Re: freeradius with PEAP configuration

2010-02-09 Thread Alan DeKok
dev nath wrote: > I am trying to authenticate Xsupplicant (open1x) through freeradius > using EAP-PEAP-MSCHAPv2 configs. TLS initial connection was successful > but MSCHAP-v2 authentication was not initiating (Xsupplicant returned > TLS application packet not decrypted). Knowing the real error m

freeradius with PEAP configuration

2010-02-09 Thread dev nath
Hi, I am trying to authenticate Xsupplicant (open1x) through freeradius using EAP-PEAP-MSCHAPv2 configs. TLS initial connection was successful but MSCHAP-v2 authentication was not initiating (Xsupplicant returned TLS application packet not decrypted). PLEASE HELP with correct freeradius config

Re: freeRADIUS with PEAP doesn't authenticate WinXp supplicant

2007-06-12 Thread A . L . M . Buxey
Hi, > rlm_eap: EAP Identity > rlm_eap: No such EAP type mschapv2 > rlm_eap: Failed in EAP select > modcall[authenticate]: module "eap" returns invalid for request 5 > modcall: leaving group authenticate (returns invalid) for request 5 > auth: Failed to validate the user. > PEAP: Tunneled authe

Re: freeRADIUS with PEAP doesn't authenticate WinXp supplicant

2007-06-12 Thread Alan Dekok
Apangshu Saha wrote: > Dear All, > I am using winxp as supplicant and configured every possible configuration > files of freeRADIUS to support PEAP. You are very clearly NOT following the documentation, and NOT following the suggestions on this list. > plz see the following log file and help me

freeRADIUS with PEAP doesn't authenticate WinXp supplicant

2007-06-12 Thread Apangshu Saha
Dear All, I am using winxp as supplicant and configured every possible configuration files of freeRADIUS to support PEAP. But still the log file in server shows like following: and the client doesnot authenticated. whatshould i do in Winxp supplicantat the time of connection it shows to enter

Re: cisco ap350(WLAN) vs freeradius with PEAP

2006-05-08 Thread Alan DeKok
"Gabor Szelei" <[EMAIL PROTECTED]> wrote: > My last state is the client has been authenticated, but no traffinc is > going through. > > Does anyone have a working config for Cisco350 with PEAP? I've used a Cisco AP350 before without problems. I started off with the default config, and added

cisco ap350(WLAN) vs freeradius with PEAP

2006-05-08 Thread Gabor Szelei
Hi, Ive been trying to get $subject working. My last state is the client has been authenticated, but no traffinc is going through. Does anyone have a working config for Cisco350 with PEAP? What kindof reply is CISCO expecting from radius? br, Gabor Szelei - List info/subscribe/unsubscribe?

Re: FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP?

2006-01-18 Thread Phil Mayers
domain trusts behave as expected and NDS can extract either the plaintext or NT password hash. Let us know how you get on! I hope that makes some sense. Many thanks, Jezz Palmer. -Original Message- From: freeradius-users- [EMAIL PROTECTED] [mailto:freeradius-users- [EMAIL PROTEC

Re: FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP?

2006-01-18 Thread masetio
i'm using freeradius-snapshot-20060115 i have error  -->Tue Jan 17 19:56:34 2006 : Error: rlm_sql: Failed to create the pair: Unknown attribute "1"Tue Jan 17 19:56:34 2006 : Error: rlm_sql (sql): Error getting data from databas eTue Jan 17 19:56:34 2006 : Error: rlm_sql (sql): SQL query error; reje

RE: FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP?

2006-01-18 Thread Palmer J.D.F.
n Behalf Of Phil > Mayers > Sent: 17 January 2006 21:03 > To: FreeRadius users mailing list > Subject: Re: FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP? > > Palmer J.D.F. wrote: > > Hi, > > > > > > > > I am currently trying to create a new auth system for our

Re: FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP?

2006-01-17 Thread Phil Mayers
Palmer J.D.F. wrote: Hi, I am currently trying to create a new auth system for our WPA 802.1x WiFi network. Thus far I have the server authenticating using PEAP(MSCHAPv2) against a users file containing a simple test user/pass pair. What I would now like to do is use MySQL to contain us

FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP?

2006-01-17 Thread Palmer J.D.F.
Hi,   I am currently trying to create a new auth system for our WPA 802.1x WiFi network. Thus far I have the server authenticating using PEAP(MSCHAPv2) against a users file containing a simple test user/pass pair. What I would now like to do is use MySQL to contain user data such as th

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
From: [EMAIL PROTECTED] on behalf of Alan DeKok Sent: Mon 1/2/2006 5:57 PM To: FreeRadius users mailing list Subject: Re: FreeRADIUS with PEAP problems "Alhagie Puye" <[EMAIL PROTECTED]> wrote: > Here is exactly what my eap.conf file

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Title: Re: FreeRADIUS with PEAP problems   From: [EMAIL PROTECTED] on behalf of Alhagie PuyeSent: Mon 1/2/2006 3:43 PMTo: FreeRadius users mailing listSubject: RE: FreeRADIUS with PEAP problems   From: [EMAIL PROTECTED] on behalf of Alan DeKokSent: Mon 1/2/2006 2:28 PMTo

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Alan DeKok
"Alhagie Puye" <[EMAIL PROTECTED]> wrote: > Here is exactly what my eap.conf file looks like (I have removed every = > line that is commented) ... > tls { ... > peap { > default_eap_type =3D mschapv2 > } So you didn't just

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Title: Re: FreeRADIUS with PEAP problems   From: [EMAIL PROTECTED] on behalf of Alan DeKokSent: Mon 1/2/2006 2:28 PMTo: FreeRadius users mailing listSubject: Re: FreeRADIUS with PEAP problems Thanks Alan for the reply. The "peap" section was already uncommented.   Here

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Alan DeKok
"Alhagie Puye" <[EMAIL PROTECTED]> wrote: > rlm_eap: Loaded and initialized type tls > rlm_eap: No such sub-type for default EAP type peap Try reading eap.conf, and uncommenting the "peap" section. I'm not sure how to make that error message more descriptive, or update the comments in eap.con

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Title: Re: FreeRADIUS with PEAP problems I went ahead and recompiled from source and also used the --disable-shared options.   It is not core-dumping but PEAP is still failing though   Here is a complete debug output as you requested:   freebsd# radiusd -X -AStarting - reading

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Zoltan A. Ori
On Monday 02 January 2006 07:34, Alhagie Puye wrote: > rlm_eap: No such sub-type for default EAP type peap Bus >error (core > dumped) bash-2.05b# I take it all back. It shouldn't have dumped core. I looked right over that. Zoltan Ori - List info/subscribe/unsubscribe? See http://www.freeradius.

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Zoltan A. Ori
On Monday 02 January 2006 07:34, Alhagie Puye wrote: > > >Do you have > > > > > > peap { > > > default_eap_type = mschapv2 > > > } > > > > > >in your eap.conf? > > Yes, I do. And, was MSCHAP instantiated? A complete debug output might help since the problem may begin

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
58 AM > >To: FreeRadius users mailing list > >Subject: Re: FreeRADIUS with PEAP problems > > > >On Monday 02 January 2006 06:32, Alhagie Puye wrote: > > > >> rlm_eap: Loaded and initialized type tls > >> rlm_eap: No such sub-type for default EAP type pe

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Zoltan A. Ori
On Monday 02 January 2006 06:32, Alhagie Puye wrote: > rlm_eap: Loaded and initialized type tls > rlm_eap: No such sub-type for default EAP type peap > Bus error (core dumped) > bash-2.05b# > Do you have peap { default_eap_type = mschapv2 } in your eap.c

FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Hello all, I am trying to configure FreeRADIUS with PEAP support. Here are my specs: OS: FreeBSD 5.4 OpenSSL: version 0.9.7d FreeRADIUS: 1.0.5 I have tested the configuration with EAP/TLS and it works just fine however, when I change "default_eap_type = tls" to "default_eap_type

Re: freeradius with peap/mschapv2 and mysql

2005-05-26 Thread Alan DeKok
"Pico Geyer" <[EMAIL PROTECTED]> wrote: > Is my configuration for dialup-admin wrong? I can't authenticate with > these settings. You should be able to configure dialup_admin to store passwords in clear-text. > Is it possible to store encrypted passwords for mschapv2. It won't work. Alan

freeradius with peap/mschapv2 and mysql

2005-05-26 Thread Pico Geyer
Hi all. I'm new to radius configuration so please be patient if I'm missing some basic concept. I using freeradius for authentication with a Linksys wrt54g wireless router. I'm using EAP-PEAP for an outer layer authentication mechanism and mschapv2 for the inner layer authentication. I am able to

Re: Testing and/or monitoring freeradius with PEAP

2005-02-01 Thread Alan DeKok
Bob McCormick <[EMAIL PROTECTED]> wrote: > I'd love to know that myself. It was my understanding also that > radeapclient could only do EAP-MD5. I'd desperately love to find a > command line peap or EAP-TTLS client. The closest thing is xsupplicant. It should be *possible* to hack it to turn

Re: Testing and/or monitoring freeradius with PEAP

2005-02-01 Thread Bob McCormick
I'd love to know that myself. It was my understanding also that radeapclient could only do EAP-MD5. I'd desperately love to find a command line peap or EAP-TTLS client. On Tue, 25 Jan 2005 15:06:33 +0100 (CET), [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Ron Wahler schrieb: > > There is a t

Re: Testing and/or monitoring freeradius with PEAP

2005-01-25 Thread Stefan . Neis
Ron Wahler schrieb: > There is a test tool to send an eap request to the > radius Server with a test user. > You could send a test authentication > Off every so often with a script to monitor it's status. Is that "radeapclient" you're referring to? Well, I understood how to make it send an EAP-MD5

RE: Testing and/or monitoring freeradius with PEAP

2005-01-24 Thread Ron Wahler
D] On Behalf Of Bob McCormick Sent: Monday, January 24, 2005 9:34 AM To: freeradius-users@lists.freeradius.org Subject: Testing and/or monitoring freeradius with PEAP I've got freeradius setup to authenticate wireless clients with PEAP/MSCHAP (to an Active Directory backend) and now I'm lo

Testing and/or monitoring freeradius with PEAP

2005-01-24 Thread Bob McCormick
I've got freeradius setup to authenticate wireless clients with PEAP/MSCHAP (to an Active Directory backend) and now I'm looking for a way to test/monitor the radius server. Ideally, I'd like to do something like radtest, but test either PEAP or at least the MSCHAP authentication portion. Does an

Re: Freeradius with PEAP (EAP-MSCHAP v2) Problems

2004-10-07 Thread Khurram Jahangir
Hi Again, Sorry it was my mistake and i changed the the eap.conf file back (the brackets were messed up actually) and now it is working fine. Thanks for your help. I found this mailing list to be very useful. Regards //khurram --- Alan DeKok <[EMAIL PROTECTED]> wrote: > Khurram Jahangir <[EMA

Re: Freeradius with PEAP (EAP-MSCHAP v2) Problems

2004-10-07 Thread Alan DeKok
Khurram Jahangir <[EMAIL PROTECTED]> wrote: > I still did not change the eap.conf file as I am not > sure where exactly to add "default_eap_type = peap". Uh, no. I told you what was wrong, and how to fix it. > As you suggested in your last message, I should do > "peap" and "mschapv2" inside of

Re: Freeradius with PEAP (EAP-MSCHAP v2) Problems

2004-10-07 Thread Khurram Jahangir
Hi Alan, Thanks alot for your reply. I really appreciate that and it was a great help for me. I took off the Auth-Type := MS-CHAP from the user bob and also changed the configuration in the HP switch (aaa authentication port-access eap-radius). I think I have moved now one step further as I am n

Re: Freeradius with PEAP (EAP-MSCHAP v2) Problems

2004-10-07 Thread Alan DeKok
Khurram Jahangir <[EMAIL PROTECTED]> wrote: > I am a new user on this mailing list and I am facing > some problems while trying to use PEAP and freeradius. Ok... > modcall: entering group Auth-Type for request 8 > rlm_mschap: No MS-CHAP-Challenge in the request You set "Auth-Type := MS-CHA

Freeradius with PEAP (EAP-MSCHAP v2) Problems

2004-10-07 Thread Khurram Jahangir
Hello Everyone, I am a new user on this mailing list and I am facing some problems while trying to use PEAP and freeradius. The freeradius version that I am using is 1.0.1. The client is a windows XP machine with SP 2. The authenticator is an HP 2524 switch. The error that I get is this one -

Re: Freeradius with PEAP

2004-10-05 Thread Alan DeKok
Technical Support <[EMAIL PROTECTED]> wrote: > I am looking to configure freeradius to support PEAP..so that my > wireless users can use 802.1x in Win XP to obtain a secure connection. > I am little confused (I have to admit I am a Radius novice) regarding > this..Basically, I want the users to use

Re: Freeradius with PEAP

2004-10-05 Thread Michael Schwartzkopff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Dienstag, 5. Oktober 2004 09:29 schrieb Technical Support: > Hello! > > I am looking to configure freeradius to support PEAP..so that my > wireless users can use 802.1x in Win XP to obtain a secure connection. > I am little confused (I have to admit

Freeradius with PEAP

2004-10-05 Thread Technical Support
Hello! I am looking to configure freeradius to support PEAP..so that my wireless users can use 802.1x in Win XP to obtain a secure connection. I am little confused (I have to admit I am a Radius novice) regarding this..Basically, I want the users to use the username/password (stored in the radius

Re: Freeradius with PEAP

2004-06-01 Thread Alan DeKok
"Peter M. Geiser" <[EMAIL PROTECTED]> wrote: > i want to use Freeradius with PEAP. > Have compiled and configured the newest Package available from > freeradius.org (1.0.0-pre1). > When i start the Daemon it will die with the following error: ... > freeradius

Freeradius with PEAP

2004-06-01 Thread Peter M. Geiser
Hello, i want to use Freeradius with PEAP. Have compiled and configured the newest Package available from freeradius.org (1.0.0-pre1). When i start the Daemon it will die with the following error: *** Tue Jun 1 10:31:35 2004 : Debug: radiusd: entering modules setup Tue Jun 1 10:31:35 2004

Re: Re: got freeradius with PEAP to compile on Redhat 9.0

2004-01-08 Thread Marcel Wiget
forgot to mention. Its not an issue for the server but with Redhat 9.0. Redhat seems to have either obscure or wrong settings in their included opensslconf.h file. Marcel Alan DeKok wrote: >Marcel Wiget <[EMAIL PROTECTED]> wrote: >> I successfully used current freeradius for several months for

Re: got freeradius with PEAP to compile on Redhat 9.0

2004-01-03 Thread Alan DeKok
Marcel Wiget <[EMAIL PROTECTED]> wrote: > I successfully used current freeradius for several months for 802.1x > authentication (TTLS, TLS and PEAP) on debian based systems but had > trouble compiling it on Redhat 9.0. Finally I dived into the issue and > found the cause to be opensslconf.h on r

got freeradius with PEAP to compile on Redhat 9.0

2004-01-03 Thread Marcel Wiget
I successfully used current freeradius for several months for 802.1x authentication (TTLS, TLS and PEAP) on debian based systems but had trouble compiling it on Redhat 9.0. Finally I dived into the issue and found the cause to be opensslconf.h on redhat. Here's the patch that makes it possible