Re: Proxying PEAP/MSCHAP

2004-04-14 Thread Alan DeKok
Bob McCormick [EMAIL PROTECTED] wrote: If I include both of these lines: DEFAULTFreeRADIUS-Proxied-To =* 127.0.0.1, Proxy-To-Realm := LOCAL Hmm... I think that should have been !* instead of =*. Then the myrealm radius server does receive a request from the proxy, but issues the

Re: Proxying PEAP/MSCHAP

2004-04-14 Thread Bob McCormick
Woohoo!!! I think I finally got it to work! I put the following in the eap.conf file: peap { # The tunneled EAP session needs a default # EAP type which is separate from the one for # the non-tunneled

Re: Proxying PEAP/MSCHAP

2004-04-13 Thread Bob McCormick
Hmmm.. I must be doing something wrong. With this config in the users file: DEFAULT Proxy-To-Realm := adt.com Fall-Through = Yes DEFAULT EAP-Type == PEAP, Proxy-To-Realm := LOCAL Fall-Through = Yes It *is* sending something to my home radius server, but the home radius

Re: Proxying PEAP/MSCHAP

2004-04-13 Thread Bob McCormick
Sorry, I guess my description was a little vague. I want to handle on EAP types on the proxy radius server, but send the inner MS-CHAP request to another radius server. PEAP is the only one listed in my config right now just because it's the only one I've been testing with (I'm trying to

Proxying PEAP/MSCHAP

2004-04-12 Thread Bob McCormick
I read the post quoted below, and it seemed to indicate that it should be possible to get freeradius to handle PEAP or TTLS, and proxy the inner MSCHAP request to another radius server. Has anyone ever got this to work? I've tried, but I keep getting the following error message: WARNING:

Re: Proxying PEAP/MSCHAP

2004-04-12 Thread Alan DeKok
Bob McCormick [EMAIL PROTECTED] wrote: I read the post quoted below, and it seemed to indicate that it should be possible to get freeradius to handle PEAP or TTLS, and proxy the inner MSCHAP request to another radius server. Has anyone ever got this to work? I've tried, but I keep getting