Re: WiFi Mac address authentication

2006-04-13 Thread Guillaume
thanks for your help, i'll try this asap and provide feedback. 2006/4/12, brainstorm [EMAIL PROTECTED]: Solved the problem a couple of weeks ago... the error was actually in eap.conf, the following two attributes were required when the MAC check was active: peap: copy_request_to_tunnel = no

Re: WiFi Mac address authentication

2006-04-12 Thread brainstorm
Solved the problem a couple of weeks ago... the error was actually in eap.conf, the following two attributes were required when the MAC check was active: peap: copy_request_to_tunnel = no peap: use_tunneled_reply = no I set them both to yes and it worked ! Thanks for your support. Hmm. I

Re: WiFi Mac address authentication

2006-03-23 Thread brainstorm
I've tried your recommendations but it does not work as expected: using Reject as rlm_passwd's authtype (as you suggested), the user is always rejected, even when the MAC is in the file and is actually found: modcall[authorize]: module MAC-IP returns ok for request 0 Furthermore, if I change

Re: WiFi Mac address authentication

2006-03-23 Thread Phil Mayers
brainstorm wrote: I've tried your recommendations but it does not work as expected: using Reject as rlm_passwd's authtype (as you suggested), the user is always rejected, even when the MAC is in the file and is actually found: Yes sorry, that was wrong. Clearly authtype = Reject will fail the

Re: WiFi Mac address authentication

2006-03-13 Thread Phil Mayers
brainstorm wrote: I'm trying to implement a similar scenario: I am using PEAP, and I want to check if a given mac is in my database. In my case, the MACs file looks like this: 0030.0996.CF52:192.168.12.1 I would like to match the first field (MAC) with the NAS Calling-Station-Id attribute, if

Re: WiFi Mac address authentication

2006-03-13 Thread brainstorm
Please read the docs. This comments right above the passwd module in the default config are VERY SPECIFIC. The format is: format = *Key-Value:~Request-Value:=Reply-Value:Configure-Value That is, the radius attribute Key-Value is the first field. Request-Value (prefix ~) will be added to

Re: WiFi Mac address authentication

2006-03-12 Thread brainstorm
I'm trying to implement a similar scenario: I am using PEAP, and I want to check if a given mac is in my database. In my case, the MACs file looks like this: 0030.0996.CF52:192.168.12.1 I would like to match the first field (MAC) with the NAS Calling-Station-Id attribute, if this check fails, I

Re: WiFi Mac address authentication

2006-03-07 Thread Guillaume
2006/3/3, Alan DeKok [EMAIL PROTECTED]: Guillaume [EMAIL PROTECTED] wrote: I try to set a mac authentication and a certificates based authentication, but in the freeradius.cnf i dont find any entry for loading a list of authorised MAC address. That's because the server doesn't come

WiFi Mac address authentication

2006-03-03 Thread Guillaume
Hi guys! I recently install a freeradius for test purpose in a WiFi environement. But, i still a a problem, and I hope that you will be able to help me. The radius server version is: 1.0.4. I try to set a mac authentication and a certificates based authentication, but in the freeradius.cnf i dont

Re: WiFi Mac address authentication

2006-03-03 Thread Alan DeKok
Guillaume [EMAIL PROTECTED] wrote: I try to set a mac authentication and a certificates based authentication, but in the freeradius.cnf i dont find any entry for loading a list of authorised MAC address. That's because the server doesn't come pre-configured to run on your local system.