PEAP MSCHAPv2. The AEGIS client works with FreeRADIUS.

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-05 Thread Gandalf the Gray
I changed the settings of the AP, allowing Aironet Extensions and the result is a little different, now TLS is performed, but it still doesn't work fine... rad_recv: Access-Request packet from host 192.168.127.36:21646, id=158, length=145 User-Name = fresh Framed-MTU = 1400

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-05 Thread Alan DeKok
Gandalf the Gray [EMAIL PROTECTED] wrote: I checked and set a single IP address on my freeradius server. But it seems always the same result... this is my log by radiusd -X: ... Which shows that the client is sending a duplicate request to the server. i.e. the client is probably never

EAP-TTLS and PEAP auth problem

2005-07-04 Thread Gandalf the Gray
Hi, I'm new on this mailing list, please help me clearly. I need to build a Wireless-net based on Freeradius as authentication server, a Cisco aironet 1200 AP, and WPA with TKIP encryption. I need to use TTLS or PEAP, for they allow users to don't user their own certificates, to make connection

EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-04 Thread Gandalf the Gray
I forgot to explain the real problem! I cannot authenticate any user, try to connect to my network through a supplicant, both from Windows and from WPA-supplicant under Linux. It seems no EAP-challenge is really going on. this is the output from tre radius server after a try made by AEGIS client

EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-04 Thread Gandalf the Gray
I forgot to explain the real problem! I cannot authenticate any user, try to connect to my network through a supplicant, both from Windows and from WPA-supplicant under Linux. It seems no EAP-challenge is really going on. this is the output from tre radius server after a try made by AEGIS client

Re: EAP-TTLS and PEAP auth problem ... sorry!!

2005-07-04 Thread Alan DeKok
Gandalf the Gray [EMAIL PROTECTED] wrote: It seems no EAP-challenge is really going on. this is the output from tre radius server after a try made by AEGIS client under windows XP, with PEAP MSCHAPv2. The AEGIS client works with FreeRADIUS. What the debug log shows Is that the client is

Re: Cisco SIP auth problem

2005-05-09 Thread Alan DeKok
Abdul Lateef [EMAIL PROTECTED] wrote: xpgk-sip-auth4=b493b44cd7875041c11b92e638f74b2d But the Radius is not responding for this request and the log apearing SecurityDenial null Posting the same message multiple times, and ignoring a previous answer is rude. Go ask your NAS vendor what

Cisco SIP auth problem

2005-05-08 Thread Abdul Lateef
Hello, I am trying to register Cisco SIP nas using MySql db. But i could not. the cisco log is syaing : SecurityDenial Here is the format our cisco AccessRequest format: Cisco VSA( 1): xpgk-sip-auth4=b493b44cd7875041c11b92e638f74b2d But the Radius is not responding for this request and the

WLAN auth problem

2005-04-12 Thread silvia troselj
Hi, I have set up hotspot with radius authentication (AP connected to freeradius server) and everything works fine with clients that connect with wlan cards (PCI od PCMCIA). Problem is when client connecting with AP in client mode. How can such user be authenticated with freeradius? Thanks,

Re: WLAN auth problem

2005-04-12 Thread Emil Wilmanski
I have that problem... Now I set MACAUTH feature in chillispot and auth my clients using MAC but I dont know what about WPA sequrity in this feature... I just haven't test it yet. Dnia 12-04-2005, wto o godzinie 03:26 -0700, silvia troselj napisa(a): Hi, I have set up hotspot with radius

Auth problem (freeradius+mysql)

2005-04-01 Thread Brian Gao
Title: Auth problem (freeradius+mysql) Hi, I have freeradius and mysql installed on my debian box, both of them are working fine. But when I run command: radtest testing password localhost 17 radius I got the messages like: Sending Access-Request of id 129 to 127.0.0.1:1812 User-Name

RE: Auth problem (freeradius+mysql)

2005-04-01 Thread Miles Mawyer
?   ... Miles Mawyer -=- Webmaster . Centralva.net ... From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Gao Sent: Friday, April 01, 2005 11:31 AM To: 'freeradius-users@lists.freeradius.org' Subject: Auth problem (freeradius+mysql) Hi, I have

LDAP Auth Problem

2004-12-27 Thread Mathias Röhl
Hi I tried to run fr with LDAP and MYSQL. It works with EAP/TLS fine, but with local Auth in the users file. Now I added into radiusd.conf -- authorize { # #preprocess #chap #mschap #auth_log ldap #eap

Re: LDAP Auth Problem

2004-12-27 Thread Dustin Doris
Hi I tried to run fr with LDAP and MYSQL. It works with EAP/TLS fine, but with local Auth in the users file. Now I added into radiusd.conf -- authorize { # #preprocess #chap #mschap #auth_log ldap

Re: LDAP Auth Problem

2004-12-27 Thread Mathias Röhl
Hi DD, thx for the fast reply Since you are sending EAP, you should uncomment eap in both the authorization and authentication section. See what that does for you. I did this, but now there's no output and of course, no authentication or authorization. May be I must edit the users

Re: LDAP Auth Problem

2004-12-27 Thread Alan DeKok
Mathias =?ISO-8859-1?Q?R=F6hl?= [EMAIL PROTECTED] wrote: Since you are sending EAP, you should uncomment eap in both the authorization and authentication section. See what that does for you. I did this, but now there's no output and of course, no authentication or authorization.

pppoe auth problem

2004-11-01 Thread Joel n.solanki
Dear all, I have configured pppoe+ mysql with free-radius. Now i have used the sql file camed along with free-radius source. this is the file freeradius-0.9.2/src/modules/rlm_sql/drivers/rlm_sql_mysql/db_mysql.sql Now i made the database according to told by this document

Re: pppoe auth problem

2004-11-01 Thread Vipul Ramani
HI joe Well can u check out with u 1st table mysql select * from radcheck; ++++--+--+ | id | UserName | Attribute | Value| Op |

Re: pppoe auth problem

2004-11-01 Thread Joel n.solanki
Uh Silly Mistake. I didnt take my tea today morning. Thanks vipul / Alan Dekok Regards, On Mon, 2004-11-01 at 18:56, Vipul Ramani wrote: HI joe Well can u check out with u 1st table mysql select * from radcheck;

Freeradius 1.0 + Cisco 2950 + PAM auth problem

2004-08-31 Thread Bartek Boczkaja
Hi all, I have Freeradius 1.0 running on Linux. Users file contains only Default Auth-Type = PAM, Clients file contains my whole subnet. I'd like to use it for 802.1x authentication with Cisco 2950 switch. Radius config is OK - radtest launched from a server, using Cisco switch's secret key

Re: Freeradius 1.0 + Cisco 2950 + PAM auth problem

2004-08-31 Thread Alan DeKok
Bartek Boczkaja [EMAIL PROTECTED] wrote: I have Freeradius 1.0 running on Linux. Users file contains only Default Auth-Type = PAM, Clients file contains my whole subnet. I'd like to use it for 802.1x authentication with Cisco 2950 switch. It's impossible. PAM needs a clear-text password

Re: post-auth problem

2004-07-23 Thread Andrea Gabellini
At 23.44 22/07/2004, you wrote: Andrea Gabellini [EMAIL PROTECTED] wrote: But If I reject the request via the rlm_perl module (returning RLM_MODULE_REJECT) I can't see anything. In debug mode the server doesn't execute the post-auth module in such situation. Try using the Post-Auth-Type

Re: post-auth problem

2004-07-22 Thread Alan DeKok
Andrea Gabellini [EMAIL PROTECTED] wrote: But If I reject the request via the rlm_perl module (returning RLM_MODULE_REJECT) I can't see anything. In debug mode the server doesn't execute the post-auth module in such situation. Try using the Post-Auth-Type Reject block in 1.0.0. Alan

post-auth problem

2004-07-06 Thread Andrea Gabellini
Hi, I have a little problem with the post-auth module. If I reject the user from the user file or the sql module setting Auth-Type = Reject, I can see the the post-auth module writes to the sql. But If I reject the request via the Exec-Program-Wait (with an exit value of 1) or via the rlm_perl

Solution for Auth-Problem

2004-06-17 Thread Markus Ebel
Hi, i tried but i can´t find a solution of my auth-problem. i try to connect to our Ascend Max2000 by a Windows-Client with username and password and i´cant get it working Here is the debug. -- freeradius Debug -- rad_recv: Access-Request packet from host

Re: Solution for Auth-Problem

2004-06-17 Thread Thor Spruyt
. - Original Message - From: Markus Ebel [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, June 17, 2004 2:52 PM Subject: Solution for Auth-Problem Hi, i tried but i can´t find a solution of my auth-problem. i try to connect to our Ascend Max2000 by a Windows-Client with username

Re: Solution for Auth-Problem

2004-06-17 Thread Alan DeKok
Markus Ebel [EMAIL PROTECTED] wrote: users: Matched DEFAULT at 5 modcall[authorize]: module files returns ok So... what's that DEFAULT? rlm_chap: Could not find clear text password for user testuser Yup. It couldn't find a password. It seems that the freeradius can't read the

RE: Auth-Problem

2004-05-21 Thread RH List Account
, 2004 5:59 AM To: [EMAIL PROTECTED] Subject: Auth-Problem Hi, i´v e got a authentication-problem with a MAX2000 and freeradius. Connetions-profiles configured on freeradius with CLID a working very well. Only those with username and passwort are making trouble: (snip) - List info/subscribe

Auth-Problem

2004-05-18 Thread Markus Ebel
Hi, i´v e got a authentication-problem with a MAX2000 and freeradius. Connetions-profiles configured on freeradius with CLID a working very well. Only those with username and passwort are making trouble: -- freeradius Debug -- rad_recv: Access-Request packet