Distriubtion Recommendation

2010-11-03 Thread Johnson, Neil M
Which Linux Distro is recommended for running FreeRadius 2.1 ? I'm looking to avoid having to compile Samba by hand. Thanks. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa 319 384-0938 neil-john...@uiowa.edu - List info/subscribe/unsubscribe?

Re: Distriubtion Recommendation

2010-11-03 Thread Alan DeKok
Johnson, Neil M wrote: Which Linux Distro is recommended for running FreeRadius 2.1 ? Debian, Ubuntu, Suse, etc. all are fine. For Samba... look for at least 3.4.9 or 3.5.6. If it isn't available, you'll have to compile it by hand. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Distriubtion Recommendation

2010-11-03 Thread John Dennis
On 11/03/2010 01:38 PM, Johnson, Neil M wrote: Which Linux Distro is recommended for running FreeRadius 2.1 ? I'm partial to Fedora :-) Fedora makes a point of being current, integrating the latest releases. Fedora releases on about a 6 month cycle, F14 was just released yesterday. Fedora

Re: Distriubtion Recommendation

2010-11-03 Thread Alan DeKok
John Dennis wrote: I'm partial to Fedora :-) Yes, sorry. John has been an active member contributing to FreeRADIUS, which has been very valuable. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Distriubtion Recommendation

2010-11-03 Thread Alan Buxey
Hi, I'm partial to Fedora :-) I agree. never had a problem with Fedora Core or CentOS with FR - be it a supplied RPM or a home build. very nice base OS to work with. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Recommendation

2010-08-18 Thread Phil Mayers
the password. The problem is *not* the tool used to retrieve the password. If I do have NT hashed passwords in LDAP, is PEAP with ntlm_auth the recommendation? No. MS-CHAP requires access to the NT hash to execute the challenge/response. This means you have 3 options: 1. Use a datastore containing

Re: Recommendation

2010-08-17 Thread Alan DeKok
Paul Dugas wrote: On Mon, Aug 16, 2010 at 5:02 PM, Alan DeKok al...@deployingradius.com wrote: Use PEAP. Ensure passwords are in a form compatible with PEAP: My LDAP directory contains NT, LM, and SSHA passwords but not clear-text so, if I'm following correctly, I need to look into using

Re: Recommendation

2010-08-17 Thread Paul Dugas
On Tue, Aug 17, 2010 at 2:44 AM, Alan DeKok al...@deployingradius.com wrote: Paul Dugas wrote: On Mon, Aug 16, 2010 at 5:02 PM, Alan DeKok al...@deployingradius.com wrote:  Use PEAP.  Ensure passwords are in a form compatible with PEAP: My LDAP directory contains NT, LM, and SSHA

Re: Recommendation

2010-08-17 Thread Alan DeKok
Paul Dugas wrote: The settings in NetworkManager on my Fedora Linux laptop, when I choose WPAWPA2-Enterprise and PEAP, allow MSCHAPv2 (default), MD5, and GTC for the inner authentication. I see on the protocol compatibility table you referenced that only clear-text and ntlm_auth are

Re: Recommendation

2010-08-17 Thread Paul Dugas
to retrieve the password. If I do have NT hashed passwords in LDAP, is PEAP with ntlm_auth the recommendation? Thanks for the guidance, Paul - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Recommendation

2010-08-17 Thread Alan DeKok
is *not* the tool used to retrieve the password. If I do have NT hashed passwords in LDAP, is PEAP with ntlm_auth the recommendation? No. I suggest reading my messages again. It's clear you don't understand what ntlm_auth does. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Recommendation

2010-08-17 Thread Paul Dugas
On Tue, Aug 17, 2010 at 4:29 PM, Alan DeKok al...@deployingradius.com wrote:  I suggest reading my messages again.  It's clear you don't understand what ntlm_auth does. Sorry if I've offended you. Are you saying that I should be able to enable ldap in inner-tunnel and it should be able to

Re: Recommendation

2010-08-17 Thread John Dennis
On 08/17/2010 05:31 PM, Paul Dugas wrote: On Tue, Aug 17, 2010 at 4:29 PM, Alan DeKokal...@deployingradius.com wrote: I suggest reading my messages again. It's clear you don't understand what ntlm_auth does. Sorry if I've offended you. Are you saying that I should be able to enable ldap

Recommendation

2010-08-16 Thread Paul Dugas
I've got an OpenLDAP directory using the SMB-LDAP schema and tools. Also have a FreeRadius 1.x instance setup to support authentication of PPTP users on my m0n0wall machine. The system has worked fine for a few years. I'm now looking to setup WPA2-Enterprises WiFi access and am looking for

Re: Recommendation

2010-08-16 Thread Alan DeKok
Paul Dugas wrote: I need to support primarily WinXP wireless clients but I also need my Linux (Fedora) machines to work as well as a few smartphones (Blackberry, iPhone, etc). Use PEAP. Ensure passwords are in a form compatible with PEAP:

Re: Recommendation

2010-08-16 Thread Paul Dugas
On Mon, Aug 16, 2010 at 5:02 PM, Alan DeKok al...@deployingradius.com wrote:  Use PEAP.  Ensure passwords are in a form compatible with PEAP: My LDAP directory contains NT, LM, and SSHA passwords but not clear-text so, if I'm following correctly, I need to look into using ntlm_auth. The docs

Re: Load testing tool recommendation

2008-05-14 Thread Anders Holm
Message - From: A L M Buxey [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, May 13, 2008 5:28:00 PM GMT +00:00 GMT Britain, Ireland, Portugal Subject: Re: Load testing tool recommendation Hi, Hmm.. I *am* referencing the radius server

Re: Load testing tool recommendation

2008-05-14 Thread Jens Link
Anders Holm [EMAIL PROTECTED] writes: Curious... It's a fairly beefy Linux box with GigE NIC What kind of NIC? There are some (cheap) cards which are using the CPU pretty heavily. cheers, Jens -- [EMAIL PROTECTED] Berlin: http://www.guug.de/lokal/berlin/index.html

Re: Load testing tool recommendation

2008-05-13 Thread Anders Holm
: Load testing tool recommendation Wireless could be the problem if you have some wireless links between radius server and your NAS. Alan DeKok wrote: Anders Holm wrote: In my tests, radclient has been /slower/ the radtest processes forked from a Perl script. 100 requests using my forking

Re: Load testing tool recommendation

2008-05-13 Thread A . L . M . Buxey
Hi, Nope, no wireless involved. Good thought though! :) its not doing DNS lookups each time is it? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Load testing tool recommendation

2008-05-13 Thread Anders Holm
-users@lists.freeradius.org Sent: Tuesday, May 13, 2008 2:55:56 PM GMT +00:00 GMT Britain, Ireland, Portugal Subject: Re: Load testing tool recommendation Hi, Nope, no wireless involved. Good thought though! :) its not doing DNS lookups each time is it? alan - List info/subscribe/unsubscribe? See

Re: Load testing tool recommendation

2008-05-13 Thread A . L . M . Buxey
Hi, Hmm.. I *am* referencing the radius server with FQDN ... Lemme flip that switch and see what I get to play with ... Good catch .. It's letting me ship some more packets through per second.. no final figures yet, but starting to hit 5k pkts/sec, though the radius server is still not

Re: Load testing tool recommendation

2008-05-11 Thread Alan DeKok
Anders Holm wrote: In my tests, radclient has been /slower/ the radtest processes forked from a Perl script. 100 requests using my forking Perl script takes 2.2 seconds to complete. 100 requests using radclient takes ~8x, i.e 16.7+ seconds to complete. You can run radclient -x to see

Re: Load testing tool recommendation

2008-05-11 Thread Marinko Tarlac
Wireless could be the problem if you have some wireless links between radius server and your NAS. Alan DeKok wrote: Anders Holm wrote: In my tests, radclient has been /slower/ the radtest processes forked from a Perl script. 100 requests using my forking Perl script takes 2.2 seconds to

Re: Load testing tool recommendation

2008-05-10 Thread Anders Holm
, that is a possibility as well ... //anders - Original Message - From: Ivan Kalik [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Friday, May 9, 2008 4:26:37 PM GMT +00:00 GMT Britain, Ireland, Portugal Subject: Re: Load testing tool recommendation http

Load testing tool recommendation

2008-05-09 Thread Anders Holm
So, I'm building a complete solution, from scratch. As such, the business owners have some requirements on how many requests it should be handle today per second and some point in the future as well. Would there be any good load testing tools, or some handy way to figure out how many tps my

Re: Load testing tool recommendation

2008-05-09 Thread Ivan Kalik
http://wiki.freeradius.org/Radclient Ivan Kalik Kalik Informatika ISP Dana 9/5/2008, Anders Holm [EMAIL PROTECTED] piše: So, I'm building a complete solution, from scratch. As such, the business owners have some requirements on how many requests it should be handle today per second and some