Re: Help needed configuring MAB on FreeRADIUS and Cisco switch

2012-07-13 Thread alan buxey
Hi, you have defined the usual bits eg aaa new-model !

Debug/Freeradius help

2012-07-09 Thread Justin Huckabay
Hello, I'm setting up freeradius for the first time and I am having an issue with the radtest testing password localhost 0 testing123 I am getting radclient: no response from server for ID 2 socket 3 I have ran the freeradius debugging output and below are the 2 highlighted errors it shows as

Re: Debug/Freeradius help

2012-07-09 Thread alan buxey
Hi, I'm setting up freeradius for the first time and I am having an issue with the radtest testing password localhost 0 testing123 I am getting radclient: no response from server for ID 2 socket 3 I have ran the freeradius debugging output and below are the 2 highlighted errors it shows as

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread Stefan Winter
Hi, I am struggling to configure my FreeRADIUS server for eduroam (www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out problem for several years, identifying

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread Scott Armitage
On 28 Jun 2012, at 02:54, Olivier Nicole wrote: Hi, I am struggling to configure my FreeRADIUS server for eduroam (www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread alan buxey
.and for you to add those remote RADIUS servers as clients (clients.conf or NAS table in SQL) so that requests for you can be sent to you. you might want to also look at the eduroam confluence WIKI for help/advice/pointers https://confluence.terena.org/display/H2eduroam/How+to+deploy+eduroam

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread Olivier Nicole
(www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out problem for several years, identifying to an openLdap backend. I managed to configure a test WiFi access point to identify

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread alan buxey
Hi, For some reason, it is working now, I did only tiny changes though. well..you made changes... obviously they were beneficial - the differences between the WiKi https://confluence.terena.org/display/H2eduroam/How+to+deploy+eduroam+on-site+or+on+campus and the cookbook

Help needed to configure FreeRADIUS for eduroam

2012-06-27 Thread Olivier Nicole
Hi, I am struggling to configure my FreeRADIUS server for eduroam (www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out problem for several years, identifying to an openLdap

help

2012-06-14 Thread Diego Quevedo
help - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius openldap config help please

2012-06-08 Thread Steven Pokrandt
I created from the opnldap.schema provided in freeradius, I converted with slaptest. I've deleted the lines at the end of the file as described in the conversion HOWTO's. Any help getting a good ldif file to import would be a great help.. I feel I'm very close!! here is the ldif file i have

RE: help on proxy

2012-06-01 Thread Diego Quevedo
yes, that was the idea. It will be too much of a long story to explain why I needed it to behave that way :) Date: Thu, 31 May 2012 19:50:33 +0100 From: a.l.m.bu...@lboro.ac.uk To: freeradius-users@lists.freeradius.org Subject: Re: help on proxy Hi, 1. If the server sends access

help on proxy

2012-05-31 Thread Diego Quevedo
Hello... I am currently using freeRadius to proxy messages between a client and server as follows: radius client --freeRadius--radius server The client normally send access_request messages which are proxyed to the server. The server can either respond with

Re: help on proxy

2012-05-31 Thread Alan DeKok
Diego Quevedo wrote: What I need to do now, is the following: 1. If the server sends access-accept, then proxy the message back to the client (like it is being done at the moment) 2. If the server sends access-reject, then do not proxy, just drop the packet. Is that possible? Yes.

Re: help on proxy

2012-05-31 Thread alan buxey
Hi, 1. If the server sends access-accept, then proxy the message back to the client (like it is being done at the moment) 2. If the server sends access-reject, then do not proxy, just drop the packet. eerr, why? that is horribly broken and will cause lots of issues with clients - making

RE: Help about debug mode and python

2012-05-23 Thread Vladimir KOLLA
users mailing list Subject: Re: Help about debug mode and python Phil Mayers wrote: http://bugs.python.org/issue4434 Warning: reading that bug will make you either sad or angry. Probably both. Use the static library, closing NOTABUG. Sigh. I believe it's fixed in Python 2.7. In my code

Re: Help about debug mode and python

2012-05-16 Thread Alan DeKok
Phil Mayers wrote: http://bugs.python.org/issue4434 Warning: reading that bug will make you either sad or angry. Probably both. Use the static library, closing NOTABUG. Sigh. I believe it's fixed in Python 2.7. In my code, I worked around it by dlopen()ing libpython, as per the 1st

Help about debug mode and python

2012-05-15 Thread Vladimir KOLLA
Hi, Thank you for your presentation at OSSIR today. As said, I've a technical question about the debug mode and Python. We are using python with LD_PRELOAD=/usr/lib/python2.6.so.1 in /etc/init.d/freeradius file But when we start FreeRadius in debug mode, it seems that the parameter is bypassed

Re: Help about debug mode and python

2012-05-15 Thread Alan DeKok
Vladimir KOLLA wrote: Thank you for your presentation at OSSIR today. You're welcome. It was nice to get to Paris for a while. As said, I've a technical question about the debug mode and Python. We are using python with LD_PRELOAD=/usr/lib/python2.6.so.1 in /etc/init.d/freeradius file

Re: Help about debug mode and python

2012-05-15 Thread Phil Mayers
On 05/15/2012 10:12 PM, Alan DeKok wrote: I'm not sure why you need to preload the python library. It should be loaded automatically when you load the rlm_python library. It's more tricky, I'm afraid , due to some python idiocy :o( Basically, python modules (compiled as a .so) are not

need info on EAP-SIM,help

2012-04-20 Thread doomyu
, jack -- View this message in context: http://freeradius.1045715.n5.nabble.com/need-info-on-EAP-SIM-help-tp5653902p5653902.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help: PAP with Sha1

2012-04-20 Thread Phil Mayers
On 20/04/12 11:09, vishal_nitr wrote: With SHA1 from client: User-Name = vishal Calling-Station-Id = 00-23-68-0F-1A-E6 NAS-Port = 0 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 Service-Type = Framed-User NAS-IP-Address = 127.0.0.1 NAS-Identifier = ap7131-0F1AE6 NAS-Port-Id = 0

Re: Help: PAP with Sha1

2012-04-20 Thread alan buxey
Hi,     I tried changing few things in lib/radius.c to SHA1 but with no success. please post full putput form radiusd -X regarding using SHA1 - easy, just ensure that your passwords are stored as SHA1 objects - the docs say how to do this alan - List info/subscribe/unsubscribe? See

Re: Help: PAP with Sha1

2012-04-20 Thread Alan DeKok
can't help you change RADIUS. I suggest debugging the program yourself. Standard C skills will help here. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help: PAP with Sha1

2012-04-20 Thread Alan DeKok
alan buxey wrote: regarding using SHA1 - easy, just ensure that your passwords are stored as SHA1 objects - the docs say how to do this No. He's changing the *source code* to encrypt the User-Name password via SHA1, instead of MD5. This isn't supported, and will never be supported.

Re: Help: PAP with Sha1

2012-04-20 Thread vishal_nitr
, nbsp;Bangalore-35. 09900055647. From: Alan DeKok lt;al...@deployingradius.comgt; Sent: Fri, 20 Apr 2012 17:07:45 To: vishal_n...@rediffmail.com, FreeRadius users mailing list lt;freeradius-users@lists.freeradius.orggt; Subject: Re: Help: PAP with Sha1 vishal_nitr wrote: gt; nbsp; nbsp; I am

Re: Help: PAP with Sha1

2012-04-20 Thread alan buxey
Hi, Thanks for the mail Alan. I don't agree with your comment that it is *not* RADIUS if we choose SHA1 over MD5. RADIUS supports SHA1 hashed user-password attribute. Following link confirms it. are you talking about changing user passwords (as i first assumed) or are you talking

Re: Help: PAP with Sha1

2012-04-20 Thread vishal_nitr
, Bangalore-35. 09900055647. From: alan buxey lt;a.l.m.bu...@lboro.ac.ukgt; Sent: Fri, 20 Apr 2012 16:50:14 To: vishal_n...@rediffmail.com lt;vishal_n...@rediffmail.comgt;, FreeRadius users mailing list lt;freeradius-users@lists.freeradius.orggt; Subject: Re: Help: PAP with Sha1 Hi, gt; nbsp

Re: Help: PAP with Sha1

2012-04-20 Thread alan buxey
Hi, Although the AVP User-Password is shown here in clear text, it was not transmitted to the server in clear text. FreeRADIUS uses the shared secret to encrypt and decrypt the value of the User-Password AVP. correct. it was encrypted using the shared-secret , the RFCs give full

Re: Help: PAP with Sha1

2012-04-20 Thread Alan DeKok
vishal_nitr wrote: This is what I am looking for. What is the place where RADIUS does decrypt operation. You were told to NOT ask programming questions on this list. ... I tried changing few things in lib/radius.c to SHA1 but with no success. You clearly want to do

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-19 Thread Rathod Subhashchandra
Hi Iliya, It is working now. Thanks for your help. Thanks ! Rathod. -Original Message- From: freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org [mailto:freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org ] On Behalf Of Iliya Peregoudov Sent: Thursday

Re: Any body here?Please help me to test my server.

2012-03-17 Thread Fajar A. Nugraha
2012/3/17 ZhenJoey snan4l...@hotmail.com: Hello every body: I just set up a freeradius server right now, Please help me to test it by run $radtest snan4love 123456 119.127.12.6 1812 12345678 I will be waiting here. BTW,i do a test my self via a NAS not radtest, it doesnt work. And what

RE: Any body here?Please help me to test my server.

2012-03-17 Thread ZhenJoey
: Any body here?Please help me to test my server. From: l...@fajar.net To: freeradius-users@lists.freeradius.org 2012/3/17 ZhenJoey snan4l...@hotmail.com: Hello every body: I just set up a freeradius server right now, Please help me to test it by run $radtest snan4love 123456

Any body here?Please help me to test my server.

2012-03-16 Thread ZhenJoey
Hello every body: I just set up a freeradius server right now, Please help me to test it by run $radtest snan4love 123456 119.127.12.6 1812 12345678 I will be waiting here. BTW,i do a test my self via a NAS not radtest, it doesnt work. is there something like TimeOut in NAS when it try

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Iliya Peregoudov
There is no WiMAX-MSK attribute in Access-Accept. You need to call rlm_wimax module from post-auth section of default virtual server: # raddb/sites-enabled/default post-auth { ... wimax ... } This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and MS-MPPE-Recv-Key. Rathod

Re[2]: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Толик Шавловский
...@fajar.net] Sent: Thursday, March 15, 2012 11:00 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra rat...@tataelxsi.co.in wrote: Wireshark logs

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
Dear Iliya, Thanks for your valuable suggestion. Rlm_wimax module was not building. I enabled and now it is building. As per your suggestion, I have added wimax in file raddb/sites-enabled/default Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me in this? Thanks

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Iliya Peregoudov
suggestion, I have added wimax in file raddb/sites-enabled/default Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me in this? Thanks ! Rathod. -Original Message- From: Iliya Peregoudov [mailto:iperegu...@cboss.ru] Sent: Thursday, March 15, 2012 11:41 AM To: rat

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Alan DeKok
Rathod Subhashchandra wrote: Rlm_wimax module was not building. I enabled and now it is building. As per your suggestion, I have added wimax in file raddb/sites-enabled/default Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me in this? Read the debug output to see

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread David Peterson
-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of Alan DeKok Sent: Thursday, March 15, 2012 7:49 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Rathod Subhashchandra wrote

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
To: 'FreeRadius users mailing list' Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Run freeradius in debug mode (-X). Look for eap module debug messages. Look for wimax module debug messages. Try to understand. Rathod Subhashchandra wrote: Dear Iliya, Thanks for your

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-14 Thread Fajar A. Nugraha
On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra rat...@tataelxsi.co.in wrote: Wireshark logs @ ASN-GW I could not attach wireshark pcap logs due to size constraint. I have took print screen of only ACCESS-ACCEPT message copied to MS word. While that information might be

Help with proxy settings please

2012-01-12 Thread lmgo5991
with timestamp +17 Cleaning up request 7 ID 141 with timestamp +17 Cleaning up request 8 ID 142 with timestamp +17 Waking up in 1.0 seconds. Cleaning up request 9 ID 143 with timestamp +17 Ready to process requests. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Help

Re: Help with proxy settings please

2012-01-12 Thread Phil Mayers
On 01/12/2012 01:23 PM, lmgo5991 wrote: Hi, Could someone please shed some light on the where we are going wrong. We have followed the documentation provided however it is unclear where to reference our internal ad servers. Your subject line is a bit confusing. You say proxy settings but I

Re: Help with proxy settings please

2012-01-12 Thread lmgo5991
. or should ntlm do this automatically...= .. Ps we are not trying to use ldap sorry for the mis leading test user id :). Thanks -- View this message in context: http://freeradius.1045715.n5.nabble.com/Help-with-proxy-settings-please-tp5139910p5140289.html Sent from the FreeRadius - User mailing list

Re: Help with proxy settings please

2012-01-12 Thread Phil Mayers
On 01/12/2012 04:08 PM, lmgo5991 wrote: Hi Phil, Thanks for you quick response. Just to clarify what we have succeeded in t= o date: 1. Install Samba done 2. Join Samba to the domain done 3. Start winbind done 4. Configure FreeRADIUS to use ntlm_auth to check MSCHAP against the

Re: Help with proxy settings please

2012-01-12 Thread Alan Buxey
hi, this wasnt proxying an authentication request - it wasdealing with it direct (and failing when doing the auth) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help with proxy settings please

2012-01-12 Thread Alan Buxey
Hi, [suffix] Looking up realm gcu.ac.uk for User-Name =3D radldapu...@gcu.ac= .uk [suffix] Found realm GCU.AC.UK okay, the server has gcu.ac.uk in proxy.conf - so the realm module knows to deal with it... [suffix] Preparing to proxy authentication request to realm GCU.AC.UK okay Sending

Re: Need basic help with accouting

2012-01-04 Thread Cosmin Neagu
I found how to do what i needed to do From what i discovered by default it does not do any accounting regarding user logins. I have to set in radiusd.conf in log section: auth = yes By default was set to no On 01/03/2012 04:52 PM, Alan DeKok wrote: Cosmin Neagu wrote: I already learned how

Re: Need basic help with accouting

2012-01-04 Thread Fajar A. Nugraha
On Wed, Jan 4, 2012 at 7:52 PM, Cosmin Neagu cosmin.ne...@omnilogic.ro wrote: I found how to do what i needed to do From what i discovered by default it does not do any accounting regarding user logins. I have to set in radiusd.conf in log section: auth = yes By default was set to no That's

Re: Need basic help with accouting

2012-01-04 Thread Cosmin Neagu
Yes you are right...did some searching on accounting and this is what i want next. Thanks for clarification. Cosmin Neagu On 01/04/2012 03:08 PM, Fajar A. Nugraha wrote: On Wed, Jan 4, 2012 at 7:52 PM, Cosmin Neagucosmin.ne...@omnilogic.ro wrote: I found how to do what i needed to do

Need basic help with accouting

2012-01-03 Thread Cosmin Neagu
Hello radius users, I need some basic info/redirection to start using accounting with freeradius. I already learned how to use authentication, but i'm unable to figure out from details in configurations files how to do some accounting - basic stuff like when a user logs in or out for start.

Re: Need basic help with accouting

2012-01-03 Thread Alan DeKok
Cosmin Neagu wrote: I already learned how to use authentication, but i'm unable to figure out from details in configurations files how to do some accounting - basic stuff like when a user logs in or out for start. Can anyone point me to some documentation on how to do basic accounting for

Re: I need your help!!!!

2011-12-17 Thread Guillermo William Llanes Suárez
: Viernes, 16 de Diciembre 2011 15:35:33 Asunto: Re: I need your help 2011/12/17 Guillermo William Llanes Suárez gwill...@uci.cu: Hello Friends: I am writing to give me ideas on how to apply the following policy in freeradius: - I need a user is only registered at the same time just one time, so

Re: I need your help!!!!

2011-12-17 Thread Guillermo William Llanes Suárez
8:35:08 Asunto: Re: I need your help Hola Fajar y amigos. Lo que necesito es, que una ves que un usuario se encuentre ya autenticado no pueda otra persona (robo de identidad) usar ese mismo usuario para autenticarse en otro equipo. Lo que quiero hacer, es, cuando esto suceda, que el intento

Re: I need your help!!!!

2011-12-17 Thread Alan Buxey
Hi, Hi Fajar and friends. What I need is that one you see that a user is authenticated and can not be another person (identity theft) use the same user to authenticate to another machine. What I do is, when this happens, the authentication attempt is rejected for second time, or only the

I need your help!!!!

2011-12-16 Thread Guillermo William Llanes Suárez
Hello Friends: I am writing to give me ideas on how to apply the following policy in freeradius: - I need a user is only registered at the same time just one time, so when the user is registered with that other users can not register. I hope I miss understand. Thank you very much. Fin a la

Re: I need your help!!!!

2011-12-16 Thread Fajar A. Nugraha
2011/12/17 Guillermo William Llanes Suárez gwill...@uci.cu: Hello Friends: I am writing to give me ideas on how to apply the following policy in freeradius: - I need a user is only registered at the same time just one time, so when the user is registered with that other users can not

HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Victor Guk
what's wrong? Help! Tue Nov 29 17:14:00 2011 : Auth: Login incorrect: [host/dbu14/via Auth-Type = EAP] (from client private-network port 123 cli 00-0E-A6-B4-43-99) Tue Nov 29 17:16:02 2011 : Error: -- verify error:num=10:certificate has expired Tue Nov 29 17:16:02 2011 : Error: TLS Alert

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan DeKok
Victor Guk wrote: what's wrong? Help! ... Tue Nov 29 17:16:02 2011 : Error: TLS Alert write:fatal:certificate expired What does that line say? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan Buxey
Hi, what's wrong? Help! Tue Nov 29 17:14:00 2011 : Auth: Login incorrect: [host/dbu14/via Auth-Type = EAP] (from client private-network port 123 cli 00-0E-A6-B4-43-99) Tue Nov 29 17:16:02 2011 : Error: -- verify error:num=10:certificate has expired Tue Nov 29 17:16:02 2011 : Error: TLS

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Victor Guk
29.11.2011 19:54, freeradius-users-requ...@lists.freeradius.org пишет: options: client has wrong certificate client has wrong date/time set on it certificate has expired alan The time is set correctly. Certificate has expired. Can I renew it without breaking. Or to create a new one? - List

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan Buxey
you can create a new RADIUS cert whenever you want. Just ensure its signed by same CA and has same details such as CN . If you want to change CA then client config changes will be needed (likewise for CN changes) ...that assumes the clients were configured properly/securely. If its just a

Re: please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-22 Thread Alan DeKok
Harshavardhan Ch wrote: Hello sir, while activating the free radius server with eap authentication via vmware virtual machine i got error like Failed binding to authentication address 192.168.1.102 port 1812 and i attched the output file. Stop posting ODT

RE:please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-21 Thread Harshavardhan Ch
Hello sir, while activating the free radius server with eap authentication via vmware virtual machine i got error like Failed binding to authentication address 192.168.1.102 port 1812 and i attched the output file. output file.odt Description:

Re: please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-21 Thread Fajar A. Nugraha
. Running netstat -anup | grep 181 should help. -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE:please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-21 Thread Duong Manh Truong
to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-requ...@lists.freeradius.org You can

RE: Help: FreeRadius Users with multiple passwords

2011-11-20 Thread Duong Manh Truong
What i did is that: With each user (Uid) , i created multiple userpassword attribute values, then, while authenticating, OpenLDAP will compare the input password with all the created password values --one by one If the input matched any one of the created pass = Access - Accept I also know that

Re: Help: FreeRadius Users with multiple passwords

2011-11-20 Thread Fajar A. Nugraha
On Mon, Nov 21, 2011 at 8:52 AM, Duong Manh Truong ngoahotanglon...@gmail.com wrote: What i did is that: With each user (Uid) , i created multiple userpassword attribute values, then, while authenticating, OpenLDAP will compare the input password with all the created password values --one by

Re: Help: FreeRadius Users with multiple passwords

2011-11-18 Thread Duong Manh Truong
! If anyone have experienced this, please give some advices ! Example: How to do it automatically or How to create a pool of passwords then use the pool for multiple users :) Regards! Message: 3 Date: Tue, 15 Nov 2011 16:09:29 +0700 From: Fajar A. Nugraha l...@fajar.net Subject: Re: Help: FreeRadius

Re: Help: FreeRadius Users with multiple passwords

2011-11-18 Thread Fajar A. Nugraha
On Fri, Nov 18, 2011 at 6:20 PM, Duong Manh Truong ngoahotanglon...@gmail.com wrote: Hi, Thanks for your reply :) I have a better news that: By using OpenLDAP for FR Authen Authorization = I can configure multiple passwords for each user (Uid) and use 1 of those passwords for successfully

Re: Help: FreeRadius Users with multiple passwords

2011-11-18 Thread John Dennis
On 11/18/2011 06:20 AM, Duong Manh Truong wrote: Hi, Thanks for your reply :) I have a better news that: By using OpenLDAP for FR Authen Authorization = I can configure multiple passwords for each user (Uid) and use 1 of those passwords for successfully Authentication! Although it is done

Help: FreeRadius Users with multiple passwords

2011-11-15 Thread Duong Manh Truong
or the password 123abc is both ok Please help me: How can i set it up? - I try to insert serveral records with the same username and difference value - password- in the radcheck table but at one time, the server accept 1 pair of username/value only :( - I try to edit the file users manually

Re: Help: FreeRadius Users with multiple passwords

2011-11-15 Thread Fajar A. Nugraha
On Tue, Nov 15, 2011 at 4:00 PM, Duong Manh Truong ngoahotanglon...@gmail.com wrote: Hi all, I have encounter with an issue and can not find the solution after several days of thinking :( I set up FreeRadius Mysql successfully, testing with some account ok, but my real case: Lot of my users 

Re: mysql module help

2011-11-15 Thread Alan DeKok
Ski Mountain wrote: I am trying to get freeradius working with mysql on a new system. I even copied the configuration files from a working system, but I am still having trouble getting the mysql module to load. Yes I have $INCLUDE sql.conf uncommitted from radius.conf Read

Re: mysql module help

2011-11-15 Thread Ski Mountain
freeradius-users@lists.freeradius.org Sent: Tuesday, November 15, 2011 4:10 AM Subject: Re: mysql module help Ski Mountain wrote: I am trying to get freeradius working with mysql on a new system.  I even copied the configuration files from a working system, but I am still having trouble getting

Re: mysql module help

2011-11-15 Thread Fajar A. Nugraha
On Wed, Nov 16, 2011 at 5:44 AM, Ski Mountain ski_the_mount...@yahoo.com wrote: Yes I have already edited the freeradius/sites-available/default Did you edit the right file? If you did, sql would show up on the debug log. The correct file (based on your debug output) should be

Re: mysql module help

2011-11-15 Thread Ski Mountain
list freeradius-users@lists.freeradius.org Sent: Tuesday, November 15, 2011 6:57 PM Subject: Re: mysql module help On Wed, Nov 16, 2011 at 5:44 AM, Ski Mountain ski_the_mount...@yahoo.com wrote: Yes I have already edited the freeradius/sites-available/default Did you edit the right file

mysql module help

2011-11-14 Thread Ski Mountain
I am trying to get freeradius working with mysql on a new system.  I even copied the configuration files from a working system, but I am still having trouble getting the mysql module to load.  Yes I have      $INCLUDE sql.conf uncommitted from radius.conf Thanks [root@server ~]#

Re: Need help with Freeradius and 802.1X

2011-11-02 Thread johnboy68
of information out in a public forum. Any thoughts? -- View this message in context: http://freeradius.1045715.n5.nabble.com/Need-help-with-Freeradius-and-802-1X-tp4865617p4958157.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http

Re: Need help with Freeradius and 802.1X

2011-11-02 Thread Alan Buxey
Hi, I have ntlm_auth working. I can auth my AD users with this command: radtest -t mschap aduser aspassword localhost 0 testing123 And it works. My problem is when I configure one of my Cisco switches to do 802.1x and authenticate with Freeradius my Windows (Windows 7 and Vista)

Re: Need help with Freeradius and 802.1X

2011-11-02 Thread Alan DeKok
johnboy68 wrote: I have ntlm_auth working. I can auth my AD users with this command: radtest -t mschap aduser aspassword localhost 0 testing123 And it works. Good! My problem is when I configure one of my Cisco switches to do 802.1x and authenticate with Freeradius my Windows

Fwd: Need help on ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2011-10-25 Thread Stephen Kwok
Hi, I am a newbie to FreeRADIUS and I have run into a problem during the setup. I have spent some time on researching for an answer online, but I got no luck. I have described the problem as below. Could anyone please let me know what went wrong? Thank you so much in advance. Stephen OS: Mac

Re: Fwd: Need help on ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2011-10-25 Thread Alan DeKok
Stephen Kwok wrote: I am a newbie to FreeRADIUS and I have run into a problem during the setup. I have spent some time on researching for an answer online, but I got no luck. I have described the problem as below. Could anyone please let me know what went wrong? Thank you so much in

Re: Fwd: Need help on ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2011-10-25 Thread Alan Buxey
Hi, OS: Mac OSX 10.6.8 FreeRADIUS version:�2.1.12 Steps taken: snip okay. so you downloaded the software, extracted it, then built it... great. did you note what happened when you 'make install' ? Starting�-�reading�configuration�files�...�

Need help with Freeradius and 802.1X

2011-10-03 Thread johnboy68
but I feel this is something that would be a normal 802.1X configuration. Any help on how to configure this environment would be greatly appreciated. Thanks, John -- View this message in context: http://freeradius.1045715.n5.nabble.com/Need-help-with-Freeradius-and-802-1X-tp4865617p4865617.html

Re: Need help with Freeradius and 802.1X

2011-10-03 Thread Alan DeKok
johnboy68 wrote: Users with Vista machines and the 802.1X supplicant configured Windows Server 2008 with Active Directory Other network connected devices and 'unknown' computers 100% Cisco LAN/WAN Here is what I want to do: Dynamic VLAN assignment based on 802.1X with Freeradius able to

Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Jason Antman
We've rolled out FreeRADIUS as the authentication and authorization server for our University-wide WLAN with 30,000+ users. Our help desk (general IT, not wireless-specific) support staff is made up of student workers, with full-time second-level support and us sysadmins/wireless engineers

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Alan Buxey
hi, firstly, deployment tool - such as CloudPath xpressconnect or sux1 to ensure that the user is doing the least amount possible to mess things up (also ensures that all the right things such as validate server, RADIUS name etc are all properly defined). secondly, capture the output of the

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Jason Antman
Thanks for the quick reply! Alan Buxey wrote: hi, firstly, deployment tool - such as CloudPath xpressconnect or sux1 to ensure that the user is doing the least amount possible to mess things up (also ensures that all the right things such as validate server, RADIUS name etc are all

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Arran Cudbard-Bell
1) How do other people - specifically organizations with a help desk large enough that they're distinctly separate from anyone with enough privs to tail a log file - handle user support of authentication failures? In a former life I worked at a largish UK university. Whilst I was there I

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Arran Cudbard-Bell
if(!control:NT-Password !control:Cleartext-Password){ update control { Reject-Reason := 'AttributeMissing' } } oops... - Arran Cudbard-Bell a.cudba...@freeradius.org Betelwiki, Betelwiki, Betelwiki http://wiki.freeradius.org/ ! - List

Re: Need help to store user details

2011-09-20 Thread Christ Schlacta
.1045715.n5.nabble.com/Need-help-to-store-user-details-tp4821498p4821498.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: Need help to store user details

2011-09-20 Thread Fajar A. Nugraha
On Tue, Sep 20, 2011 at 1:07 PM, Rajkumar balaji rajkumar.balaj...@gmail.com wrote: Hi All, I just want to store user details like, The user name is ABC  and the user belongs to XYZ group and PQR group. LDAP/files/SQL/whatever? e.g.

Re: Need help to store user details

2011-09-20 Thread Rajkumar balaji
to implement this. Thanks Regards Rajkumar Balaji -- View this message in context: http://freeradius.1045715.n5.nabble.com/Need-help-to-store-user-details-tp4821498p4821565.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http

Authorization help

2011-09-20 Thread Rajkumar balaji
Hi All, Thanks for helped me to Authenticate with FreeRADIUS. Now I am able to authenticate successfully. Please help me to resole with the following issue, How to get authorize with FreeRADIUS? Where to store the user group details and his permissions? (which file i have to store it) Thanks

Re: Need help to store user details

2011-09-20 Thread Fred
to XYZ group and PQR group. Thanks Regards Rajkumar Balaji -- View this message in context: http://freeradius.1045715.n5.nabble.com/Need-help-to-store-user-details-tp4821498p4821498.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe

Re: Need help to store user details

2011-09-20 Thread Fajar A. Nugraha
On Tue, Sep 20, 2011 at 1:47 PM, Rajkumar balaji rajkumar.balaj...@gmail.com wrote: Purpose is After the authentication i need to retrieve the group details associated with this user and according to them I need to Authorize the user. Store it in FreeRADIUS (text file also fine) ( and I want

RE: Need a little regex help

2011-09-19 Thread Sallee, Stephen (Jake)
-bounces+jake.sallee=umhb@lists.freeradius.org] On Behalf Of Commonn Systems Sent: Friday, September 16, 2011 8:51 PM To: FreeRadius users mailing list Subject: Re: Need a little regex help I guess all the regex gurus will laugh at my request I figured it out, for others, looks like

Re: Need a little regex help

2011-09-17 Thread Alexander Clouter
Commonn Systems ad...@commonn.com wrote: I guess all the regex gurus will laugh at my request Only if you had not figured it out ;) I figured it out, for others, looks like this works: .*:SSID_ABC ! Typically regex is complicated to new comers as there are three (important) types

<    1   2   3   4   5   6   7   8   9   10   >