Re: Freeradius rlm_pam

2012-02-12 Thread Mark
On Sun, Feb 12, 2012 at 1:34 AM, Alan DeKok wrote: > Mark wrote: >  Then read the comments in raddb/eap.conf.  Look for "gtc".  It > documents how to get GTC working with other methods. Thanks! It wasn't entirely clear to me at first from that documentation how to achieve my goal. But after cha

Re: Freeradius rlm_pam

2012-02-12 Thread Alan Buxey
Hi, Your server is configured with md5 as the default EAP type. The client NAKs that and then goes on to do PEAP. Can your clients do EAP-GTC? another confusion occurs in inner tunnel due to having 2 auth-type entries. Perhaps define a new file/users instance for the inner-tunnel with DEFAULT

Re: Freeradius rlm_pam

2012-02-12 Thread Alan DeKok
Mark wrote: > I'm not able to authenticate my client. I'm trying to use EAP-GTC on > the inner-tunnel. Then read the comments in raddb/eap.conf. Look for "gtc". It documents how to get GTC working with other methods. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.

Re: Freeradius rlm_pam

2012-02-11 Thread Mark
On Sat, Feb 11, 2012 at 3:23 PM, Matthew Newton wrote: > update control { >  Auth-Type := 'pam' > } Thanks! When I run rad-test it successfully returns Access-Accept. I'm not able to authenticate my client. I'm trying to use EAP-GTC on the inner-tunnel. I realize this isn't a very scalable co

Re: Freeradius rlm_pam

2012-02-11 Thread Matthew Newton
On Sat, Feb 11, 2012 at 11:07:36AM -0800, Mark wrote: > Reading the Wiki and previous help responses on this list, I see that > Auth-Type shouldn't have to be forced. Normally, yes - looks like PAM is an exception. http://freeradius.org/radiusd/doc/rlm_pam It only has an authenticate method, so

Freeradius rlm_pam

2012-02-11 Thread Mark
Hello, While my eventual goal is GTC + PAM, I'm struggling to get the innner-tunnel request to successfully authenticate my user through PAM. I've made the following configuration changes from a clean installation of 2.1.12 on a Gentoo Linux system: 1. Added wap to the clients file 2. Put certs