Re: MS-CHAP and LDAP HOWTOs (Sorry very long)

2004-10-05 Thread Andreas Haumer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Alan DeKok wrote: Andrew Werbowy [EMAIL PROTECTED] wrote: I belive you are right about LDAP query not comming back from LDAP server That's not what I meant. I meant that there's no data which FreeRADIUS can use coming back. Please

Re: MS-CHAP and LDAP HOWTOs (Sorry very long)

2004-10-05 Thread Alan DeKok
Andreas Haumer [EMAIL PROTECTED] wrote: Please configure a clear-text password for the user in the LDAP entry for that user. See doc/ldap_howto.txt. Until you configure a clear-text password which FreeRADIUS can retrieve, MS-CHAP will never work. Hm... Are you sure? ;-)) You can

Re: MS-CHAP and LDAP HOWTOs (Sorry very long)

2004-10-05 Thread Andreas Haumer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Alan DeKok wrote: Andreas Haumer [EMAIL PROTECTED] wrote: Please configure a clear-text password for the user in the LDAP entry for that user. See doc/ldap_howto.txt. Until you configure a clear-text password which FreeRADIUS can retrieve,

Re: MS-CHAP and LDAP HOWTOs (Sorry very long)

2004-10-05 Thread Alan DeKok
Andreas Haumer [EMAIL PROTECTED] wrote: The biggest problem currently is IMHO the huge amount of outdated or semi-complete documentation one will find out there when using google or the mail-archives! Submit some documentation, and we'll include it. But the documentation should consist of

Re: MS-CHAP and LDAP HOWTOs (Sorry very long)

2004-10-05 Thread Stefan . Neis
Andreas Haumer schrieb: FreeRADIUS is an additional piece and fits fine in the whole system to allow those networks to provide encrypted VPN access with easy to use clients and still maintain a central database of accounts in the network. Note however, that MPPE with it's keys derived

MS-CHAP and LDAP HOWTOs

2004-09-30 Thread Andrew Werbowy
Hi, Are there any MS-CHAP howtos out there? This is what I get and cannot pass this issue: Any ideas? Nothing to do. Sleeping until we see a request.rad_recv: Access-Request packet from host 1.155.6.61:32781, id=124, length=139 Service-Type = Framed-User Framed-Protocol = PPP User-Name =

Re: MS-CHAP and LDAP HOWTOs

2004-09-30 Thread Kostas Kalevras
On Thu, 30 Sep 2004, Andrew Werbowy wrote: Hi, Are there any MS-CHAP howtos out there? No, but the same question is posted each day in the users list. Check doc/rlm_ldap on how to configure rlm_ldap to extract user passwords. This is what I get and cannot pass this issue: Any ideas?

Re: MS-CHAP and LDAP HOWTOs

2004-09-30 Thread Alan DeKok
nAndrew Werbowy [EMAIL PROTECTED] wrote: Are there any MS-CHAP howtos out there? No. If you configure a user clear-text password for that user, then MS-CHAP will work. This is what I get and cannot pass this issue: Any ideas? Try the users file example I posted yesterday. i.e. Stop

Re: MS-CHAP and LDAP HOWTOs

2004-09-30 Thread Andrew Werbowy
I did setup what you send me earlier and it does work. As soon as we try to do connect via wireless windows laptop (uses MS-CHAP) it does not work. Looks like LDAP password is in clear text and MS-CHAP encrypted and Radius cannot compare the two. [EMAIL PROTECTED] 9/30/2004 11:44:01 AM

Re: MS-CHAP and LDAP HOWTOs

2004-09-30 Thread Alan DeKok
Andrew Werbowy [EMAIL PROTECTED] wrote: I did setup what you send me earlier and it does work. Ok... As soon as we try to do connect via wireless windows laptop (uses MS-CHAP) it does not work. Can you post the *complete* debug log? So far, you've been posting the final reject message.

Re: MS-CHAP and LDAP HOWTOs (long)

2004-09-30 Thread Andrew Werbowy
here it is. Top part is startup in debug mode and below actual MS-CHAP login attempt: [EMAIL PROTECTED] raddb]# /usr/local/sbin/radiusd -X -AStarting - reading configuration files ...reread_config: reading radiusd.confConfig: including file: /usr/local/etc/raddb/proxy.confConfig: including

Re: MS-CHAP and LDAP HOWTOs (long)

2004-09-30 Thread Alan DeKok
Andrew Werbowy [EMAIL PROTECTED] wrote: here it is. Top part is startup in debug mode and below actual MS-CHAP login attempt: ... rlm_ldap: performing user authorization for tor_sysop_2 radius_xlat: '(uid=tor_sysop_2)' radius_xlat: 'o=cbcsrc' rlm_ldap: ldap_get_conn: Checking Id: 0

Re: MS-CHAP and LDAP HOWTOs (Sorry very long)

2004-09-30 Thread Andrew Werbowy
I belive you are right about LDAP query not comming back from LDAP server I turned on ldap_debug = 1 and shows this: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0** Response Queue: Emptyldap_chkResponseList for msgid=1, all=1ldap_chkResponseList returns NULL

Re: MS-CHAP and LDAP HOWTOs (Sorry very long)

2004-09-30 Thread Alan DeKok
Andrew Werbowy [EMAIL PROTECTED] wrote: I belive you are right about LDAP query not comming back from LDAP server That's not what I meant. I meant that there's no data which FreeRADIUS can use coming back. Please configure a clear-text password for the user in the LDAP entry for that