Re: EAP-TLS problem

2013-02-18 Thread Phil Mayers
On 02/18/2013 06:31 AM, Tobias Hachmer wrote: Hello Muhammad, On 18.02.2013 07:17, Muhammad Nadeem wrote: Now I want to practically test EAP-TLS with freeradius on REDHAT 5. I have configured eap.confg to use EAP-TLS. But i don't know , how to send requests to freeradius server, so that he can

Re: EAP-TLS problem

2013-02-18 Thread A . L . M . Buxey
Hi, Thankfully, this isn't correct. You can use eapol_test which comes with the wpa_supplicant source to test pretty much every EAP type there is, including EAP-TLS. To the OP - download wpa_supplicant sources and build eapol_test. eapol_test is VERY powerful.and there are even little

Re: EAP-TLS problem

2013-02-18 Thread Muhammad Nadeem
On 2/18/13, Phil Mayers p.may...@imperial.ac.uk wrote: On 02/18/2013 06:31 AM, Tobias Hachmer wrote: Hello Muhammad, On 18.02.2013 07:17, Muhammad Nadeem wrote: Now I want to practically test EAP-TLS with freeradius on REDHAT 5. I have configured eap.confg to use EAP-TLS. But i don't know ,

Re: EAP-TLS problem

2013-02-18 Thread Muhammad Nadeem
On 2/18/13, a.l.m.bu...@lboro.ac.uk a.l.m.bu...@lboro.ac.uk wrote: Hi, Thankfully, this isn't correct. You can use eapol_test which comes with the wpa_supplicant source to test pretty much every EAP type there is, including EAP-TLS. To the OP - download wpa_supplicant sources and build

Re: EAP-TLS problem

2013-02-18 Thread A . L . M . Buxey
Hi, (but this mailing list isnt a support forum for either of those tools!) I guess you dont read what I post..which means I'm not likely to answer you. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS problem

2013-02-18 Thread Phil Mayers
On 18/02/13 10:57, Muhammad Nadeem wrote: ca_cert=/usr/local/etc/raddb/certs/ca.pem client_cert=/usr/local/etc/raddb/certs/client.pem private_kry=/usr/local/etc/raddb/certs/server.key ^^^ typo - should be client.key This is basic stuff; please read the docs for wpa_supplicant/eapol_test

Re: EAP-TLS problem

2013-02-17 Thread Tobias Hachmer
Hello Muhammad, On 18.02.2013 07:17, Muhammad Nadeem wrote: Now I want to practically test EAP-TLS with freeradius on REDHAT 5. I have configured eap.confg to use EAP-TLS. But i don't know , how to send requests to freeradius server, so that he can authenticate the user using TLS (with digital

Re: EAP-TLS problem

2007-06-06 Thread deepak kumar
hi shantunu see my comments below.. On 6/5/07, shantanu choudhary [EMAIL PROTECTED] wrote: hi all, i m trying to get EAP-TLS working for free radius, but i m not able to figure out how to handle all those certificates. You need one CA , one server certificate and one client certificate,

RE: EAP-TLS problem

2007-06-06 Thread Wolfgang Burger
On Tue, 5 Jun 2007 17:37:23 +0100 (BST) shantanu choudhary [EMAIL PROTECTED] wrote: If u know really gud online help available please let me kno Try http://homepage.mac.com/andreaswolf/public/wpaeap.html It won´t make you understand certificates. But it allows you to set up a running solution.

Re: EAP-TLS problem

2007-06-06 Thread shantanu choudhary
hi all thanks for support, i have created certificates using openssl and scripts provided on link http://www.alphacore.net/contrib/nantes-wireless/eap-tls-HOWTO.html i have created root.der(this is self signed certificate) file and clt.pem and using them with wpa_supplicant. even when my server

Re: EAP-TLS problem

2007-06-06 Thread A . L . M . Buxey
Hi, i have created certificates using openssl and scripts provided on link http://www.alphacore.net/contrib/nantes-wireless/eap-tls-HOWTO.html i have created root.der(this is self signed certificate) file and clt.pem and using them with wpa_supplicant. download the latest CVS version - eg

Re: EAP-TLS problem

2007-06-06 Thread tnt
problem is when i start my server and client server is showing output :- rad_recv: Access-Request packet from host 192.168.2.183:1026, id=2, length=177 Ignoring request from unknown client 192.168.2.183:1026 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request.

Re: Eap-Tls Problem

2006-08-25 Thread Matteo Lazzarini
K. Hoercher wrote: Hi, so Matteo is trying to setup wireless 8021x auth with freeradius. Eventually most of the information happened to end in -devel, where I asked him to stop mailing to, because I'm quite convinced that his problems don't belong there. That said, dpkg -s freeradius openssl

Re: Eap-Tls Problem

2006-08-23 Thread Matteo Lazzarini
K. Hoercher wrote: Hi, so Matteo is trying to setup wireless 8021x auth with freeradius. Eventually most of the information happened to end in -devel, where I asked him to stop mailing to, because I'm quite convinced that his problems don't belong there. That said, dpkg -s freeradius openssl

Re: Eap/TLS Problem !!

2006-06-20 Thread Alessandro Agostini
Emerson ha scritto: Dear Freeradius user's, ... Anyone Can Help-me, i need this Radius Server Working.Thak's to all.. Emerson I see your log. Seem an error similar to my one. In my case, with AP 3Com, was a problem of my certificate on server radius, and also a problem with

Re: Eap/TLS Problem !!

2006-06-20 Thread Stefan Winter
Hi! However Stefan, on this list, suggested me to user SecureW2 supplicant and all my problem is disappeared. See my post at the benginning of month. While that's the best thing to do, there may be people forced to go with the built-in supplicant and that have to care about the ertificate

Re: EAP-TLS problem with Intel PROSet 7.1.4.4

2005-11-29 Thread Alan DeKok
Michelle Lin [EMAIL PROTECTED] wrote: However, the same certifcate doesn't work with an older NIC card/NIC software on a different laptop. It's a software problem. The supplicant is broken. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: EAP/TLS Problem

2005-07-20 Thread Thomas Tinsley
Hamid, I have set up all components and I am getting following message. any help will be appreciated. using openssl fedora core 3 radius latest release Q: Was the fedora installation originally using the freeradius-1.0.2.rpm package? If so, then the

RE: EAP/TLS Problem

2004-12-13 Thread Guy Davies
Hi Mathias, Yep, build from source and configure with the --disable-shared option. Regards, Guy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mathias Röhl Sent: 13 December 2004 16:13 To: [EMAIL PROTECTED] Subject: EAP/TLS Problem Hi

RE: EAP/TLS Problem

2004-12-13 Thread Mathias Röhl
Am Mo, den 13.12.2004 schrieb Guy Davies um 17:27: Hi Mathias, Hi Guy Yep, build from source and configure with the --disable-shared option. oki, thx. But in my mind, is this the only option I need ? Nothing more to do ? eg linking the openssl lib regards [EMAIL PROTECTED] -

Re: EAP-TLS problem

2004-08-17 Thread Ester URUEÑA
[EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, August 05, 2004 4:56 PM Subject: Re: EAP-TLS problem hi ester: we use freeradius.1.0.0-pre3 for our internal testing and i haven't seen this problem. but i've seen similar problems in prior release. some pointers that COULD help (try

Re: EAP-TLS problem

2004-08-04 Thread Ester Urueña
/ ? I run it as a user from /home/uruena/downloadrad/monradius/sbin/ - Original Message - From: Ester URUEÑA [EMAIL PROTECTED] Date: Mon, 2 Aug 2004 23:21:40 +0200 Subject: Re: EAP-TLS problem To: [EMAIL PROTECTED] I am trying to authenticate

Re: EAP-TLS problem

2004-08-02 Thread Nick Hall
Does freeradius run as a user with permissions to /home/uruena/ ? - Original Message - From: Ester URUEÑA [EMAIL PROTECTED] Date: Mon, 2 Aug 2004 23:21:40 +0200 Subject: Re: EAP-TLS problem To: [EMAIL PROTECTED] I am trying to authenticate Windows XP clients (using EAP-TLS

Re: EAP-TLS problem

2004-07-30 Thread Alan DeKok
=?iso-8859-1?q?Ester=20Urue=F1a?= [EMAIL PROTECTED] wrote: I am trying to authenticate Windows XP clients (using EAP-TLS) through a Lucent WavePoint-II AP with freeradius (the third pre-release of version 1.0.0) in a Linux Red Hat machine. The version of the openssl I am using is 0.9.7d.

Re: EAP/TLS problem: Received unexpected tunneled data after successful handshake

2004-03-11 Thread Pavol Zibrita
Hi! rlm_eap_tls: Received unexpected tunneled data after successful handshake. The conf file is default for the build apart from the location of the certs, and tls is uncommented to enable. I have attempted to run the server as root as ssl can be difficult with permissions. Below is debug

Re: EAP/TLS problem: Received unexpected tunneled data after successful handshake

2004-03-11 Thread Lefteris St
rlm_eap_tls: Received unexpected tunneled data after successful handshake. I had the same problem a while ago. It turned out the error lay with the generated certificates. I never pinpointed the exact problem (i fiddled with the scripts a lot), so i can't give any detailed solution but i'd

Re: EAP/TLS problem: Received unexpected tunneled data after

2004-01-28 Thread Alan DeKok
Lefteris St [EMAIL PROTECTED] wrote: I noticed someone else having from with TLV i am not sure what that is, but i got a rlm_eap_peap: Had sent TLV failure, rejecting. Any hints there? PLEASE read the ENTIRE debugging output. I know it's large, but it's the ONLY WAY to see what's

Re: EAP/TLS problem: Received unexpected tunneled data after successful handshake

2004-01-27 Thread Alan DeKok
Lefteris St [EMAIL PROTECTED] wrote: I think i have configured everything properly (openssl certs and stuff) but i still can't get freeradius to authenticate EAP users properly. It succeeds, which means you've got it working right. The problem is that it goes too far. I'm not sure why,

Re: EAP/TLS problem: Received unexpected tunneled data after successful handshake

2004-01-27 Thread Lefteris St
What client are you using, and how have you configured it? I am using a Cisco Aironet 1200. I configured it to use Open Authentication with EAP, set the radius server IP and shared secret. I did all these through the AP's html interface. On the user side were running window 2000 with SP4 and the

Re: EAP/TLS problem: Received unexpected tunneled data after successful handshake

2004-01-27 Thread Alan DeKok
Lefteris St [EMAIL PROTECTED] wrote: On the user side were running window 2000 with SP4 and the authentication patch. Ok... but the configuration is more than just use EAP-TLS. Please describe *exactly* the configuration you used. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: EAP-TLS problem.

2004-01-27 Thread Yiannis Samouhos
Yes the problem is on the Snapshot. I just compiled 0.9.3 release and it works fine. -Yiannis *** REPLY SEPARATOR *** On 27/1/2004 at 10:36 Yiannis Samouhos wrote: Hi all gurus of the world. Very Sorry for this HUGE Email but I have a problem configuring EAP with TLS.

Re: EAP-TLS problem.

2004-01-27 Thread Alan DeKok
Yiannis Samouhos [EMAIL PROTECTED] wrote: I have a problem configuring EAP with TLS. EAP with no TLS works fine. This is the message I see even tho all files under certs are there and the compilation was errorless. That doesn't mean everything compiled. It meant that nothing had *errors*

Re: EAP-TLS problem.

2004-01-27 Thread Yiannis Samouhos
Yes indeed what I meant is that there were no crash brakes on the compilation. /usr/local/lib/rlm_eap_tls.la for 0.9.3 it looks like it's there, there's no mschapv2 and peap in the release though. :( I am recompiling the snapshot again to look it up a bit closer.. *** REPLY

Re: EAP/TLS problem: Received unexpected tunneled data after

2004-01-27 Thread Lefteris St
Ok, here's some more info about my configuration on the user-side: I have installed the client and CA certificates (cert-clt.p12, root.der) which I created using the script described in Ken Roser's How-To (doc/EAP/TLS.pdf). They seem to be working fine (the TLS handshake doesn't complain about

Re: EAP/TLS problem: Received unexpected tunneled data after

2004-01-27 Thread Yiannis Samouhos
Lefteri, Rule of thumb. If you have a Cisco AP you should use AAA, For a Cisco client you don't need AAA. -Yiannis *** REPLY SEPARATOR *** On 27/1/2004 at 2:13 ìì Lefteris St wrote: Ok, here's some more info about my configuration on the user-side: I have installed the

Re: EAP-TLS problem.

2004-01-27 Thread Alan DeKok
Yiannis Samouhos [EMAIL PROTECTED] wrote: Funny, everything compiles except radeapclient.c and the installer brakes there .. Ok. I've fixed it in the latest CVS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP/TLS problem: Received unexpected tunneled data after

2004-01-27 Thread Alan DeKok
Lefteris St [EMAIL PROTECTED] wrote: Note that since i don't have winXP, i use my card's software to detect and connect to my AP. Hmm... I'm not sure if that software has been tested with FreeRADIUS. I have also tried using PEAP and TTLS(SecureW2) but (as was expected) to no avail. The