FreeRADIUS + OpenLDAP + Daloradius

2013-08-19 Thread Mantas Šiurkus
Hello, I am creating WIFI hotspot on Debian 7. I had configured FreeRADIUS to work with OpenLDAP for users authentication. How I can configure Daloradius for user control? All tutorials that I found, shows how to configure it with mysql, but my users are stored into LDAP (not mysql). Is it

Re: FreeRADIUS + OpenLDAP for Wireless authentication

2013-05-23 Thread Mantas Šiurkus
On 05/23/2013 01:02 AM, Alan DeKok wrote: Mantas Šiurkus wrote: I uncommented two lines in freeradius/modules/ldap That helps. [ldap] userPassword - Password-With-Header == pass123 That's not the standard format for a password. However... if you're doing to store plain-text

FreeRADIUS + OpenLDAP for Wireless authentication

2013-05-22 Thread Mantas Šiurkus
Hello, I have configured FreeRADIUS to work with OpenLDAP. Created user in OpenLDAP. Radtest from localhost works perfect. But I can't connect from other devices (android phone, etc..). In logs I get: [ldap] No default NMAS login sequence [ldap] looking for check items in directory... [ldap]

Re: FreeRADIUS + OpenLDAP for Wireless authentication

2013-05-22 Thread Alan DeKok
Mantas Šiurkus wrote: I have configured FreeRADIUS to work with OpenLDAP. Created user in OpenLDAP. Radtest from localhost works perfect. But I can't connect from other devices (android phone, etc..). In logs I get: [ldap] No default NMAS login sequence [ldap] looking for check items in

Re: FreeRADIUS + OpenLDAP for Wireless authentication

2013-05-22 Thread A . L . M . Buxey
Hi, I have configured FreeRADIUS to work with OpenLDAP. Created user in OpenLDAP. Radtest from localhost works perfect. But I can't connect from other devices (android phone, etc..). In logs I get: how is the password stored in the LDAP? what authentication methods (eg EAP type) are you

Re: FreeRADIUS + OpenLDAP for Wireless authentication

2013-05-22 Thread Mantas Šiurkus
On 2013.05.22 21:13, Alan DeKok wrote: Mantas Šiurkus wrote: I have configured FreeRADIUS to work with OpenLDAP. Created user in OpenLDAP. Radtest from localhost works perfect. But I can't connect from other devices (android phone, etc..). In logs I get: [ldap] No default NMAS login sequence

Re: FreeRADIUS + OpenLDAP for Wireless authentication

2013-05-22 Thread Alan DeKok
Mantas Šiurkus wrote: I uncommented two lines in freeradius/modules/ldap That helps. [ldap] userPassword - Password-With-Header == pass123 That's not the standard format for a password. However... if you're doing to store plain-text passwords in LDAP, you can edit raddb/ldap.attrmap.

Problem with freeradius + openldap for AP authentication

2012-11-26 Thread Nicolas Lathiere
Hiya I need some help to configure freeradius with openldap. I have a ldap database which stores password in SSHA format, so i choose PAP for authentication. I want to use freeradius to authenticate on a netgear Wifi access point.

Re: Problem with freeradius + openldap for AP authentication

2012-11-26 Thread Michael Schwartzkopff
Hiya I need some help to configure freeradius with openldap. I have a ldap database which stores password in SSHA format, so i choose PAP for authentication. I want to use freeradius to authenticate on a netgear Wifi access point.

Re: FreeRadius/OpenLdap

2012-06-20 Thread akkouche
.nabble.com/FreeRadius-OpenLdap-tp5713846p5713854.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius/OpenLdap

2012-06-20 Thread akkouche
it is I need to replace or Replacing User-Password in config items with cleartext-Password? in the LDAP directory or file in LDAP freeradius - kahina akkouche -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRadius-OpenLdap-tp5713846p5713855.html Sent from

Re: FreeRadius/OpenLdap

2012-06-20 Thread alan buxey
Hi, or is the problem, I'm on it for a while and I can not find, thank you for your help I look. User-Name = toto User-Password = q4\277Kj\016deЭ\227\225\016\204b\033 look. that isnt right - that would have the real password. you have incorrect shared secret. look at the full

Re: FreeRadius/OpenLdap

2012-06-20 Thread Alan DeKok
akkouche wrote: or is the problem, I'm on it for a while and I can not find, thank you for your help I look. Then you haven't tried. At all. And don't send messages to me off-list. I'm not your personal tech support. WARNING: Unprintable characters in the password. Double-check

Re: FreeRadius/OpenLdap

2012-06-20 Thread akkouche
This is the same as I used LDAP and password are stored in MD5. - kahina akkouche -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRadius-OpenLdap-tp5713846p5713858.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See

Re: FreeRadius/OpenLdap

2012-06-20 Thread Matthew Newton
Hi, On Wed, Jun 20, 2012 at 01:53:13AM -0700, akkouche wrote: here are the logs User-Name = toto User-Password = q4\277Kj\016deЭ\227\225\016\204b\033 ... On Wed, Jun 20, 2012 at 05:27:58AM -0700, akkouche wrote: the request is: User-Name = toto User-Password =

Re: FreeRadius/OpenLdap

2012-06-20 Thread Alan DeKok
Matthew Newton wrote: How many people need to tell you? I've banned nabble.com from the list. They can no longer subscribe. The number of *good* questions from nabble is very low. The number of *terrible* questions is very large. Most people using nabble can't seen to understand the most

Re: FreeRadius/OpenLdap

2012-06-20 Thread akkouche
nor is the same in the client.conf file and pass it in the request is pass - kahina akkouche -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRadius-OpenLdap-tp5713846p5713860.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info

Re: FreeRadius/OpenLdap

2012-06-20 Thread akkouche
no is the same in the client.conf file and pass it in the request is pass - kahina akkouche -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRadius-OpenLdap-tp5713846p5713861.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info

Re: FreeRadius/OpenLdap

2012-06-20 Thread alan buxey
Hi, no is the same in the client.conf file and pass it in the request is pass if you say that the secret is the same in the client.conf file as it is in the NAS then there are 2 options 1) the NAS or client is buggy 2) you are editing the wrong client.conf - look at the debug file and see

FreeRadius/OpenLdap

2012-06-19 Thread akkouche
-tsp,dc=eu/tK�O�?�?v?3:)5�8 to 127.0.0.1:389 [ldap] waiting for bind result ... the password in LDAP is encoded in MD5 - kahina akkouche -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRadius-OpenLdap-tp5713846.html Sent from the FreeRadius - User mailing list

Re: FreeRadius/OpenLdap

2012-06-19 Thread alan buxey
Hi, ldap] login attempt by toto with password tK�O�?�?v?3:)5�8 weird characters - incorrect shared secret ? have you read ALL the debug output? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FreeRadius OpenLDAP TTLS/PAP

2012-06-14 Thread akkouche
I try to configure FreeRadius / OpenLDAP with a method of TTLS / PAP. but it does not work. how to do. thank you Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 41586, id=30, length=56 User-Name = toto User-Password = \267\002n\235W\270=\207\343\327U

Re: FreeRadius OpenLDAP TTLS/PAP

2012-06-14 Thread akkouche
-- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRadius-OpenLDAP-TTLS-PAP-tp5713750p5713751.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius openldap config help please

2012-06-08 Thread Steven Pokrandt
I have the following versions @(#) $OpenLDAP: slapd 2.4.21 (Dec 19 2011 15:40:04) $ buildd@allspice:/build/buildd/openldap-2.4.21/debian/build/servers/slapd freeradius: FreeRADIUS Version 2.1.8, for host x86_64-pc-linux-gnu, built on Jan 5 2010 at 02:56:18 I'm trying to import the ldif

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-21 Thread Matthew Arguin
requests. On 11/3/2011 2:40 PM, freeradius-users-requ...@lists.freeradius.org wrote: cisco WAP/FreeRadius/OpenLDAP -- Matthew Arguin Currensee, Inc. 54 Canal St, 4th Floor Boston, MA 02114 (617) 986-4758 (Office) _ This email

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-21 Thread Alan DeKok
Matthew Arguin wrote: so it took me a while, but i finally tracked down a MAC to continue troubleshooting...at this point windows machines can login with RAIDUS auth... below is the output from an attempt with a MAC: Can you READ the output? Or paste the output into the debug tool web page

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-03 Thread Matthew Arguin
sorry about the snipped debug. i am attaching another fresh one here. there are no users in the files on the computer, all in LDAP so the shadow file should not be an issue. I will find the 'unix' part and comment it out. -m full debug below frm windows machine attempt: [root@ops2 ~]#

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-02 Thread Matthew Arguin
at freeradius-users-ow...@lists.freeradius.org When replying, please edit your Subject line so it is more specific than Re: Contents of Freeradius-Users digest... Today's Topics: 1. Re: IPv6 ready? (Alan Buxey) 2. Re: cisco WAP/FreeRadius/OpenLDAP (Alan Buxey) 3. Re: add field

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-02 Thread Matthew Arguin
edit your Subject line so it is more specific than Re: Contents of Freeradius-Users digest... Today's Topics: 1. Re: IPv6 ready? (Alan Buxey) 2. Re: cisco WAP/FreeRadius/OpenLDAP (Alan Buxey) 3. Re: add field in radcheck table (gary) 4. Re: add field in radcheck table (Fajar

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-02 Thread Matthew Arguin
with Freeradius and 802.1X (johnboy68) 3. Re: Huntgroup Checking (Ben West) 4. Re: cisco WAP/FreeRadius/OpenLDAP (Matthew Arguin) 5. Re: Need help with Freeradius and 802.1X (Alan Buxey) 6. Re: Need help with Freeradius and 802.1X (Alan DeKok

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-02 Thread Phil Mayers
On 02/11/11 15:41, Matthew Arguin wrote: and here is the debug when i test a laptop connecting: Sigh. This is not the full debug. The full debug starts when radiusd starts up, and dumps the module configs. This is why we never ask people to give their configs - it's in the debug, and is

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-02 Thread Alan Buxey
hi, that user is in the /etc/password or /etc/shadow file? the unix module is picking it up..and that password doesnt match the one you're tryin to use...which matches the username/password you added into the users file? alan - List info/subscribe/unsubscribe? See

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-02 Thread Alan Buxey
Hi, something else i just found radtest only seems to work from localhost.. the option in radtest is the TARGET you are talking to. so, you can talk to 127.0.0.1 but you cant talk to 192.168.10.31what does 'radiusd -X' show? do you have any firewalling? alan - List

Re: cisco WAP/FreeRadius/OpenLDAP

2011-11-02 Thread Alan DeKok
Alan Buxey wrote: that user is in the /etc/password or /etc/shadow file? the unix module is picking it up..and that password doesnt match the one you're tryin to use...which matches the username/password you added into the users file? His system has passwords in /etc/shadow, and he hasn't

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-31 Thread Matthew Arguin
Phil, I just confirmed that it is tagged with the {CRYPT} or {SHA} (i have tried both). also, i changed the user that is binding to be the manager CN which has full access to the ldap for mod etc to rule that out. [ldap] performing user authorization for marguin2 [ldap] expand: (uid=%u) -

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-31 Thread Phil Mayers
On 31/10/11 14:03, Matthew Arguin wrote: Phil, I just confirmed that it is tagged with the {CRYPT} or {SHA} (i have tried both). also, i changed the user that is binding to be the manager CN which has full access to the ldap for mod etc to rule that out. Ah. I've just seen that you are running

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-31 Thread Matthew Arguin
at freeradius-users-ow...@lists.freeradius.org When replying, please edit your Subject line so it is more specific than Re: Contents of Freeradius-Users digest... Today's Topics: 1. Re: cisco WAP/FreeRadius/OpenLDAP (Phil Mayers) 2. RE: IPv6 ready? (Sergio NNX) 3. Re: IPv6 ready? (Phil

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-31 Thread Alan Buxey
Hi, so now the password is not clear text in the log as it was before but still seeing that no good password errorbut then there is that line towards the bottom that sasys user authorized to use remote access... do i need to configure Filter-Id or something in the sites-enabled/default

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-28 Thread Phil Mayers
On 10/27/2011 10:32 PM, Matthew Arguin wrote: Thanks Phil. question on that. in the deployment of ldap that we have in place the users password attribute is 'userPassword'. looking at the ldap attribute file and various online results, is the authentication looking for ntPassword for that ldap

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-28 Thread Matthew Arguin
right now, the user that i am testing with has a password that is CRYPT. I am fairly certain that my user that i am binding with has the perms to read the userPassword attribute, but i will verify that this morning. On 10/28/2011 4:37 AM, freeradius-users-requ...@lists.freeradius.org wrote:

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-28 Thread Phil Mayers
On 28/10/11 13:46, Matthew Arguin wrote: right now, the user that i am testing with has a password that is CRYPT. Ok. But does it look like this: userPassword: xxyyeeyeetwe or this: userPassword: {crypt}xxyyeqetew This matters. - List info/subscribe/unsubscribe? See

cisco WAP/FreeRadius/OpenLDAP

2011-10-27 Thread Matt Arguin
Hi All, having trouble setting up my RADIUS(FreeRADIUS Version 2.1.7) to auth to my openldap server (openldap-2.3.43-12.el5_6.7) on CentOS 5.5. i am trying to configure EAP-TLS and think i am pretty close. I am currently wondering if possibly i have an incorrect mapping in the ldap.attrs file

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-27 Thread Alan DeKok
Matt Arguin wrote: having trouble setting up my RADIUS(FreeRADIUS Version 2.1.7) to auth to my openldap server (openldap-2.3.43-12.el5_6.7) on CentOS 5.5. i am trying to configure EAP-TLS Then you don't need LDAP. EAP-TLS does authentication based on client certificates. It doesn't

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-27 Thread Matt Arguin
Dimmig)   6. Re: cisco WAP/FreeRadius/OpenLDAP (Alan DeKok) -- Message: 1 Date: Thu, 27 Oct 2011 10:37:28 -0700 (PDT) From: JennyBlunt jennyshoeh...@me.com Subject: Custom MySQL Queries To: freeradius-users

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-27 Thread Phil Mayers
On 10/27/2011 06:31 PM, Matt Arguin wrote: Hi All, having trouble setting up my RADIUS(FreeRADIUS Version 2.1.7) to auth to my openldap server (openldap-2.3.43-12.el5_6.7) on CentOS 5.5. i am trying to configure EAP-TLS and think i am pretty close. I am Nope: [eap] EAP/peap [eap]

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-27 Thread Matthew Arguin
...@lists.freeradius.org wrote: Re: cisco WAP/FreeRadius/OpenLDAP -- Matthew Arguin Currensee, Inc. 54 Canal St, 4th Floor Boston, MA 02114 (617) 986-4758 (Office) _ This email and any files transmitted with it are confidential and intended

Re: cisco WAP/FreeRadius/OpenLDAP

2011-10-27 Thread Fajar A. Nugraha
On Fri, Oct 28, 2011 at 4:32 AM, Matthew Arguin matt.arg...@currensee.com wrote: Thanks Phil.  question on that.  in the deployment of ldap that we have in place the users password attribute is 'userPassword'.  looking at the ldap attribute file and various online results, is the authentication

Re: Documentation about Freeradius + Openldap

2011-08-25 Thread Alejandro Gandara
Hi Alan DeKok, Thanks for your answer and your patience. Ive read what you said and I will apply it as better as i can. regards, Alejandro Gándara Álvarez 2011/8/24 Alan DeKok al...@deployingradius.com Alejandro Gandara wrote: We need to learn how assign IP or HOSTNAME ACCESS LIST to a

Documentation about Freeradius + Openldap

2011-08-24 Thread Alejandro Gandara
Hi list, Im new in this list and implementig Freeradius. Im installing and configuring Freeradius 2.1.10 over Linux Debian Squeeze. We have designed a quite difficult architecture to authenticate users. I've been looking for many hours for advance and specific documentation to manage freeradius,

Re: Documentation about Freeradius + Openldap

2011-08-24 Thread Alan DeKok
Alejandro Gandara wrote: Im new in this list and implementig Freeradius. Im installing and configuring Freeradius 2.1.10 over Linux Debian Squeeze. We have designed a quite difficult architecture to authenticate users. I've been looking for many hours for advance and specific documentation

Re: Documentation about Freeradius + Openldap

2011-08-24 Thread Alejandro Gandara
Hi, Thanks for your answer. For exemple: We need to learn how assign IP or HOSTNAME ACCESS LIST to a user taken from ldap. assing Static IP or Dinamic IP to a user or group taken from ldap. integrate this with Openvpn with freeradiusplugin. know if a profile is stored in a

Re: Documentation about Freeradius + Openldap

2011-08-24 Thread Alan DeKok
Alejandro Gandara wrote: We need to learn how assign IP or HOSTNAME ACCESS LIST to a user taken from ldap. assing Static IP or Dinamic IP to a user or group taken from ldap. Read raddb/ldap.attrmap and doc/ldap_howto. The LDAP attributes map to RADIUS attributes, including IP address.

Re: MAC auth bypass with freeradius/openldap

2011-06-22 Thread Phil Mayers
On 06/21/2011 09:53 PM, g17jimmy wrote: I've been looking at this for a day now and it seems like I'm close, but something is not right. I have a freeradius server with an openldap backend for MAC auth bypass. This system is just for test, but it is an essential first step in my project. The

Re: MAC auth bypass with freeradius/openldap

2011-06-22 Thread g17jimmy
. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MAC-auth-bypass-with-freeradius-openldap-tp4511949p4514243.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MAC auth bypass with freeradius/openldap

2011-06-22 Thread g17jimmy
with timestamp +60791 Going to the next request Ready to process requests. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MAC-auth-bypass-with-freeradius-openldap-tp4511949p4514401.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe

Re: MAC auth bypass with freeradius/openldap

2011-06-22 Thread g17jimmy
. Admittedly this is not great security, but this is not going to be the case for long. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MAC-auth-bypass-with-freeradius-openldap-tp4511949p451.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

Re: MAC auth bypass with freeradius/openldap

2011-06-22 Thread Phil Mayers
On Wed, Jun 22, 2011 at 08:23:09AM -0700, g17jimmy wrote: I guess I was too quick to call it, and it looks like the problem is still on the NAS. You will see that the client first gets access using the MAC address as the CSID, but at some point, the client or NAS decieded to re-auth but this

MAC auth bypass with freeradius/openldap

2011-06-21 Thread g17jimmy
. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MAC-auth-bypass-with-freeradius-openldap-tp4511949p4511949.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FreeRADIUS+OpenLDAP integration issue

2011-04-20 Thread pradyumna dash
Hi All, Please help me to fix the below isse. The problem is related to the scenario, where a network server triggers first authentication over Radius and then a freeRadius server makes a LDAP query towards an openLDAP server containing the user password. After the successful authentication

Re: FreeRADIUS+OpenLDAP integration issue

2011-04-20 Thread Alan DeKok
pradyumna dash wrote: Please help me to fix the below isse. Please follow the documentation and post the debug output. It doesn't help to post vague desscriptions of what you *think* mught be happening. It *does* help to post the debug output. Alan DeKok. - List

Re: WLAN - Freeradius - OpenLDAP - VLANs

2009-11-09 Thread José Johnny RANDRIAMAMPIONONA
/file/p26230857/1.jpeg The AP is an Linksys WRT-54-GS and the Switch is an CISCO-2950 -- View this message in context: http://old.nabble.com/WLANFreeradiusOpenLDAPVLANs-tp26230857p26230857.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info

Re: WLAN - Freeradius - OpenLDAP - VLANs

2009-11-09 Thread nf-vale
whth a dynamic VLAN. http://old.nabble.com/file/p26230857/1.jpeg The AP is an Linksys WRT-54-GS and the Switch is an CISCO-2950 -- View this message in context: http://old.nabble.com/WLANFreeradiusOpenLDAPVLANs-tp26230857p 26230857.html Sent from the FreeRadius

Re: WLAN - Freeradius - OpenLDAP - VLANs

2009-11-09 Thread _Stefan_H
is an CISCO-2950 -- View this message in context: http://old.nabble.com/WLANFreeradiusOpenLDAPVLANs-tp26230857p 26230857.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

WLAN - Freeradius - OpenLDAP - VLANs

2009-11-08 Thread _Stefan_H
/WLANFreeradiusOpenLDAPVLANs-tp26230857p26230857.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Freeradius + OpenLdap + WindowsXP(Wifi)

2009-10-15 Thread Ivan Kalik
Previous round trip .. User-Name = kleberl NAS-IP-Address = 192.168.155.123 NAS-Port-Type = Wireless-802.11 State = 0x3cce0b1706ad36054f63eeb5f99e1a66 EAP-Message =

RE: Freeradius + OpenLdap + WindowsXP(Wifi)

2009-10-14 Thread Kleber Larroyd
2009 : Debug: Cleaning up request 8 ID 77 with timestamp 4ad4961d Tue Oct 13 12:00:51 2009 : Debug: Nothing to do. Sleeping until we see a request. From: neal.gar...@energyeast.com To: freeradius-users@lists.freeradius.org Date: Tue, 13 Oct 2009 13:10:08 -0400 Subject: RE: Freeradius + OpenLdap

Re: Freeradius + OpenLdap + WindowsXP(Wifi)

2009-10-14 Thread Alan DeKok
Kleber Larroyd wrote: Previous round trip .. I suggest *reading* the debug log. It's really not hard. Look for words like failed, or reject, or error. The answer IS in the debug log you posted, with a clear message explaining what went wrong. Alan DeKok. - List

Freeradius + OpenLdap + WindowsXP(Wifi)

2009-10-13 Thread Kleber Larroyd
Freeradius 1.1.7 Openldap Windows XP SP2 (WPA-TKIP / Protected EAP (PEAP)) Have any idea ? Where can i find the solution ? When i trying connect freeradius server with wireless over access point i get this error: Tue Oct 13 12:00:45 2009 : Debug: Finished request 7 Tue Oct 13 12:00:45 2009 :

RE: Freeradius + OpenLdap + WindowsXP(Wifi)

2009-10-13 Thread Garber, Neal
Have any idea ? Where can i find the solution ? When i trying connect freeradius server with wireless over access point i get this error: snip Tue Oct 13 12:00:45 2009 : Debug: rlm_eap_peap: Had sent TLV failure. User was rejcted rejected earlier in this session. The error you're

freeradius+openldap+802.1x

2009-09-01 Thread Antonio Andrés Jiménez Cantillo
Hi I am mounting a platform of authentication with freeradius. I have formed freeradius in order that it works with Active Directory. Also I have mounted an openLDAP service, where I realize authentication without 802.1x support. There is some way of forming freeradius+openldap+802.1x

Re: freeradius+openldap+802.1x

2009-09-01 Thread Ivan Kalik
I am mounting a platform of authentication with freeradius. I have formed freeradius in order that it works with Active Directory. Also I have mounted an openLDAP service, where I realize authentication without 802.1x support. There is some way of forming freeradius+openldap+802.1x

Re: Help with Freeradius + OpenLDAP/Samba + 802.1x WLan auth for Windows

2009-04-29 Thread Albrecht Dreß
Am 24.04.09 23:23 schrieb(en) Ivan Kalik: rlm_eap: Identity does not match User-Name, setting from EAP Identity. Username was altered. Got it - Win sends the domain in uppercase, and I had conversion to lowercase enabled. Works fine now. Thanks, Albrecht. pgp85LHExAchz.pgp

Help with Freeradius + OpenLDAP/Samba + 802.1x WLan auth for Windows

2009-04-24 Thread Albrecht Dreß
Hi, sorry if my question is really dumb; I'm new to the list... I run Freeradius 1.1.7 on a Ubuntu 8.04 LTS/x86_64 box, and want to have the following: - Win XP WLan clients authenticate at an WLan access point with 802.1x; - the access points talks to the Freeradius server; - the user

Re: Help with Freeradius + OpenLDAP/Samba + 802.1x WLan auth for Windows

2009-04-24 Thread Ivan Kalik
rlm_eap: Identity does not match User-Name, setting from EAP Identity. Username was altered. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-18 Thread Tim Gustafson
Ok, I've upgraded to FreeRADIUS 2.0.5 on a FreeBSD box (the FreeBSD ports is more up-to-date than the CentOS Yum repositories apparently). However, upon reading the documentation in modules/ldap, I see this: # However, LDAP can be used for authentication ONLY when the # Access-Request packet

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-18 Thread Kenneth Marshall
See: http://deployingradius.com/documents/protocols/oracles.html Ken On Tue, Nov 18, 2008 at 01:29:48PM -0800, Tim Gustafson wrote: Ok, I've upgraded to FreeRADIUS 2.0.5 on a FreeBSD box (the FreeBSD ports is more up-to-date than the CentOS Yum repositories apparently). However, upon

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-18 Thread Alan DeKok
Tim Gustafson wrote: Ok, I've upgraded to FreeRADIUS 2.0.5 on a FreeBSD box (the FreeBSD ports is more up-to-date than the CentOS Yum repositories apparently). However, upon reading the documentation in modules/ldap, I see this: ... So, does this mean that you can't do MSCHAPv2 against an

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-16 Thread Matt Bernstein
On Nov 14 Tim Gustafson wrote: I'm running FreeRADIUS on a shiny-new CentOS 5.2 machine. The easiest way to install the latest FreeRADIUS on CentOS I know of is to visit http://koji.fedoraproject.org/koji/packageinfo?packageID=298, find the latest source RPM and rebuild it. It's a small

FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread Tim Gustafson
Hello, I'm running FreeRADIUS on a shiny-new CentOS 5.2 machine. I'm trying to figure out how to configure FreeRADIUS to authenticate against an OpenLDAP server using MSCHAPv2. I Googled a lot of different phrases, and came up with some things that were mildly helpful. Right now, I have

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread tnt
I'm running FreeRADIUS on a shiny-new CentOS 5.2 machine. I'm trying to figure out how to configure FreeRADIUS to authenticate against an OpenLDAP server using MSCHAPv2. I Googled a lot of different phrases, and came up with some things that were mildly helpful. Right now, I have FreeRADIUS

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread Tim Gustafson
There is nothing to do. It's already active in default configuration. Really? Because the default config seems to want to use ntlm_auth to authenticate mschapv2 users, which is a samba helper designed to authenticate a user against a samba server, not an OpenLDAP server. I'm thinking what I

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread tnt
There is nothing to do. It's already active in default configuration. Really? Because the default config seems to want to use ntlm_auth to authenticate mschapv2 users, which is a samba helper designed to authenticate a user against a samba server, not an OpenLDAP server. ntlm_auth line is

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread Tim Gustafson
ntlm_auth line is commented out by default. Ok, I see that. From what I understand, MSCHAPv2 needs access to the unencrypted user password, and OpenLDAP doesn't offer that. I'm guessing I'll have to add an unencrypted password field to the LDAP server to make this work, but that's not been

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread tnt
ntlm_auth line is commented out by default. Ok, I see that. From what I understand, MSCHAPv2 needs access to the unencrypted user password, and OpenLDAP doesn't offer that. I'm guessing I'll have to add an unencrypted password field to the LDAP server to make this work, but that's not been

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread Tim Gustafson
And so much more (peap is misconfigured, as is ldap, mschap auth type is gone, there is nothing to get the password from ...). That will not work. I have fixed that; the copy that I sent you was indeed broken. I can now authenticate using standard (non-MSCHAP) authentication against the LDAP

Re: FreeRADIUS + OpenLDAP + MSCHAPv2

2008-11-14 Thread Alan DeKok
Tim Gustafson wrote: I have fixed that; the copy that I sent you was indeed broken. I can now authenticate using standard (non-MSCHAP) authentication against the LDAP server. I haven't been able to get the radeapclient program working yet - it keeps crashing with an error that apparently

Re: Freeradius + OpenLDAP

2008-08-13 Thread Alan DeKok
Ivan . wrote: Does any have any links to some decent how tos for integrating OpenLDAP into freeradius for user management? See the comments in the ldap module configuration. Also, see the O'Reilly OpenLDAP book. It has a good discussion of this topic. Alan DeKok. - List

Freeradius + OpenLDAP

2008-08-12 Thread Ivan .
Hi Does any have any links to some decent how tos for integrating OpenLDAP into freeradius for user management? Thanks Ivan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius + OpenLDAP

2008-08-12 Thread Maurizio Cimaschi
Tried to find one, but they are all about the old 1.x version. Having just done a similar configuration I can suggest you to read some of them, most of the information still apply. If you're interested in authenticate wi-fi users there some specific information on the wiki.freeradius.org.

Re: Freeradius + OpenLDAP

2008-08-12 Thread Ivan .
thanks On Tue, Aug 12, 2008 at 5:24 PM, Maurizio Cimaschi [EMAIL PROTECTED] wrote: Tried to find one, but they are all about the old 1.x version. Having just done a similar configuration I can suggest you to read some of them, most of the information still apply. If you're interested in

FreeRadius + OpenLDAP + Router Cisco VPN

2008-06-04 Thread youness hsina
Hi all, sorry for my english ! i want to thank every all the member of this list for help that was given to me already . i'm going o introduce my subject. i configured a Radius server with LDAP and a router CISCO VPN . every thing is works with no problem! i can authentificate from my router cisco

Re: Freeradius + OpenLDAP

2008-05-30 Thread youness hsina
thank you very much Ivan for the site web regards uness, 2008/5/29 Ivan Kalik [EMAIL PROTECTED]: Read about configuring ldap: http://wiki.freeradius.org/Rlm_ldap All the bits in ldap{} section are explaind in more detail than in radiusd.conf file. Ivan Kalik Kalik Informatika ISP Dana

Re: Freeradius + OpenLDAP

2008-05-29 Thread youness hsina
thank you for your response! when i run my server in debugging mode , it seems to work very well! radius# *radiusd -X -A *** Starting - reading configuration files ... reread_config: reading radiusd.conf [...] Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy

Re: Freeradius + OpenLDAP

2008-05-29 Thread Etienne Pretorius
youness hsina wrote: thank you for your response! when i run my server in debugging mode , it seems to work very well! radius# *radiusd -X -A * Starting - reading configuration files ... reread_config: reading radiusd.conf [...] Listening on authentication *:1812 Listening on accounting

Re: Freeradius + OpenLDAP

2008-05-29 Thread youness hsina
Hi Alan thank you for your response, i have already configure an ldap server on other machine . when i run : *#radtest yhsina yhsina localhost 1812 test* i have in the end this error : *radclient: no respone from server for ID 49* ** have you any idea ? regards, uness - List

Re: Freeradius + OpenLDAP

2008-05-29 Thread A . L . M . Buxey
Hi, thank you for your response! when i run my server in debugging mode , it seems to work very well! radius# *radiusd -X -A *** Starting - reading configuration files ... reread_config: reading radiusd.conf [...] Listening on authentication *:1812 Listening on accounting *:1813

Re: Freeradius + OpenLDAP

2008-05-29 Thread Ivan Kalik
Read about configuring ldap: http://wiki.freeradius.org/Rlm_ldap All the bits in ldap{} section are explaind in more detail than in radiusd.conf file. Ivan Kalik Kalik Informatika ISP Dana 29/5/2008, youness hsina [EMAIL PROTECTED] piše: Hi Alan thank you for your response, i have already

Re: FreeRADIUS + OpenLDAP + NAS (it?s make me crazy!!! please HELP)

2008-03-20 Thread Koko Kurniawan
Thank you... now it works and success. but if my client disconnect and reconnect again, now it doesn't need to input user name and password again. It's directly connected .. Is it right??? - Be a better friend, newshound, and know-it-all with Yahoo!

Re: FreeRADIUS + OpenLDAP + NAS (it?s make me crazy!!! please HELP)

2008-03-20 Thread Ivan Kalik
Not really. But Windows XP caches credentials: http://support.microsoft.com/kb/823731 Ivan Kalik Kalik Informatika ISP Dana 20/3/2008, Koko Kurniawan [EMAIL PROTECTED] piše: Thank you... now it works and success. but if my client disconnect and reconnect again, now it doesn't need to input

FreeRADIUS + OpenLDAP + NAS (it�s make me crazy!!!please HELP!!!)

2008-03-19 Thread Koko Kurniawan
Please, help me.. I am confuse why my freeradius server can´t detect the password that i write on the client? I am use OpenLDAP for the database rad_recv: Access-Request packet from host 10.10.53.100:1812, id=76, length=83 User-Name = htrisnadi Framed-MTU = 1400

  1   2   >