Re: need help - force EAP-TTLS to validate the server certificate

2010-09-21 Thread Klaus Laus
ius users mailing list > Betreff: Re: need help - force EAP-TTLS to validate the server certificate > Klaus Laus wrote: > > I tried to login from another client, but it´s the same problem. > > > > TLS Alert write:fatal:handshake failure > > TLS_accept:error in SSLv

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-21 Thread Alan DeKok
Klaus Laus wrote: > I tried to login from another client, but it´s the same problem. > > TLS Alert write:fatal:handshake failure > TLS_accept:error in SSLv3 read client certificate B > rlm_eap: SSL error error:140890C7:SSL > routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate >

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-20 Thread Klaus Laus
t; Von: John Dennis > An: FreeRadius users mailing list > CC: Klaus Laus > Betreff: Re: need help - force EAP-TTLS to validate the server certificate > On 09/17/2010 11:00 AM, Klaus Laus wrote: > > > > thanks a lot for your answer. > >> Either move the "file

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-17 Thread John Dennis
On 09/17/2010 11:00 AM, Klaus Laus wrote: thanks a lot for your answer. Either move the "files" module before "eap", or use unlang to set it: authorize { ... update control { EAP-TLS-Require-Client-Cert = yes } eap ... } I did the changes in the authorize section, an

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-17 Thread Klaus Laus
nect to wifix, I use PEAP with MSCHAP v.2 and type in testuser as user with the correct password. Here you can see the debug output (freeradius did not find my certificate): ps: thanks all for your very good help! FreeRADIUS Version 2.1.6, for host i686-pc-linux-gnu, built on Oct 27 2009 at 1

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Alan DeKok
Denis Iskandarov wrote: > I really appreciate your help but i can't understand some things. > okey, let me ask some questions based on your very first answer. > So suplicant sending some wrong packet. or something wrong withs it > certificate? Possibly. > AP configure

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Denis Iskandarov
I really appreciate your help but i can't understand some things. okey, let me ask some questions based on your very first answer. So suplicant sending some wrong packet. or something wrong withs it certificate? AP configured to use EAP-TLS and "passthrough" all eap requests t

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Alan DeKok
why it doesn't work. > maybe someone can structurize my knowledge or give me some basic hints > hot build this EAP-TLS server-client structure ? I'm trying. You are ignoring my attempts to help. > I don't know. what to do. I don't know why but i'm sure problem

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Denis Iskandarov
blem. Already three i'm tring to male this EAP-TLS to work but nothing works. maybe someone can structurize my knowledge or give me some basic hints hot build this EAP-TLS server-client structure ? I don't know. what to do. I don't know why but i'm sure problem is in server co

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Alan DeKok
Denis Iskandarov wrote: > forgot to mention that my try to make: ... Why are you trying to change the configuration on the server? You were already told where the problem was. It's not the server. If you're not going to read the answers on this list, there's no reason to post questions.

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Denis Iskandarov
forgot to mention that my try to make: heck_cert_cn = %{User-Name} => entered in users db username same as CN is in certificate with password supplied during client-cert generation with OpenSSL (A challenge password []:whatever) didn't work. As well as placing my real cert data in this fi

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Denis Iskandarov
setup is. Mikrotik WDS AP + Mikrotik WDS Stationso suplicant is Mikrotik Station Mikrotik has only EAP-TLS .1x method for authentication and as i got EAP-TLS is using only certificates for auth. i'm sure that i have problem configuring eap TLS module. radius can't retrieve UserIdentit

Re: [help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Alan DeKok
Denis Iskandarov wrote: > Hello > I'm trying to do WDS WPA2-EAP TLS authentication of 2 RB600 > Simple WDS AP+station without EAP is working. > I've already searched forum for related topics. but they didn't help me. ... What supplicant are you using? i.e. Wi

[help] Mikrotik WDS + WPA2-EAP TLS + FreeRadius = failure

2010-09-17 Thread Denis Iskandarov
Hello I'm trying to do WDS WPA2-EAP TLS authentication of 2 RB600 Simple WDS AP+station without EAP is working. I've already searched forum for related topics. but they didn't help me. So what do i have: 2x RB600 CentOS 5.5 => freeradius2-2.1.7-7.el5 + mysql Ver 14.12 Distrib 5.

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-16 Thread Phil Mayers
On 16/09/10 14:35, Klaus Laus wrote: ok, this is the debug output: FreeRADIUS Version 2.1.6, for host i686-pc-linux-gnu, built on Oct 27 2009 at 17:05:49 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A P

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-16 Thread Alan DeKok
Klaus Laus wrote: > I did this, but the clients can login furthermore without any client > certificate for example with PEAP or EAP-TTLS. Here is my users file: Is it that hard to show the debug output? > Here's the eap.conf file Neither the documentation or messages on this list ask for

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-16 Thread Klaus Laus
tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } mschapv2 { } } Any idea's what is wrong here? Thanks Original-Nachricht > Datum: Thu, 16 Sep 2010 09:54:28 +0200 > Vo

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-16 Thread Alan DeKok
Klaus Laus wrote: > Thanks a lot Alan DeKok, do I have any possibility to permit login only > persons with username/password and client certificate? > All authentications methods works fine on my server, but I´ll only permit > login with username/password and client certificate. Which code I need

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-15 Thread Klaus Laus
-Nachricht > Datum: Wed, 15 Sep 2010 10:47:52 +0200 > Von: Alan DeKok > An: FreeRadius users mailing list > Betreff: Re: need help - force EAP-TTLS to validate the server certificate > Klaus Laus wrote: > > Hello, I have one question, is it possible to configure my freera

Re: Echo Effect Help

2010-09-15 Thread Deepak
> Blame the NAS. As I said before sounds crazy.. Most probably NAS is to blame. Thanks Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Echo Effect Help

2010-09-15 Thread Alan DeKok
Deepak wrote: > When radius is put in that particular line, it doesn't respond to the > request from chilli on one particular line of the other two lines. For > Example: If radius is in Line 1, it processes the request from Line 2 > but completely ignores from Line 3. By line I mean three separate

Re: need help - force EAP-TTLS to validate the server certificate

2010-09-15 Thread Alan DeKok
Klaus Laus wrote: > Hello, I have one question, is it possible to configure my freeradius server > so that only clients with a ca certificate can login themselves with their > username and password? I want to configure my freeradius server so that the > users can only login after the successfull

Echo Effect Help

2010-09-15 Thread Deepak
Hi, I don't know how to explain this problem. Sounds completely crazy. I have a freeRADIUS 2.1.7 (in CentOS 5.5) setup with MySQL backend to be used with dd-wrt chilli. I have tested in three separate line exchanging the location of radius and chilli but in particular line I found out that radius

need help - force EAP-TTLS to validate the server certificate

2010-09-15 Thread Klaus Laus
validation. At the moment I use EAP-TTLS for authentication, but the options in the clients "servercertificate validation" is optional. I want to use EAP-TTLS and force the ca certificate on the clients. Thanks for help! misterklaus -- GMX DSL SOMMER-SPECIAL: Surf & Phone Flat 16.000

Re: help in troubleshooting PEAP authenticathion with XP client

2010-09-13 Thread Alan Buxey
hi, cisco problem? - contact cisco. FreeRADIUS problem? send the output of radiusd -X to this list. please dont send cisco debug output to this list alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

help in troubleshooting PEAP authenticathion with XP client

2010-09-13 Thread Stephane Brodeur
Hi, Can somebody indicates me if there is any log that can help me identifying the problem with my Windows XP client trying to authenticate to the radius server. I do not know how to interpret the RADIUS/DECODE: parse response no app start; FAIL since no communication was establish between

Re: Newbie: help to configure PEAP extension for windows XP wireless Clients

2010-09-09 Thread Alan DeKok
Stephane Brodeur wrote: > I am a newbie with Radius and I have problems to authenticate XP > wireless clients with eap. I think that my first problem is due to the > fact that Windows XP client requires a Certificate Authority since > Windows only recognized signed certificate. I could not find th

Newbie: help to configure PEAP extension for windows XP wireless Clients

2010-09-09 Thread Stephane Brodeur
-signed certificate is good enough to authenticate Windows XP wireless client 3) Can we used the root/server/client self-signed certificate for authentication EAP-TLS. Does making new root/server/client certificate with the make function overides thte self-one Thanks for all your help Stephane

Re: sqlcounter help

2010-09-09 Thread Mordor Networks
Dear Sir this is the log in debugging mode , in query in using query = "SELECT (SUM(AcctInputOctets)+SUM(AcctOutputOctets)) FROM radacct WHERE UserName='%{%k}'" it works just fine Waking up in 5 seconds... rad_recv: Access-Request packet from host 192.168.22.2:52098, id=20, length=114 Serv

Fwd: ldap group lookup help

2010-09-08 Thread Walter Gould
I never saw a reply to my below e-mail. Would anybody have any thoughts or ideas on why our ldap group lookups fail after some period of time...? If it would help to send debug output, I can... Just for my information, are many folks out there using ldap/AD group lookups on large FR

Re: sqlcounter help

2010-09-06 Thread Alan DeKok
Mordor Networks wrote: > It is disconnecting the user if limit is reached but user can connect > again like it is not stopping the account, now if i replace the query > with #query = "SELECT (SUM(AcctInputOctets)+SUM(AcctOutputOctets)) FROM > radacct WHERE UserName='%{%k}'" that will disconnect the

sqlcounter help

2010-09-05 Thread Mordor Networks
Dear Gentlemen I'm having a problem with my daily count : sqlcounter chillispot_max_bytes_daily { counter-name = ChilliSpot-Max-Total-Octets check-name = ChilliSpot-Max-Total-Octets reply-name = ChilliSpot-Max-Total-Octets sqlmod-inst = sql key = User-Name reset = daily query = "SELECT SUM(AcctInp

ldap group lookup help

2010-09-02 Thread Walter Gould
of Access-Challenge packets.. Is this normal? Just wondering if excessive unneeded traffic is what is overloading the AD/ldap servers? Any help or suggestions will be appreciated. Thanks, Walter Gould Auburn University - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: ask for help on WiMAX + Freeradius + Disconnec

2010-09-02 Thread Xiaochen
Subject: RE? RE: ask for help on WiMAX + Freeradius + Disconnect To: Message-ID: <005b01cb4a33$19178370$4b468a...@com> Content-Type: text/plain; charset="gb2312" Message: 4 Date: Wed, 1 Sep 2010 09:35:53 -0500 From: "Ben Wiechman" Subject: RE: ask for

RE: RE: ask for help on WiMAX + Freerad ius + Disconnect

2010-09-01 Thread Xiaochen
Message: 4 Date: Wed, 1 Sep 2010 09:35:53 -0500 From: "Ben Wiechman" Subject: RE: ask for help on WiMAX + Freeradius + Disconnect To: "FreeRadius users mailing list" Message-ID: <4c7e64c3.c84de70a.22a4.2...@mx.google.com> Content-Type: text/plain; cha

RE: ask for help on WiMAX + Freeradius + Disconnect

2010-09-01 Thread Ben Wiechman
Step 1: Read the wimax dictionary file. It will help you understand what types of data you need to be putting into each attribute. update disconnect { User-Name = "%{User-Name}" Calling-Station-Id = "%{Calling-Station-Id}" WiMAX-AAA-Session-Id = &qu

Re: ask for help on WiMAX + Freeradius + Disconnect (Alan DeKok)

2010-09-01 Thread Alan DeKok
Xiaochen wrote: > [r...@aaa bin]# cat packet.txt | radclient -x 100.1.6.4:3799 disconnect > 0123456789 > radclient: XUnknown attribute "WiMAX-Session-Id" Use attributes that are defined in the WiMAX dictionary. Or, update the WiMAX dictionary to include the attributes you're using. Alan De

Re:Re: ask for help on WiMAX + Freeradius + Disconnect (Alan DeKok)

2010-09-01 Thread Xiaochen
Xiaochen wrote: > After packet.txt was sent to AGW, radclinet debug window said: ?Unknown > WiMAX-Session ?ID or Unknown WiMAX-DM-Action-Code ? radclient doesn't produce that error message. Please post the *real* error message, and not anything else. Alan DeKok. >

Re: ask for help on WiMAX + Freeradius + Disconnect

2010-08-31 Thread Alan DeKok
Xiaochen wrote: > After packet.txt was sent to AGW, radclinet debug window said: “Unknown > WiMAX-Session –ID or Unknown WiMAX-DM-Action-Code ” radclient doesn't produce that error message. Please post the *real* error message, and not anything else. Alan DeKok. - List info/subscribe/unsub

ask for help on WiMAX + Freeradius + Disconnect

2010-08-31 Thread Xiaochen
sent by Freeradius. Could you please give me any suggestions on how to add the attribute of WiMAX-Session-ID and WiMAX-DM-Action-Code into the sent message ? Thanks a lot for your help in advance! Xiaochen Chen @ WiMAX Test Lab Beiing , China - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

ask for help on WiMAX + Freeradius + Disconnect

2010-08-31 Thread Xiaochen
X-Session-ID and WiMAX-DM-Action-Code sent by Freeradius. Could you please give me any suggestions on how to add the attribute of WiMAX-Session-ID and WiMAX-DM-Action-Code into the sent message ? Thanks a lot for your help in advance! Xiaochen Chen @ WiMAX Test Lab Beiing , China - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: newbie need help!

2010-08-30 Thread Alan DeKok
gahn wrote: > i followed the advice to sue "radiusd -X" and here is what i got: The point of using debug mode is to *read* the output. Have you tried doing that? > here is my config for "users": > > glu Auth-Type := Local > Cleartext-Password := "12345678", > Juniper-Loc

newbie need help!

2010-08-30 Thread gahn
Hi gurus: i followed the advice to sue "radiusd -X" and here is what i got: rad_recv: Access-Request packet from host 192.168.255.138 port 65267, id=176, length=53 User-Name = "glu" User-Password = "12345678" NAS-Identifier = "r8" NAS-IP-Address = 10.100.11.3 +- e

Re: Help

2010-07-13 Thread John Dennis
On 07/13/2010 03:06 PM, Kenneth Marshall wrote: On Tue, Jul 13, 2010 at 11:58:53PM +0500, Jawad Khawaja wrote: Hi, I am using CentOS with Radius 1.1.3. it automatically stops working. and i do restart its services to restore its original state.. As if we do restart system's services 2 o

Re: Help

2010-07-13 Thread Kenneth Marshall
On Tue, Jul 13, 2010 at 11:58:53PM +0500, Jawad Khawaja wrote: > Hi, > > I am using CentOS with Radius 1.1.3. it automatically stops working. > and i do restart its services to restore its original state.. As if we do > restart system's services 2 or three times, system starts working

Re: Help

2010-07-13 Thread Marinko Tarlac
Check log files And upgrade your FR installation. Jawad Khawaja wrote: Hi, I am using CentOS with Radius 1.1.3. it automatically stops working. and i do restart its services to restore its original state.. As if we do restart system's services 2 or three times, system starts work

Help

2010-07-13 Thread Jawad Khawaja
Hi, I am using CentOS with Radius 1.1.3. it automatically stops working. and i do restart its services to restore its original state.. As if we do restart system's services 2 or three times, system starts working it has a very strange to us... what should i share to trouble shoot. An

Re: Help connecting to remote ldap server

2010-06-25 Thread John Dennis
On 06/25/2010 06:54 PM, Raymond Norton wrote: Got things working (yeah!) Had to reset the users password with ldappassword. For some reason freeradius couldn't read what was exported to the ldif file. Once I changed passwords with ldappassword, radtest and WPA worked perfectly. Also had to com

Re: Help connecting to remote ldap server

2010-06-25 Thread Josip Rodin
On Fri, Jun 25, 2010 at 05:54:38PM -0500, Raymond Norton wrote: > Got things working (yeah!) > > Had to reset the users password with ldappassword. For some reason > freeradius couldn't read what was exported to the ldif file. Once I > changed passwords with ldappassword, radtest and WPA worke

Re: Help connecting to remote ldap server

2010-06-25 Thread Raymond Norton
.conf: #access to attrs=userPassword Thanks for the help - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help connecting to remote ldap server

2010-06-25 Thread Phil Mayers
On 24/06/10 17:33, John Dennis wrote: On 06/24/2010 12:21 PM, Raymond Norton wrote: [ldap] looking for reply items in directory... WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? You don't have the userPassword mapped in /etc/raddb/lda

Re: Help connecting to remote ldap server

2010-06-24 Thread John Dennis
On 06/24/2010 04:21 PM, Josip Rodin wrote: No, the two colons in ldapsearch output just indicate that the attribute value is MIME-encoded. Good catch Josip. -- John Dennis Looking to carve out IT costs? www.redhat.com/carveoutcosts/ - List info/subscribe/unsubscribe? See http://www.freeradiu

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
It happens that way when you're new sometimes :) The last couple posts helped. I am now able to get an "Accept" message when connecting with the rootdn user. Working on getting other users to authenticate now. Thanks for your patience and help. Raymond On 6/24/2010 3:57

Re: Help connecting to remote ldap server

2010-06-24 Thread Alan DeKok
Raymond Norton wrote: > I have been reading and looking at similar post non-stop and have an > idea what is wrong, but am not sure how to fix it. Sorry... but the symptoms here are clear. Many, many, posts, full of confused "what do I do now" questions. It's not that hard. Stop fighting it,

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
I have been reading and looking at similar post non-stop and have an idea what is wrong, but am not sure how to fix it. I understand there may be a need to map ldap and radius attributes and I have found a couple examples, but I am not entirely sure what the changes should be. It seems the o

Re: Help connecting to remote ldap server

2010-06-24 Thread Josip Rodin
On Thu, Jun 24, 2010 at 11:21:47AM -0500, Raymond Norton wrote: > I misunderstood the instructions. Made the change, and I see now that I > am at least connecting to the ldap server, but still getting rejected. > > [ldap] performing user authorization for billy > ++[ldap] returns ok > No authenti

Re: Help connecting to remote ldap server

2010-06-24 Thread Josip Rodin
On Thu, Jun 24, 2010 at 12:33:10PM -0400, John Dennis wrote: > But even if you did, ldap has this: > > userPassword:: e1NIQX13ak83dXhlS3FYR0NFVlhPTEVzVUo4OW9DWFE9 > > They aren't the same are they? The LDAP entry looks like a hash, you'll > have to figure out which kind. Note it does not contain

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
No. This is a new install. Nothing has been copied over. Thanks for the pointers. I will keep working at it. I hope you didn't just copy 1.x configuration over to 2.x, they aren't compatible. I see from your debug output you're running 2.1.0 but the current version is 2.1.9. To the bes

Re: Help connecting to remote ldap server

2010-06-24 Thread John Dennis
On 06/24/2010 02:04 PM, Raymond Norton wrote: Thanks for the info. I'm not sure how to determine what to use in ldap.attrmap, but will see what I can figure out. This issue has been covered a lot on this list, search the archives. One question though; before attempting this current setup, I

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
Thanks for the info. I'm not sure how to determine what to use in ldap.attrmap, but will see what I can figure out. One question though; before attempting this current setup, I installed freeradius_1.1.0-1ubuntu2.1_i386.deb and ldap on the same localhost.. radtest and authenticating via WPA w

Re: Help connecting to remote ldap server

2010-06-24 Thread John Dennis
On 06/24/2010 12:21 PM, Raymond Norton wrote: [ldap] looking for reply items in directory... WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? You don't have the userPassword mapped in /etc/raddb/ldap.attrmap But even if you did, ldap ha

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
I misunderstood the instructions. Made the change, and I see now that I am at least connecting to the ldap server, but still getting rejected. I changed the basedn to ou=People,dc=lctn,dc=org for this test. (ldapsearch is below) FreeRADIUS Version 2.1.0, for host i486-pc-linux-gnu, built on

Re: Help connecting to remote ldap server

2010-06-24 Thread Phil Mayers
rad_recv: Access-Request packet from host 127.0.0.1 port 50670, id=151, length=57 User-Name = "billy" User-Password = "password" NAS-IP-Address = 127.0.1.1 NAS-Port = 1 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
Debug: FreeRADIUS Version 2.1.0, for host i486-pc-linux-gnu, built on Sep 17 2009 at 17:22:02 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS

Re: Help connecting to remote ldap server

2010-06-24 Thread John Dennis
On 06/24/2010 11:32 AM, Raymond Norton wrote: That brings me back to my first post-no radiusd. What system are you working on? You said there was a /etc/init.d/freeradius init script. Look in it to see what it's invoking. /usr/sbin/freeradius by any chance? -- John Dennis Looking to carve

Re: Help connecting to remote ldap server

2010-06-24 Thread Phil Mayers
On 24/06/10 16:32, Raymond Norton wrote: That brings me back to my first post-no radiusd. Well, maybe it's in a different location. What OS are you using? Have you queried the package manager for your OS to find the location of the binaries? If you didn't use a package manager, and installe

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
Got debug working with /usr/sbin/freeradius -X On 6/24/2010 10:32 AM, Raymond Norton wrote: That brings me back to my first post-no radiusd. On 6/24/2010 10:26 AM, Phil Mayers wrote: On 24/06/10 16:23, Raymond Norton wrote: Yes, but when I try to use -X , it says: Usage: /etc/init.d/f

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
That brings me back to my first post-no radiusd. On 6/24/2010 10:26 AM, Phil Mayers wrote: On 24/06/10 16:23, Raymond Norton wrote: Yes, but when I try to use -X , it says: Usage: /etc/init.d/freeradius start|stop|restart|force-reload That's the init script. Run the daemon directly: /us

Re: Help connecting to remote ldap server

2010-06-24 Thread Phil Mayers
On 24/06/10 16:23, Raymond Norton wrote: Yes, but when I try to use -X , it says: Usage: /etc/init.d/freeradius start|stop|restart|force-reload That's the init script. Run the daemon directly: /usr/sbin/radiusd -X - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.ht

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
Yes, but when I try to use -X , it says: Usage: /etc/init.d/freeradius start|stop|restart|force-reload On 6/24/2010 10:18 AM, Alan DeKok wrote: Raymond Norton wrote: The FAQ says to use radiusd -X> debug.txt for debug. I get the following: The program 'radiusd' can be found in the

Re: Help connecting to remote ldap server

2010-06-24 Thread Alan DeKok
Raymond Norton wrote: > The FAQ says to use radiusd -X> debug.txt for debug. > > I get the following: > > The program 'radiusd' can be found in the following packages: > * radiusd-livingston > * xtradius > * yardradius > > > Is there another way to launch debug mode in version 2.1? Your

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
The FAQ says to use radiusd -X> debug.txt for debug. I get the following: The program 'radiusd' can be found in the following packages: * radiusd-livingston * xtradius * yardradius Is there another way to launch debug mode in version 2.1? - List info/subscribe/unsubscribe? See http://

Re: Help connecting to remote ldap server

2010-06-24 Thread John Dennis
ig changes are as follows: If you want people to help you then you have to include all the information, DO NOT provide snipets. Include the output of ldapsearch and the ENTIRE output of the freeradius debug output INCLUDING the section after it begins receiving requests. Do NOT include your

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
Whoops... /modules/ldap is on the local freeradius server, not the the remote ldap server. /modules/ldap: (on remote ldap server) ldap { server = "10.10.3.1" basedn = "dc=lctn,dc=org" filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" /etc/ldap/slapd.conf (on re

Re: Help connecting to remote ldap server

2010-06-24 Thread Raymond Norton
ldapsearch -x -b uid=billy,ou=People,dc=lctn,dc=org (on remote ldap server) Command successfully displays information on user. radtest raymond "password" 127.0.0.1 1 testing123 (on freeradius server) Displays local user info radtest billy "password" 127.0.0.1 1 testing123 (on freeradius se

Re: Help connecting to remote ldap server

2010-06-24 Thread Marzieh Raoufnezhad
Hi, Maybe your problem be in your slapd.conf permissions (access to...). I had same problem, my ldap module loaded fine on freeradius server(debian lenny), but I got "accept-reject ..." error when I ran radtest command. I deleted my "access to ..." block for freeradius server directory in slapd.co

Re: Help connecting to remote ldap server

2010-06-24 Thread Alan DeKok
Raymond Norton wrote: > I successfully configured freeradius (version 1.x Ubuntu) to use ldap on > a localhost via WPA. I am trying to setup version 2.1 (Ubuntu) to use a > remote ldap server now. The module loads fine and I made what I believed > were the correct changes to connect to the remote s

Re: Help connecting to remote ldap server

2010-06-23 Thread Riccardo Veraldi
Raymond Norton wrote: I successfully configured freeradius (version 1.x Ubuntu) to use ldap on a localhost via WPA. I am trying to setup version 2.1 (Ubuntu) to use a remote ldap server now. The module loads fine and I made what I believed were the correct changes to connect to the remote serve

Help connecting to remote ldap server

2010-06-23 Thread Raymond Norton
I successfully configured freeradius (version 1.x Ubuntu) to use ldap on a localhost via WPA. I am trying to setup version 2.1 (Ubuntu) to use a remote ldap server now. The module loads fine and I made what I believed were the correct changes to connect to the remote server, but I have missed s

RE: little sql help required

2010-06-06 Thread Strong, Mark
> Strong, Mark wrote: > > I've got two servers, each with its own mysql db (replicated to each > other), and I'd like freeradius to fail over to the other boxes mysql > server if its local one dies. > > $ man unlang > > You can use a simpler config than that, I think. > > doc/configurable_f

Re: little sql help required

2010-06-06 Thread Alan DeKok
Strong, Mark wrote: > I've got two servers, each with its own mysql db (replicated to each other), > and I'd like freeradius to fail over to the other boxes mysql server if its > local one dies. $ man unlang You can use a simpler config than that, I think. > So I'd like to understand what th

little sql help required

2010-06-03 Thread Strong, Mark
All, I've read the SQL_HOWTO, and have it working, however I'm trying to understand this bit in the example. group { sql1 { fail = 1 notfound = return noop = 2 ok = return updated = 3 reject = return userlock = 4 invalid = 5 handled = 6

RE: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Karuna G. Kumar
s-users-bounces+karuna.kumar=indscape@lists.freeradius.org on behalf of Alan Buxey Sent: Wed 6/2/2010 7:01 PM To: FreeRadius users mailing list Cc: Subject:Re: JRadius with FreeRADIUS - Please help me in solving this issue Hi, > I used different user name (karun) and password (kar

Re: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Alan Buxey
Hi, > I used different user name (karun) and password (karunkarun) also. But the > result is same. do you have karun in the /etc/passwd file? from the logs you do alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Karuna G. Kumar
FreeRadius users mailing list Cc: Subject:Re: JRadius with FreeRADIUS - Please help me in solving this issue Hi, > [pap] login attempt with password "testing" > [pap] Using CRYPT encryption. yes, crypt...which means > ++[unix] returns updated ..tht you have

Re: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Alan Buxey
Hi, > [pap] login attempt with password "testing" > [pap] Using CRYPT encryption. yes, crypt...which means > ++[unix] returns updated ..tht you have a matching entry in /etc/passwd - hence CRYPT alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Karuna G. Kumar
Hi, Now I got some improvement than before I guess. Now, I am getting the error like... [pap] login attempt with password "testing" [pap] Using CRYPT encryption. [pap] Passwords don't match I am passing the Clear text password to FreeRADIUS. but, why is this failing ? Please

Re: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Alan DeKok
Karuna G. Kumar wrote: > I am trying to authorize / authenticate the user from a JRadius handler. I > want to validate the user name and password both from our application's data > repository using EJB calls. Hence, I don't want to look in to users file at > all. Do I need to still enable PAP fo

RE: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Karuna G. Kumar
ng list Cc: Subject:Re: JRadius with FreeRADIUS - Please help me in solving this issue Karuna G. Kumar wrote: > Hi, > > I am using FreeRADIUS 2.1.8 and JRadius 1.0.0 in my machine. When I send the > Access-Request, it gives me the error "No authenticate method (Auth-Type)

Re: JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Alan DeKok
Karuna G. Kumar wrote: > Hi, > > I am using FreeRADIUS 2.1.8 and JRadius 1.0.0 in my machine. When I send the > Access-Request, it gives me the error "No authenticate method (Auth-Type) > configuration found for the request: Rejecting the user". Please help me. Did >

JRadius with FreeRADIUS - Please help me in solving this issue

2010-06-02 Thread Karuna G. Kumar
Hi, I am using FreeRADIUS 2.1.8 and JRadius 1.0.0 in my machine. When I send the Access-Request, it gives me the error "No authenticate method (Auth-Type) configuration found for the request: Rejecting the user". Please help me. Did I missed any configuration? In sites-available/de

Re: COA default configuration...Need help to test radclient

2010-05-17 Thread Johan Meiring
On 2010/05/15 08:28 AM, Alan DeKok wrote: ... Do I have to do anything more than any default configuration? In 2.1.8, there's an example CoA server in raddb/sites-available/coa The coa example was missing from 2.1.8. Please have a look here. http://github.com/alandekok/freeradius-server

Re: COA default configuration...Need help to test radclient

2010-05-15 Thread Eric Martell
May 16 01:43:22 2010 : Info: Ready to process requests. Thanks. --- On Sat, 5/15/10, Alan DeKok wrote: From: Alan DeKok Subject: Re: COA default configuration...Need help to test radclient To: "FreeRadius users mailing list" Date: Saturday, May 15, 2010, 9:43 AM Eric Martell

Re: COA default configuration...Need help to test radclient

2010-05-15 Thread Alan DeKok
Eric Martell wrote: > Hi Alan, >Thanks for the reply. Pardon my ignorance but as you mentioned I did > not find raddb/sites-available/coa. >In 2.1.8, there's an example CoA server in raddb/sites-available/coa Ah... it's in 2.1.9, then. See http://git.freeradius.org/pre/ for a "pre

Re: COA default configuration...Need help to test radclient

2010-05-15 Thread Eric Martell
Hi Alan,      Thanks for the reply. Pardon my ignorance but as you mentioned I did not find raddb/sites-available/coa. In 2.1.8, there's an example CoA server in raddb/sites-available/coa I only see, # ls -lart sites-available/ total 124 -rw-r- 1 root root  2538 May 14 15:37 vmps -rw-r---

Re: COA default configuration...Need help to test radclient

2010-05-14 Thread Alan DeKok
Eric Martell wrote: > I followed the direction of how to setup COA in the freeradius. > Uncommented from client.conf coa_server = localhost-coa > > When I ran the sample radclient, I am not seeing any response back. ... > Do I have to do anything more than any default configuration? In 2.1.8,

RE: plz help me: access-reject

2010-05-05 Thread dorra aa
> Date: Wed, 5 May 2010 11:08:28 -0400 > From: jden...@redhat.com > To: freeradius-users@lists.freeradius.org > Subject: Re: plz help me: access-reject > CC: a.l.m.bu...@lboro.ac.uk > > On 05/05/2010 11:01 AM, Alan Buxey wrote: > > Hi, > > > >>

Re: plz help me: access-reject

2010-05-05 Thread John Dennis
On 05/05/2010 11:01 AM, Alan Buxey wrote: Hi, Mr Alan i do it but always the same result: r...@pfe-laptop:/home/pfe/freeradius-server-2.1.8# radtest sonia salut 127.0.0.1:1812 1812 testing123 Sending Access-Request of id 76 to 127.0.0.1 port 1812 User-Name = "sonia" User-Password = "

Re: plz help me: access-reject

2010-05-05 Thread Alan Buxey
Hi, > Mr Alan i do it but always the same result: > r...@pfe-laptop:/home/pfe/freeradius-server-2.1.8# radtest sonia salut > 127.0.0.1:1812 1812 testing123 > Sending Access-Request of id 76 to 127.0.0.1 port 1812 > User-Name = "sonia" > User-Password = "salut" > NAS-IP-Address = 127.0

Re: plz help me: access-reject

2010-05-05 Thread John Dennis
On 05/05/2010 06:38 AM, dorra aa wrote: Mr Alan i do it but always the same result: "The definition of insanity is doing the same thing over and over and expecting different results. " -Benjamin Franklin plz can you give me the steps that i may to do more then that. plz help

<    1   2   3   4   5   6   7   8   9   10   >