Re: freeradius <=> MS IAS passthrough

2007-05-17 Thread Alan DeKok
Ian Savoy wrote: > What's happening, is when i use the radclient to auth DIRECTLY to the > IAS server, i get an Access-Accept response. However, when i use the > proxy, they are receiving an encrypted password...either that or an > incorrectly encrypted password that cannot be decrypted by thei

Re: freeradius <=> MS IAS passthrough

2007-05-17 Thread Ian Savoy
So, I made sure all of our settings were configured correctly in proxy.conf and in clients.conf. the way we tested, was i had the IAS server set the reply message to "yes" like John mentioned. This helped a great deal. What's happening, is when i use the radclient to auth DIRECTLY to the IAS

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread John Horne
On Wed, 2007-05-16 at 17:12 -0400, Ian Savoy wrote: > Is there anything else? > Hi, Not sure if it's still relevant but with our IAS servers the sysadmin made sure it set the reply message to "yes". If you test from freeradius to the IAS server using the 'radtest' command, and run freeradius as '

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Peter Nixon
On Wed 16 May 2007, Ian Savoy wrote: > Ya, we have realms setup, however we're failing to auth against each > other. Then you either have the wrong shared secret between your 2 servers, or you are testing the wrong user/password. What you are trying to do is trivial and covered by the documentat

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Dennis Skinner
Never say: >> it "just doesn't work." show us. Run radiusd -X and show us what is happening when you try and tell us what you think should be happening. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.free

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Ian Savoy
Privett > WCCS > - Original Message - > From: "Ian Savoy" <[EMAIL PROTECTED]> > To: "FreeRadius users mailing list" > Sent: Wednesday, May 16, 2007 3:37 PM > Subject: Re: freeradius <=> MS IAS passthrough > > > >> Ya, we hav

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Jory Privett
t; <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Wednesday, May 16, 2007 3:37 PM Subject: Re: freeradius <=> MS IAS passthrough > Ya, we have realms setup, however we're failing to auth against each > other. > > Jory Privett wrote: >> Realms

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Ian Savoy
> Sent: Wednesday, May 16, 2007 3:29 PM > Subject: Re: freeradius <=> MS IAS passthrough > > > >> by the way, we are dealing with freeradius 1.1.3. >> >> Ian Savoy wrote: >> >>> Does anyone have any specific tweaks to get MS IAS and f

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Jory Privett
Realms Jory Privett WCCS - Original Message - From: "Ian Savoy" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Wednesday, May 16, 2007 3:29 PM Subject: Re: freeradius <=> MS IAS passthrough > by the way, we are dealing with fr

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Ian Savoy
by the way, we are dealing with freeradius 1.1.3. Ian Savoy wrote: > Does anyone have any specific tweaks to get MS IAS and freeradius > "talking"? We're trying to share resources with another isp in the area > - their IAS server needs to be able to auth against our freeradius > server, and vi

freeradius <=> MS IAS passthrough

2007-05-16 Thread Ian Savoy
Does anyone have any specific tweaks to get MS IAS and freeradius "talking"? We're trying to share resources with another isp in the area - their IAS server needs to be able to auth against our freeradius server, and visa versa with our freeradius to their IAS. A link to a tutorial would be s