RE: Failure authenticate using IPv6

2013-05-24 Thread Michael Sherman
Alan DeKok > Sent: Friday, May 24, 2013 9:57 AM > To: FreeRadius users mailing list > Subject: Re: Failure authenticate using IPv6 > > Stefan Winter wrote: > > I don't *know* why this doesn't work, but it does with our global- > scope > > addresses just fine,

Re: Failure authenticate using IPv6

2013-05-24 Thread Alan DeKok
Stefan Winter wrote: > I don't *know* why this doesn't work, but it does with our global-scope > addresses just fine, so I'm guessing it's the address type. > > Especially since link-local addresses are only valid with an interface > scope. Exactly. > is the valid address. I don't know if the

Re: Failure authenticate using IPv6

2013-05-24 Thread Phil Mayers
On 05/24/2013 05:18 AM, Stefan Winter wrote: simply isn't an IPv6 address Very true. "fe80::215:17ff:fed0:d278%eth0" is the valid address. I don't know if the FreeRADIUS address parser is prepared to handle such interface-scoped addresses. There's not much use case for this. Not sure I co

Re: Failure authenticate using IPv6

2013-05-23 Thread Stefan Winter
Hi, it's a very bad idea to use link-local addresses. You should use a global or ULA address instead. I don't *know* why this doesn't work, but it does with our global-scope addresses just fine, so I'm guessing it's the address type. Especially since link-local addresses are only valid with

RE: Failure authenticate using IPv6

2013-05-23 Thread Michael Sherman
> what does this do... > > client fe80::215:17ff:fed0:d278 { > secret = test > shortname = test-net > nastype = other > } > > ... ? > > alan > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html Same :( radiusd:

Re: Failure authenticate using IPv6

2013-05-22 Thread A . L . M . Buxey
Hi, >Here is the entry from the clients.conf: > >client goya { > > ipv6addr= fe80::215:17ff:fed0:d278 > ># netmask = 128 > > secret = test > > shortname = test-net > >} what does this do... client fe80::215