RE: Password-Retry attribute

2012-02-16 Thread Morris, Andi
Andi -Original Message- From: freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org [mailto:freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org] On Behalf Of Phil Mayers Sent: 16 February 2012 09:50 To: freeradius-users@lists.freeradius.org Subject: Re: Password-

Re: Password-Retry attribute

2012-02-16 Thread Phil Mayers
On 02/16/2012 09:35 AM, Morris, Andi wrote: Hi all, I’m trying to configure my freeradius server to prompt the user to retype their credentials if they mistype the username or password so that they can be authenticated via dot1x. Does your NAS support this attribute? You are sending it just fi

Password-Retry attribute

2012-02-16 Thread Morris, Andi
Post-Auth-Type REJECT { attr_filter.access_reject } } So then looked inside attr_filter.access_reject and added the Password-Retry attribute as below: DEFAULT EAP-Message =* ANY, State =* ANY, Message-Authenticator =* ANY, Reply-Mess

Using counters or Password-Retry attribute (RFC2869)

2005-11-03 Thread Martin . Ward
Hi all, I am having another go at trying to implement a "maximum login attempts" using FreeRadius. >From what I can glean from the documentation and files I (currently) have two choices: 1. Use the Password-Retry attribute as per RFC2869. This attribute is used in Access-R