configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread Angelica Delgado
We have our freeradius setup to authenticate with Active Directory for EAP. Currently, it uses the samaccountname but we want to use UPN instead. We get NT_STATUS_NO_SUCH_USER when testing with ntlm through command line. ntlm_auth --request-nt-key --domain=test.local --username=tu...@pub.com

Re: configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread Alan DeKok
Angelica Delgado wrote: We have our freeradius setup to authenticate with Active Directory for EAP. Currently, it uses the samaccountname but we want to use UPN instead. We get NT_STATUS_NO_SUCH_USER when testing with ntlm through command line. ntlm_auth --request-nt-key

RE: configure freeradius to use UPN instead of samaccountname

2013-10-14 Thread stefan.paetow
Of Angelica Delgado Sent: 14 October 2013 21:51 To: FreeRadius users mailing list Subject: configure freeradius to use UPN instead of samaccountname We have our freeradius setup to authenticate with Active Directory for EAP. Currently, it uses the samaccountname but we want to use UPN instead. We

Re: How to best configure Radius for my domain ?

2013-07-12 Thread Alan DeKok
Analyser Great wrote: I am trying to setup a configuration where network admins have access to all devices and users have only access to cisco vpn. I don't wanna use local user database since I already have Ldap to authorize and Kerberos to authenticate. How do you do this in your domain

How to best configure Radius for my domain ?

2013-07-11 Thread Analyser Great
I am not sure what I am doing wrong but I am just banging my head on a simple problem. I am trying to upgrade from radius 1 to radius 2 and will be using an entire set of new configuration. Currently, I am checking an Ldap attribute dialupaccess to allow users to get access to vpn / network

Re: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-19 Thread pramod kulkarni
Thanks for the reply. I am new to FreeRadius and doing analysis on how to remove The identity and password attributes of LDAP module in radiusd.config and still be able to authenticate and authorize LDAP users. Is there any other option/configuration to avoid usernames and plain text passwords

Re: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-19 Thread Olivier Beytrison
On 19.04.2013 10:35, pramod kulkarni wrote: Thanks for the reply. I am new to FreeRadius and doing analysis on how to remove The identity and password attributes of LDAP module in radiusd.config and still be able to authenticate and authorize LDAP users. Is that really an issue for you ?

Re: Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-10 Thread John Dennis
usernames and passwords from LDAP server if yes on EAP-TLS can you please tell me how to configure EAP-TLS with LDAP as backend datastore. This is a nonsensical question, EAP-TLS uses certificates. You do not yet understand some of the basics. You need to invest some time in learning

Re: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-10 Thread Arran Cudbard-Bell
There are other ways to establish the trust between radiusd and LDAP beside simple binds which do not involve passwords. All of these use SASL in some form. Unfortunately rlm_ldap does not support them. I know Alan rewrote rlm_ldap recently for the upcoming 3.0 version, I don't know if

Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-09 Thread pramod kulkarni
Hi, I am working on RADIUS with LDAP as backend for authenticating users. I configured rlm_ldap on RADIUS server with username and plaintext password and I am able to authenticate RADIUS client using LDAP. But I want to configure RADIUS server with certificates instead of using usernames

Re: Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-09 Thread John Dennis
. But I want to configure RADIUS server with certificates instead of using usernames and passwords. Please guide me how to achieve this,is there any help/doc how to configure LDAP SASL bind for RADIUS Server. Waiting for your inputs. Thanks and Regards, You can't with the current rlm_ldap

Re: Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-09 Thread pramod kulkarni
please tell me how to configure EAP-TLS with LDAP as backend datastore. Basically I want to avoid harcoded usernames and passwords in raddb of RADIUS server for authenticating users which I am doing currently . ldap { server = localhost # identity = cn=admin,o=My Org,c=UA identity = uid

Re: [Help] - How To configure Radius timeout / count retries

2013-03-04 Thread Danny Kurniawan
. It's not supported by the protocol. You need to configure them manually on each Access Point. If you want redundancy try using something like VRRP or Anycast. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Best Regards, Danny - List info

Re: [Help] - How To configure Radius timeout / count retries

2013-03-01 Thread Arran Cudbard-Bell
talking about when you use FreeRADIUS to forward packets onto another RADIUS server. FreeRADIUS cannot tell the Access Point about alternative RADIUS servers in the same cluster. It's not supported by the protocol. You need to configure them manually on each Access Point. If you want redundancy try

[Help] - How To configure Radius timeout / count retries

2013-02-28 Thread Danny Kurniawan
Hi All, Let say for example in our Wireless AP (access point) we can put 2 Radius server in sequence, radiusA and radiusB. I know the AP will eventually look at the 1st server, and if its not available (let say server is down) then it will go to the 2nd radius server (I only assume this). So is

Re: [Help] - How To configure Radius timeout / count retries

2013-02-28 Thread Arran Cudbard-Bell
is there any way in Radius conf we can set the retries or timeout, so for example after failed for 2 times (no matter what is the error is) it will goes to the other radius server? You're asking whether you can configure FreeRADIUS to inform the access point that it should fail over to another

Re: [Help] - How To configure Radius timeout / count retries

2013-02-28 Thread Danny Kurniawan
Hello, This is what i want to do : You're asking whether you can configure FreeRADIUS to inform the access point that it should fail over to another server server after a given number of timeouts/retries? Thanks Danny -- Best Regards, Danny - List info/subscribe/unsubscribe? See http

Re: [Help] - How To configure Radius timeout / count retries

2013-02-28 Thread Danny Kurniawan
Out of topic : All, btw how can i make sure that when i reply in this mailing list it appears after the previous post ? I dont receieve any of your reply in my email and i have to go to the archive list to reply this. Thanks -- Best Regards, Danny - List info/subscribe/unsubscribe? See

Re: [Help] - How To configure Radius timeout / count retries

2013-02-28 Thread Arran Cudbard-Bell
On 1 Mar 2013, at 00:20, Danny Kurniawan danny.kurnia...@fairchildsemi.com wrote: Out of topic : All, btw how can i make sure that when i reply in this mailing list it appears after the previous post ? I dont receieve any of your reply in my email and i have to go to the archive list to

Re: [Help] - How To configure Radius timeout / count retries

2013-02-28 Thread Danny Kurniawan
No worries, i receive this mailing list on my email now.. OK, so i also understand that we can only configure that from the AP side. But unfortunately we cant find that in the Meraki AP ... let me check with our vendor on it. Thanks Danny On Fri, Mar 1, 2013 at 2:26 PM, Arran Cudbard-Bell

Re: [Help] - How To configure Radius timeout / count retries

2013-02-28 Thread Danny Kurniawan
this). ** ** So is there any way in Radius conf we can set the retries or timeout, so for example after failed for 2 times (no matter what is the error is) it will goes to the other radius server? * You're asking whether you can configure FreeRADIUS to inform the access point that it should fail over

RE: Configure Huntgroups

2012-11-28 Thread Arshad Khan
Any one kindly reply. Regards, Arshad Ahmed Network Engineer From: arshadkha...@hotmail.com To: freeradius-users@lists.freeradius.org Subject: Configure Huntgroups Date: Tue, 27 Nov 2012 10:01:19 +0500 Hi, I have configure multiple hunt groups for different purposes like VPN (VPN

Configure Huntgroups

2012-11-26 Thread Arshad Khan
Hi, I have configure multiple hunt groups for different purposes like VPN (VPN Server IP), Netflow Services (Netflow Server IP) and hence define their respective group in Window Active directory platform. Now, i need to provide time base VPN access to some users so i made a group in active

Re: configure challenge..

2012-09-05 Thread Klaus Klein
Am 05.09.2012 04:56, schrieb Rod Luzic: this is the kind of @## () response one can see online from these ignorant retards (+ online bravery!) who wrote some sucking code for this almost dead so called protocol. doesn't get it. Then why do you wast more of - your time looking into an almost

Re: configure challenge..

2012-09-05 Thread Alan DeKok
Rod Luzic wrote: this is the kind of @## () response one can see online from these ignorant retards (+ online bravery!) who wrote some sucking code for this almost dead so called protocol. doesn't get it. Congratulations. You've been unsubscribed and banned. Alan DeKok. - List

Re: configure challenge..

2012-09-05 Thread Alan DeKok
Klaus Klein wrote: To me it seems you don't get it! Give the time frame and the threats, it's likely that this idiot is just the previous one under a new name. Doing a net search for this guys name and email address returns nothing. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: configure challenge..

2012-09-04 Thread Alan DeKok
Rod Luzic wrote: put some links dummy- people have their own features to worry about unlike spend whole life doing this almost obsolete Radius stuff like you. how would one configure A-C. damn simple question. Be nice, or you will be unsubscribed and banned. The issue of Access-Challenge

Re: configure challenge..

2012-09-04 Thread Alan DeKok
Rod Luzic wrote: This bloke alan dekok seems to think he is some kind of linus torvald just by writing this mediocre patchy radius code. Exactly. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect Alan DeKok. - List info/subscribe/unsubscribe? See

Re: configure challenge..

2012-09-04 Thread Arran Cudbard-Bell
On 4 Sep 2012, at 05:21, Rod Luzic rodlu...@yahoo.com wrote: put some links dummy- people have their own features to worry about unlike spend whole life doing this almost obsolete Radius stuff like you. how would one configure A-C. damn simple question. and what features would those

Re: configure challenge..

2012-09-04 Thread Alan DeKok
Arran Cudbard-Bell wrote: On 4 Sep 2012, at 05:21, Rod Luzic rodlu...@yahoo.com wrote: put some links dummy- people have their own features to worry about unlike spend whole life doing this almost obsolete Radius stuff like you. how would one configure A-C. damn simple question

Re: configure challenge..

2012-09-04 Thread Rod Luzic
list freeradius-users@lists.freeradius.org Sent: Tuesday, September 4, 2012 2:37 AM Subject: Re: configure challenge.. Arran Cudbard-Bell wrote: On 4 Sep 2012, at 05:21, Rod Luzic rodlu...@yahoo.com wrote: put some links dummy- people have their own features to worry about unlike spend

Re: configure challenge..

2012-09-03 Thread David Mitton
@lists.freeradius.org freeradius-users@lists.freeradius.org Sent: Monday, September 3, 2012 12:36 PM Subject: configure challenge.. any example on how to configure the server to send A-C?   of course I did see arrogant and disgusting thread here: http://freeradius.1045715.n5.nabble.com/Access-Challenge

Re: configure challenge..

2012-09-03 Thread Rod Luzic
put some links dummy- people have their own features to worry about unlike spend whole life doing this almost obsolete Radius stuff like you. how would one configure A-C. damn simple question. From: David Mitton da...@mitton.com To: freeradius-users

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread Stefan Winter
Hi, I am struggling to configure my FreeRADIUS server for eduroam (www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out problem for several years, identifying

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread Scott Armitage
On 28 Jun 2012, at 02:54, Olivier Nicole wrote: Hi, I am struggling to configure my FreeRADIUS server for eduroam (www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread alan buxey
Hi, I have been running my FreeRADIUS server with out problem for several years, identifying to an openLdap backend. I managed to configure a test WiFi access point to identify with 802.1x against that same radius/ldap server. But I have a problem to configure eduroam, so I would be glad

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread Olivier Nicole
. - how to implement anonymous outer identity? What to configure in Radius? Is there any configuration needed in the suplicant? Best regards, Olivier On Thu, Jun 28, 2012 at 1:21 PM, Stefan Winter stefan.win...@restena.lu wrote: Hi, I am struggling to configure my FreeRADIUS server for eduroam

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread alan buxey
to put traffic from a particular NAS into a particualr virtual server - how to implement anonymous outer identity? What to configure in Radius? Is there any configuration needed in the suplicant? the RADIUS server will just handle it - it will get to the EAP part and open the tunnel to see

Help needed to configure FreeRADIUS for eduroam

2012-06-27 Thread Olivier Nicole
Hi, I am struggling to configure my FreeRADIUS server for eduroam (www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out problem for several years, identifying to an openLdap

Configure FreeRadius to send CoA-ACK

2012-06-18 Thread Gennaro Leo
Hi all, I installed FreeRadius and sent some Accounting Request through radclient but the server replies always with a CoA-NAK... how can I configure it to send CoA-ACK? Which file must be modified? Thanks in advance. Gennaro - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: Configure FreeRadius to send CoA-ACK

2012-06-18 Thread Alan DeKok
or a CoA-NAK. As *always*, read the debugging output. how can I configure it to send CoA-ACK? Which file must be modified? The debugging output tells you. Read it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configure FreeRadius to send CoA-ACK

2012-06-18 Thread Gennaro Leo
This is the output debug, honestly I can't understand why CoA-NAK is sent. rad_recv: CoA-Request packet from host 10.42.154.231 port 35046***Packet*** Code: 43 NAS-IP-Address = 10.10.10.10 Acct-Session-Id = #000111#1#002 ERX-Attr-58 =

Re: Configure FreeRadius to send CoA-ACK

2012-06-18 Thread Matthew Newton
On Mon, Jun 18, 2012 at 03:59:46PM +0200, Gennaro Leo wrote: rad_recv: CoA-Request packet from host 10.42.154.231 port That's a CoA-Request, then, not an Accounting-Request 35046***Packet*** Code: 43 NAS-IP-Address = 10.10.10.10 Acct-Session-Id =

Re: Configure FreeRadius to send CoA-ACK

2012-06-18 Thread Alan DeKok
Gennaro Leo wrote: This is the output debug, honestly I can't understand why CoA-NAK is sent. .. server coa { No such virtual server coa No such virtual server coa } # server coa Sending CoA-NAK of id 0 to 10.42.154.231 port 35046 Finished request 1. It would help if there was a coa

How to configure Solaris 10 Radius Authentication client.

2012-06-04 Thread Alek Barsky
Hi Guys, I need to configure bunch of Solaris servers to use RADIUS PAM for Authentication/Authorization. I followed instructions in http://freeradius.org/pam_radius_auth/ and was able to configure Authentication portion of this task. There is one problem - the only way I can receive login

Re: How to configure Solaris 10 Radius Authentication client.

2012-06-04 Thread Alan DeKok
Alek Barsky wrote: There is one problem – the only way I can receive login shell on this box – if user already exists. That's how PAM works. It makes PAM rather a lot less useful. But that's PAM for you. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: How to configure Solaris 10 Radius Authentication client.

2012-06-04 Thread Michael Hocke
-BEGIN PGP SIGNED MESSAGE- On Jun 4, 2012, at 2:06 PM, Alek Barsky wrote: I need to configure bunch of Solaris servers to use RADIUS PAM for Authentication/Authorization. PAM only does authentication. After all, it stands for Pluggable Authentication Modules. I followed

Re: How to configure COA in freeRadius

2012-04-06 Thread Alan DeKok
ulislam.raihan wrote: If NAS and Freeradius server is in same PC . Then freeradius will send COA request to NAS in which port? This is documented. You were told which file to read. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to configure COA in freeRadius

2012-04-06 Thread ulislam.raihan
5 13:49:52 2012 : Info: Do CoA Fail handler here I have check with the netstat command in the OS that a java program is listening to the port 4200. Do i have to configure the NAS client IP and port in home_server section of originate-coa file ? Thanks for your pa·tience Best Reagards Raihan

Re: How to configure COA in freeRadius

2012-04-06 Thread ulislam.raihan
is right. Thanks for your patience Best Reagards Raihan -- View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-COA-in-freeRadius-tp5620185p5622373.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http

Re: How to configure COA in freeRadius

2012-04-06 Thread Alan DeKok
the radiusd shows below. Thu Apr 5 13:49:52 2012 : Info: WARNING: Unknown destination 127.0.0.1:4200 for CoA request. Yes... because you didn't configure the shared secret for CoA. I have check with the netstat command in the OS that a java program is listening to the port 4200

Re: How to configure COA in freeRadius

2012-04-06 Thread ulislam.raihan
for CoA request. Yes... because you didn't configure the shared secret for CoA. To Alan where i configure the secret for CoA? I hope in clients.conf. Then it will look like this client 127.0.01 { secret = testing123-2 shortname = private-network-2

Re: How to configure COA in freeRadius

2012-04-06 Thread ulislam.raihan
Hi Alan , That was my question in second post. So i have to mention the CoA port in home_server section of originate-coa file . If my understanding is right Where i configure the secret for CoA? I hope in clients.conf. Then it will look like this client 127.0.01 { secret

Re: How to configure COA in freeRadius

2012-04-06 Thread Alan DeKok
ulislam.raihan wrote: Quoted from: http://freeradius.1045715.n5.nabble.com/How-to-configure-COA-in-freeRadius-tp5620185p5622396.html If you're going to insist on being obtuse, you can be unsubscribed and banned. You either didn't read the configuration you posted, or you didn't understand

Re: How to configure COA in freeRadius

2012-04-06 Thread ulislam.raihan
in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-COA-in-freeRadius-tp5620185p5623347.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to configure COA in freeRadius

2012-04-05 Thread ulislam.raihan
wht i have to configure more or what is the problem ? The output from radius server is below rad_recv: Access-Request packet from host 127.0.0.1 port 57378, id=1, length=59 User-Name = testing NAS-IP-Address = 127.0.0.1 NAS-Port = 4200 User-Password = password Thu Apr 5 13:49:52

Re: How to configure COA in freeRadius

2012-04-05 Thread Alan DeKok
ulislam.raihan wrote: I have put the following COA list in authorization section of default file. The default file is /etc/freeradius/sits-available to enable the COA request. update coa{ User-Name=%{User-Name} Acct-Session-Id=%Acct-Session-Id

Re: How to configure COA in freeRadius

2012-04-05 Thread ulislam.raihan
Hi Alan, I must be very dumb ..i have read that document several times. But can you clear me one thing for the freeradius to sent COA request to other client one need to configure a virtual server Thanks raihan -- View this message in context: http://freeradius.1045715.n5.nabble.com/How

Re: How to configure COA in freeRadius

2012-04-05 Thread Alan DeKok
ulislam.raihan wrote: I must be very dumb ..i have read that document several times. But can you clear me one thing for the freeradius to sent COA request to other client one need to configure a virtual server If you're going to use CoA, it would be a good idea to follow the existing

Re: How to configure COA in freeRadius

2012-04-05 Thread ulislam.raihan
If NAS and Freeradius server is in same PC . Then freeradius will send COA request to NAS in which port? Thanks Raihan -- View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-COA-in-freeRadius-tp5620185p5621170.html Sent from the FreeRadius - User mailing

Re: How to configure FreeRadius as Captive Portal

2012-03-14 Thread Tim White
On 13/03/12 21:41, Fabricio Flores wrote: Hello... I Have a question... Which captive portal is the best? I tried to configure in CentOS coovachilli and is very hard to install and configuring... Grase Hotspot is easier? Grase Hotspot uses Coova Chilli internally, but does the work of setting

Re: How to configure FreeRadius as Captive Portal

2012-03-13 Thread ulislam.raihan
Hi Tim Thanks for your advice. I will try with the Grase Hotspot. It seems very interesting Thanks Raihan -- View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-FreeRadius-as-Captive-Portal-tp5559073p5560331.html Sent from the FreeRadius - User mailing list

Re: How to configure FreeRadius as Captive Portal

2012-03-13 Thread Fabricio Flores
Hello... I Have a question... Which captive portal is the best? I tried to configure in CentOS coovachilli and is very hard to install and configuring... Grase Hotspot is easier? El 13 de marzo de 2012 03:42, ulislam.raihan raihan1...@gmail.comescribió: Hi Tim Thanks for your advice. I

How to configure FreeRadius as Captive Portal

2012-03-12 Thread ulislam.raihan
Hi All, I am a new person using freeRadius server. I have a wireless access point with WPA authentication option. It does not have any support for 802.1x or configuring Radius server.But i want to implement some central security using Radius server.Is it possible to configure the FreeRadius

Re: How to configure FreeRadius as Captive Portal

2012-03-12 Thread Alan Buxey
Hi, I am a new person using freeRadius server. I have a wireless access point with WPA authentication option. It does not have any support for 802.1x or configuring Radius server.But i want to implement some central security using Radius server.Is it possible to configure the FreeRadius

Re: How to configure FreeRadius as Captive Portal

2012-03-12 Thread ulislam.raihan
Hi Alan, Thanks for your advice. Is it possible to configure the DHCP module in freeRadius in such a way that at first the DHCP will gave ip address of from one subnet like 192.168.1.X and afterwards after authentication is done then DHCP will force to change the IP address to different IP

Re: How to configure FreeRadius as Captive Portal

2012-03-12 Thread Tim White
On 13/03/12 07:33, ulislam.raihan wrote: 192.168.2.X. I am planing to write a small module in Java . Whn a device attached to Access Point. It will get IP from192.168.1.X and all the request from this ip range will go to the java program. It will get the user name and password from the user

How to configure redundant radius?

2011-12-30 Thread Christ Schlacta
I've got a number of devices all of which only have the option for one radius IP address (not hostname!) to be configured. How can I configure this type of device for failover (and optionally balance)? is there some PROPER way to do this? or am I limited to only being able to have one fr

Re: How to configure redundant radius?

2011-12-30 Thread Alan DeKok
Christ Schlacta wrote: I've got a number of devices all of which only have the option for one radius IP address (not hostname!) to be configured. How can I configure this type of device for failover (and optionally balance)? is there some PROPER way to do this? or am I limited to only being

Re: How to configure redundant radius?

2011-12-30 Thread Christ Schlacta
to coerce these single-ip devices to work with a pair or more of radius servers, or no other way to configure reliable failover ? On 12/30/2011 11:37, Alan DeKok wrote: Christ Schlacta wrote: I've got a number of devices all of which only have the option for one radius IP address

Re: How to configure redundant radius?

2011-12-30 Thread Толик Шавловский
radius IP address (not hostname!) to be configured. How can I configure this type of device for failover (and optionally balance)? is there some PROPER way to do this? or am I limited to only being able to have one fr server configured for these particular devices? - List info/subscribe

Re: How to configure redundant radius?

2011-12-30 Thread Alan DeKok
. Maybe you should concentrate on fixing those systems rather than trying to add complexity. Is there no other way to coerce these single-ip devices to work with a pair or more of radius servers, or no other way to configure reliable failover ? Magic. Alan DeKok. - List info/subscribe

Re: How to configure proxy server to send a copy of acct to remote/home server

2011-10-27 Thread tonimanel
). Any idea? -- View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-proxy-server-to-send-a-copy-of-acct-to-remote-home-server-tp2843198p4942508.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http

how to configure

2011-10-17 Thread Harish Mandowara
Dear all, How to configure freeradius server with netgear WNR3500L access point with these three entities. Authentication server (Freeradius)- Access Pint(Netgear)Mobile Terminal (My PC). -- Warm Regards Harish Mandowara -- This message has been scanned for viruses

Trying to configure Cisco WLC 5500 for radius auth

2011-10-05 Thread Jefferson Davis
Hi all, Trying to configure our cisco WLC's to play nice with freeradius... Looking for some pointers to get the two of them talking. Will have windows, linux, and personal devices like smartphones connecting, though I suspect the bulk will be smartphones. I would rather not hand out the PSK

Re: Trying to configure Cisco WLC 5500 for radius auth

2011-10-05 Thread Phil Mayers
On 05/10/11 15:49, Jefferson Davis wrote: Hi all, Trying to configure our cisco WLC's to play nice with freeradius... Looking for some pointers to get the two of them talking. Will have windows, linux, and personal devices like smartphones connecting, though I suspect the bulk

How to configure radius based on the isakmp group profile

2011-07-27 Thread Jevos, Peter
-Authentic = Local Acct-Status-Type = Start NAS-Port-Type = Virtual NAS-Port = 20 NAS-IP-Address = 10.1.1.1 How should I configure freeradius to accept request for this group (isakmp-group-id=CiscoGroup ) only for users, that are authenticated against Auth-Type

Re: How to configure radius based on the isakmp group profile

2011-07-27 Thread Arran Cudbard-Bell
should I configure freeradius to accept request for this group (isakmp-group-id=CiscoGroup ) only for users, that are authenticated against Auth-Type := ntlm_auth_vpn_osw ( already used and working ) ? However other groups ( or profiles ) should be authenticated against Auth-Type

How to configure radius based on the isakmp group profile

2011-07-27 Thread Jevos, Peter
-progress=No Progress Acct-Authentic = Local Acct-Status-Type = Start NAS-Port-Type = Virtual NAS-Port = 20 NAS-IP-Address = 10.1.1.1 How should I configure freeradius to accept request for this group (isakmp-group-id=CiscoGroup ) only for users

./configure/make in subdir?

2011-06-30 Thread Phil Mayers
Does anyone know if it's possible to persuade ./configure to work from within subdirs? I keep flipping back and forth between master and v2.1.x and it would be nice to be able to re-use builds without having to have two git repos associated hassles. I've seen syntax like this work on some

Re: ./configure/make in subdir?

2011-06-30 Thread Alan DeKok
Phil Mayers wrote: Does anyone know if it's possible to persuade ./configure to work from within subdirs? I keep flipping back and forth between master and v2.1.x and it would be nice to be able to re-use builds without having to have two git repos associated hassles. I just use two git

Re: ./configure/make in subdir?

2011-06-30 Thread Phil Mayers
On 30/06/11 15:59, Alan DeKok wrote: Phil Mayers wrote: Does anyone know if it's possible to persuade ./configure to work from within subdirs? I keep flipping back and forth between master and v2.1.x and it would be nice to be able to re-use builds without having to have two git repos

How to configure freeradius client?

2011-05-06 Thread Meyer Jerome
to configure the client? 3) How should I configure the client? Should some deamon to be start? Any help would be appreciated and thanks in advance, Best regards Freundliche Grüsse _ Jérôme M. Meyer Network Engineer IWB Telekom, Margarethenstrasse 40, 4002 Basel Telefon

Re: How to configure freeradius client?

2011-05-06 Thread Alan DeKok
„how to configure the client“? See raddb/clients.conf. 3) How should I configure the client? Should some deamon to be start? This is documented. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

AW: How to configure freeradius client?

2011-05-06 Thread Meyer Jerome
the NAS-IP-Address? 2) I don’t find any right document about „how to configure the client“? See raddb/clients.conf. This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server and not the reverse! 3

Re: How to configure freeradius client?

2011-05-06 Thread YvesDM
? radclient: no response from server for ID 120 socket 3 1) I don’t know what’s the NAS-IP-Address? 2) I don’t find any right document about „how to configure the client“? See raddb/clients.conf. This file it is on the server to check which clients will be connected

Re: AW: How to configure freeradius client?

2011-05-06 Thread Alan DeKok
and not the reverse! Really? 3) How should I configure the client? Should some deamon to be start? This is documented. You means on the MAN pages? The existing documentation includes more than just the man pages. Go read it. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: How to configure freeradius client?

2011-05-06 Thread Fajar A. Nugraha
to configure the client“?  See raddb/clients.conf. This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server and not the reverse! Let's try a different approach, to see if you can understand this better

AW: How to configure freeradius client?

2011-05-06 Thread Meyer Jerome
) I don't know what's the NAS-IP-Address? 2) I don't find any right document about how to configure the client? See raddb/clients.conf. This file it is on the server to check which clients will be connected! Is it on the client too? Because the client should connect to the server

AW: How to configure freeradius client?

2011-05-06 Thread Meyer Jerome
+jerome.meyer=iwbtelekom...@lists.freeradius.org] Im Auftrag von Fajar A. Nugraha Gesendet: Freitag, 6. Mai 2011 17:23 An: FreeRadius users mailing list Betreff: Re: How to configure freeradius client? On Fri, May 6, 2011 at 10:01 PM, Meyer Jerome jerome.me...@iwbtelekom.ch wrote: Should the client

AW: AW: How to configure freeradius client?

2011-05-06 Thread Meyer Jerome
and not the reverse! Really? 3) How should I configure the client? Should some deamon to be start? This is documented. You means on the MAN pages? The existing documentation includes more than just the man pages. Go read it. You means... from wiki pages? Alan DeKok. - List info

Re: AW: AW: How to configure freeradius client?

2011-05-06 Thread Alan DeKok
Meyer Jerome wrote: The existing documentation includes more than just the man pages. Go read it. You means... from wiki pages? If you insist on being obtuse, you don't *have* to be on this list. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: configure radius to write detailed log to multiple files

2010-12-02 Thread kabilius smith
Great, thank you both. I will give it a try right now. On Wed, Dec 1, 2010 at 1:12 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, to add a second detail module, simply copy the first one and add a name to it ie the first detail file will have something like this... detail { blah

Re: configure radius to write detailed log to multiple files

2010-12-01 Thread Johan Meiring
On 2010/12/01 09:05 PM, kabilius smith wrote: Hi Alan, I tried adding another detail module like the following: detail { detailfile = c:/testfolder/testfile.log detailperm = 0777 } detail { detailfile = c:/testfolder/testfile1.log detailperm = 0777 } Do the

Re: configure radius to write detailed log to multiple files

2010-12-01 Thread Alan Buxey
Hi, to add a second detail module, simply copy the first one and add a name to it ie the first detail file will have something like this... detail { blah blah blah blah } change this to detail detail1 { blah blah blah blah } and now make a second file (you can do it all in one file

Re: configure output summary

2010-11-19 Thread Josip Rodin
On Fri, Nov 19, 2010 at 09:21:11AM +0200, Johan Meiring wrote: I agree that a lot of newbies will not read it, but if _one_ person reads it a month, it will mean less questions on the list! That's actually the wrong solution to that particular problem. Newbies should stop compiling whenever

Re: configure output summary

2010-11-19 Thread ironrake
But newcomers aren't that trained yet. Perhaps you should change your course material? Sent from Verizon Wireless - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: configure output summary

2010-11-19 Thread Stefan Winter
Hi, But newcomers aren't that trained yet. Perhaps you should change your course material? I wasn't referring to my course in particular. It's just one instance where I can see how innocent users perceive things when they come across them first time. I.e. you should read 'newcomers' as

Re: configure output summary

2010-11-18 Thread Josip Rodin
On Wed, Nov 17, 2010 at 07:53:02AM +0100, Stefan Winter wrote: I think it would generally make sense to put a summary output of configure at the end of its run, so that one can easily see which modules will be disabled. In an acute case of bash script fiddling, I created the attached

Re: configure output summary

2010-11-18 Thread Alan DeKok
Josip Rodin wrote: I've actually been a bit confused by the notion of having separate autoconf installations/invocation in multiple subdirectories. The point of that would seem to be that if you just want to reconfigure and rebuild one particular part, you can do it. But who ever does that?

  1   2   3   4   5   >