RE: openLDAP freeRADIUS

2008-06-30 Thread William E. Russell
, New Jersey 07740 Home #: 732-752-2037 Cell #: 732-744-6483 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Alan DeKok Sent: Thursday, June 26, 2008 4:36 AM To: FreeRadius users mailing list Subject: Re: openLDAP freeRADIUS William E. Russell wrote

Re: openLDAP freeRADIUS

2008-06-30 Thread Alan DeKok
William E. Russell wrote: Can you explain how I would get step 2 to work? How do I verify it isn't binding as user? Run in debug mode. If it says bind as user it's binding as the user. And I believe step 3 is success for me, if I am not mistaken, so if you could provide a little

RE: openLDAP freeRADIUS

2008-06-27 Thread William E. Russell
07740 Home #: 732-752-2037 Cell #: 732-744-6483 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Alan DeKok Sent: Thursday, June 26, 2008 4:36 AM To: FreeRadius users mailing list Subject: Re: openLDAP freeRADIUS William E. Russell wrote: I have

RE: openLDAP freeRADIUS

2008-06-27 Thread Ivan Kalik
Below is the whole output. I have two questions: 1. Is this correct because I kinda think this is the problem. -- peap { default_eap_type = mschapv2 copy_request_to_tunnel = yes use_tunneled_reply = yes proxy_tunneled_request_as_eap = yes } 2. How can I tell what

Re: openLDAP freeRADIUS

2008-06-27 Thread Alan DeKok
William E. Russell wrote: Below is the whole output. Did you follow the steps I suggested? If not, why not? 2. How can I tell what MSCHAPv2 didn't like about the previous packet? I still believe it is a password styled issue. I have tried NT hash, cleartext, etc. nothing works. Did you

Re: openLDAP freeRADIUS

2008-06-26 Thread Mustapha Bouikhif
William E. Russell a écrit : All, I am currently working with openLDAP and freeRADIUS. I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2: Invalid response type 4.

Re: openLDAP freeRADIUS

2008-06-26 Thread Alan DeKok
William E. Russell wrote: I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2: Invalid response type 4. From my hours of searching online, I have realized that all this means

RE: openLDAP freeRADIUS

2008-06-26 Thread William E. Russell
list Subject: Re: openLDAP freeRADIUS William E. Russell wrote: I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2: Invalid response type 4. From my hours of searching online

RE: openLDAP freeRADIUS

2008-06-26 Thread Jason Alderfer
, June 26, 2008 4:36 AM To: FreeRadius users mailing list Subject: Re: openLDAP freeRADIUS William E. Russell wrote: I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2

openLDAP freeRADIUS

2008-06-25 Thread William E. Russell
All, I am currently working with openLDAP and freeRADIUS. I have correctly set up freeRADIUS to read from my openLDAP. I can't seem to authenticate my user. I have narrowed down the error to a single line, rlm_eap_mschapv2: Invalid response type 4. From my hours of searching

Re: OpenLDAP + FreeRADIUS Complete Solution [sec=unclassified]

2007-09-14 Thread Mitch McCracken
, 14 September 2007 04:18 To: FreeRadius users mailing list Subject: Re: OpenLDAP + FreeRADIUS Complete Solution O/H Mitch McCracken έγραψε: When organizations grow, there becomes more and more systems that need to be maintained, and each may have different configurations

OpenLDAP + FreeRADIUS Complete Solution

2007-09-13 Thread Mitch McCracken
When organizations grow, there becomes more and more systems that need to be maintained, and each may have different configurations and users which have access to them. Individually editing local config files gets old pretty fast for hundred of devices, and developing a unified and central

Re: OpenLDAP + FreeRADIUS Complete Solution

2007-09-13 Thread Kostas Kalevras
O/H Mitch McCracken έγραψε: When organizations grow, there becomes more and more systems that need to be maintained, and each may have different configurations and users which have access to them. Individually editing local config files gets old pretty fast for hundred of devices, and

RE: OpenLDAP + FreeRADIUS Complete Solution [sec=unclassified]

2007-09-13 Thread Ranner, Frank MR
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kostas Kalevras Sent: Friday, 14 September 2007 04:18 To: FreeRadius users mailing list Subject: Re: OpenLDAP + FreeRADIUS Complete Solution O/H Mitch McCracken έγραψε: When organizations grow

Re: Openldap - Freeradius - auto vlan

2007-07-27 Thread Fabio Silva
it... anybody has anything like this ? Regards, On 7/26/07, Alan DeKok [EMAIL PROTECTED] wrote: Fabio Silva wrote: Hi all, i need to configure a system that works with openldap + freeradius and that assign the vlan automatic to the users... does anybody has any howto to do it? Read your NAS

Openldap - Freeradius - auto vlan

2007-07-26 Thread Fabio Silva
Hi all, i need to configure a system that works with openldap + freeradius and that assign the vlan automatic to the users... does anybody has any howto to do it? I read this one: http://www.freeradius.org/radiusd/doc/ldap_howto.txt but, the versions of the softwares is very old, and in some

Re: Openldap - Freeradius - auto vlan

2007-07-26 Thread Alan DeKok
Fabio Silva wrote: Hi all, i need to configure a system that works with openldap + freeradius and that assign the vlan automatic to the users... does anybody has any howto to do it? Read your NAS documentation on what attributes it needs to assign a VLAN. Then, make FreeRADIUS send them

Re: Problem with OpenLDAP + FreeRADIUS

2007-06-22 Thread Alan DeKok
gosha-necr wrote: Hi all! I'm setup Samba PDC (3.0.25a) + LDAP and i want that users connect to the internet throught VPN using their LDAP credentials. I think it will be MPD + FreeRADIUS. But when i'm try to configure radius work with ldap it get me error. I use this HOW-TO:

Re: Problem with OpenLDAP + FreeRADIUS

2007-06-22 Thread gosha-necr
Thanks for answer, but this solution is first what i'm check. I'm set chmod -R 444 ./raddb chmod 555 ./raddb and nothing changes. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem with OpenLDAP + FreeRADIUS

2007-06-21 Thread gosha-necr
Hi all! I'm setup Samba PDC (3.0.25a) + LDAP and i want that users connect to the internet throught VPN using their LDAP credentials. I think it will be MPD + FreeRADIUS. But when i'm try to configure radius work with ldap it get me error. I use this HOW-TO:

openldap+freeradius+Cisco

2006-10-27 Thread [EMAIL PROTECTED]
Hi, I'm tryingto authenticate and authorize Cisco routers administrators But not the autorization (privilege level).so not wheni add "aaa authorization exec default group radiusvrf if-authenticated"to the cisco router to be able to manage privileges with radius. to make it work, i think i need to

Re: openldap+freeradius+Cisco

2006-10-27 Thread [EMAIL PROTECTED]
27/10/06 à 10h27 De : "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> A : freeradius-users@lists.freeradius.org Copie à : Objet : openldap+freeradius+Cisco Hi, I'm tryingto authenticate and authorize Cisco routers administrators But not the autorization (privilege level).so not wheni a

SOLVED: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-18 Thread Douglas G. Phillips
On Wed, 2005-05-11 at 17:28 -0500, Douglas G. Phillips wrote: The problem is this: If I pass the radtest client a clear-text password, authentication is successful. If either I pass the client an encrypted password (copied from the logs) or point the 5350 at the radius server, it doesn't

OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Douglas G. Phillips
I'm running into an issue here, and I can't seem to find the forest for the trees. I'm probably overlooking something obvious, and am not searching correctly for the problem. Our LDAP server is using crypted passwords at the moment. The router is a cisco 5350. RADIUS is FreeRADIUS 1.0.1-2 on

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Vladimir Vuksan
Douglas G. Phillips wrote: Here is a sample of the password that is being passed: User-Password = \240d\351E\3737\025\022\0227,(rest removed) This may imply that your shared secret is incorrect. Please verify that RADIUS shared secret on Cisco 5350 and shared secret for that particular IP in

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Alan DeKok
Douglas G. Phillips [EMAIL PROTECTED] wrote: Our LDAP server is using crypted passwords at the moment. RADIUS clients can use PAP. Nothing else. The problem is this: If I pass the radtest client a clear-text password, authentication is successful. If either I pass the client an encrypted

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Julien freeradius
Hello Douglas, The password that you try to resend is not the encrypted password it s an ascii representation of your encrypted password. I assume that you need to activate the chap (or pap with a encryption_scheme = crypt) module to be able to authenticate this request. I don't know about

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Alexei Chetroi
On Wed, May 11, 2005 at 05:28:27PM -0500, Douglas G. Phillips wrote: Date: Wed, 11 May 2005 17:28:27 -0500 From: Douglas G. Phillips [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: OpenLDAP / FreeRADIUS / Cisco 5350 problem I'm running into an issue here, and I can't

OpenLDAP, FreeRADIUS and Cisco 3030

2004-06-24 Thread Seth Law
I need to be able to authenticate our 3030 Concentrator against FreeRADIUS with OpenLDAP as the database. I'm using FreeRADIUS 1.0.0rc2. FreeRADIUS and OpenLDAP are working (using radtest I get successful replies). However, when I add the freeradius server to the Concentrators list of

OpenLDAP, FreeRadius and CHAP? Help!

2004-06-22 Thread Andre Cameron
I have FreeRadius Server setup and working with an LDAP backend. We are adding new wireless devices that authenticate with CHAP to the radius server. I have to add user id's and passwords to the Radius files for this to work as CHAP auth doesnt seem to read from LDAP. How can I fix this??

Re: OpenLDAP, FreeRadius and CHAP? Help!

2004-06-22 Thread Alan DeKok
Andre Cameron [EMAIL PROTECTED] wrote: I have FreeRadius Server setup and working with an LDAP backend. We are adding new wireless devices that authenticate with CHAP to the radius server. I have to add user id's and passwords to the Radius files for this to work as CHAP auth doesnt seem

Re: OpenLDAP, FreeRadius and CHAP? Help!

2004-06-22 Thread Paul Bender
Andre Cameron wrote: I have FreeRadius Server setup and working with an LDAP backend. We are adding new wireless devices that authenticate with CHAP to the radius server. I have to add user id's and passwords to the Radius files for this to work as CHAP auth doesnt seem to read from LDAP.