RE: openLDAP freeRADIUS

2008-06-30 Thread William E. Russell
, New Jersey 07740 Home #: 732-752-2037 Cell #: 732-744-6483 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Alan DeKok Sent: Thursday, June 26, 2008 4:36 AM To: FreeRadius users mailing list Subject: Re: openLDAP freeRADIUS William E. Russell wrote

Re: openLDAP freeRADIUS

2008-06-30 Thread Alan DeKok
William E. Russell wrote: Can you explain how I would get step 2 to work? How do I verify it isn't binding as user? Run in debug mode. If it says bind as user it's binding as the user. And I believe step 3 is success for me, if I am not mistaken, so if you could provide a little

RE: openLDAP freeRADIUS

2008-06-27 Thread William E. Russell
07740 Home #: 732-752-2037 Cell #: 732-744-6483 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Alan DeKok Sent: Thursday, June 26, 2008 4:36 AM To: FreeRadius users mailing list Subject: Re: openLDAP freeRADIUS William E. Russell wrote: I have

RE: openLDAP freeRADIUS

2008-06-27 Thread Ivan Kalik
Below is the whole output. I have two questions: 1. Is this correct because I kinda think this is the problem. -- peap { default_eap_type = mschapv2 copy_request_to_tunnel = yes use_tunneled_reply = yes proxy_tunneled_request_as_eap = yes } 2. How can I tell what

Re: openLDAP freeRADIUS

2008-06-27 Thread Alan DeKok
William E. Russell wrote: Below is the whole output. Did you follow the steps I suggested? If not, why not? 2. How can I tell what MSCHAPv2 didn't like about the previous packet? I still believe it is a password styled issue. I have tried NT hash, cleartext, etc. nothing works. Did you

Re: openLDAP freeRADIUS

2008-06-26 Thread Mustapha Bouikhif
William E. Russell a écrit : All, I am currently working with openLDAP and freeRADIUS. I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2: Invalid response type 4.

Re: openLDAP freeRADIUS

2008-06-26 Thread Alan DeKok
William E. Russell wrote: I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2: Invalid response type 4. From my hours of searching online, I have realized that all this means

RE: openLDAP freeRADIUS

2008-06-26 Thread William E. Russell
list Subject: Re: openLDAP freeRADIUS William E. Russell wrote: I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2: Invalid response type 4. From my hours of searching online

RE: openLDAP freeRADIUS

2008-06-26 Thread Jason Alderfer
, June 26, 2008 4:36 AM To: FreeRadius users mailing list Subject: Re: openLDAP freeRADIUS William E. Russell wrote: I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2

Re: OpenLDAP + FreeRADIUS Complete Solution [sec=unclassified]

2007-09-14 Thread Mitch McCracken
, 14 September 2007 04:18 To: FreeRadius users mailing list Subject: Re: OpenLDAP + FreeRADIUS Complete Solution O/H Mitch McCracken έγραψε: When organizations grow, there becomes more and more systems that need to be maintained, and each may have different configurations

Re: OpenLDAP + FreeRADIUS Complete Solution

2007-09-13 Thread Kostas Kalevras
O/H Mitch McCracken έγραψε: When organizations grow, there becomes more and more systems that need to be maintained, and each may have different configurations and users which have access to them. Individually editing local config files gets old pretty fast for hundred of devices, and

RE: OpenLDAP + FreeRADIUS Complete Solution [sec=unclassified]

2007-09-13 Thread Ranner, Frank MR
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kostas Kalevras Sent: Friday, 14 September 2007 04:18 To: FreeRadius users mailing list Subject: Re: OpenLDAP + FreeRADIUS Complete Solution O/H Mitch McCracken έγραψε: When organizations grow

Re: Openldap - Freeradius - auto vlan

2007-07-27 Thread Fabio Silva
Alan, ok, sorry... i configured the radius to get the users from LDAP, but i have some problems in configure the users file, i never install freeradius, i need to configure freeradius to authentic users using the 802.1x and then assign a vlan to that user... i didnt find documentation about it...

Re: Openldap - Freeradius - auto vlan

2007-07-26 Thread Alan DeKok
Fabio Silva wrote: Hi all, i need to configure a system that works with openldap + freeradius and that assign the vlan automatic to the users... does anybody has any howto to do it? Read your NAS documentation on what attributes it needs to assign a VLAN. Then, make FreeRADIUS send them.

Re: openldap+freeradius+Cisco

2006-10-27 Thread [EMAIL PROTECTED]
OK it works fine now with this in the users file: Robert Auth-Type = LDAP service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=1" but it is said in radius.conf not to use Auth-Type = LDAP. so is there an other solution to add this attributes in reply. Thomas Message du 27/10/06 à

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Vladimir Vuksan
Douglas G. Phillips wrote: Here is a sample of the password that is being passed: User-Password = \240d\351E\3737\025\022\0227,(rest removed) This may imply that your shared secret is incorrect. Please verify that RADIUS shared secret on Cisco 5350 and shared secret for that particular IP in

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Alan DeKok
Douglas G. Phillips [EMAIL PROTECTED] wrote: Our LDAP server is using crypted passwords at the moment. RADIUS clients can use PAP. Nothing else. The problem is this: If I pass the radtest client a clear-text password, authentication is successful. If either I pass the client an encrypted

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Julien freeradius
Hello Douglas, The password that you try to resend is not the encrypted password it s an ascii representation of your encrypted password. I assume that you need to activate the chap (or pap with a encryption_scheme = crypt) module to be able to authenticate this request. I don't know about

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Alexei Chetroi
On Wed, May 11, 2005 at 05:28:27PM -0500, Douglas G. Phillips wrote: Date: Wed, 11 May 2005 17:28:27 -0500 From: Douglas G. Phillips [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: OpenLDAP / FreeRADIUS / Cisco 5350 problem I'm running into an issue here, and I can't

Re: OpenLDAP, FreeRadius and CHAP? Help!

2004-06-22 Thread Alan DeKok
Andre Cameron [EMAIL PROTECTED] wrote: I have FreeRadius Server setup and working with an LDAP backend. We are adding new wireless devices that authenticate with CHAP to the radius server. I have to add user id's and passwords to the Radius files for this to work as CHAP auth doesnt seem

Re: OpenLDAP, FreeRadius and CHAP? Help!

2004-06-22 Thread Paul Bender
Andre Cameron wrote: I have FreeRadius Server setup and working with an LDAP backend. We are adding new wireless devices that authenticate with CHAP to the radius server. I have to add user id's and passwords to the Radius files for this to work as CHAP auth doesnt seem to read from LDAP.