Re: [RADIATOR] Apple iOS 9 and OS X El Capitan

2015-07-28 Thread Klara Mall
Hi David, On Fri, Jul 24, 2015 at 03:17:50PM -0500, David Zych wrote: > In case anyone else out there is in the same boat... > > Last week, we noticed that Apple devices running the beta releases of El > Capitan and iOS 9 were unable to connect to our WPA2 Enterprise > networks, which authentic

Re: [RADIATOR] Hiding the LDAP Password attribute on Trace level 4 [SEC=UNCLASSIFIED]

2014-10-13 Thread Klara Mall
Hi, I totally agree with Vangelis. It's exactly the same for us here (usually with TTLS/PAP authentication). DEBUGWITHOUTPASSWORDS would be great. Regards Klara On Mon, Oct 13, 2014 at 10:24:20AM +0300, Vangelis Kyriakakis wrote: > Hello all, > >This separation of DEBUG levels would be

Re: [RADIATOR] AuthNTLM feature requests

2014-08-22 Thread Klara Mall
Hi, On Fri, Aug 22, 2014 at 01:09:42AM +0300, Heikki Vatiainen wrote: > On 08/21/2014 01:36 AM, Klara Mall wrote: > > But anyway this was the reason why I wanted the > > RewriteFunction to be applicable in AuthBy NTLM. I don't know with > > which auth methods one could h

Re: [RADIATOR] PEAP and realm check

2014-08-21 Thread Klara Mall
Hi, On Wed, Aug 20, 2014 at 09:27:30PM +0300, Heikki Vatiainen wrote: > [EAPAnonymous %0] > The difference is with the first tunnelled request which will have empty > User-Name. You could consider this: > > > ... > > > ... > > > > Filename /dev/null > > I just wanted to tell

Re: [RADIATOR] PEAP and realm check

2014-08-20 Thread Klara Mall
Hi, On Wed, Aug 20, 2014 at 09:27:30PM +0300, Heikki Vatiainen wrote: > On 08/20/2014 01:55 AM, Klara Mall wrote: > > > I think I prefer %0 to %u because then it would be identical to > > TTLS/PAP. > > The difference is with the first tunnelled request which will hav

Re: [RADIATOR] AuthNTLM feature requests

2014-08-20 Thread Klara Mall
Hi, On Wed, Aug 20, 2014 at 11:27:30PM +0300, Heikki Vatiainen wrote: > On 08/20/2014 02:27 AM, Klara Mall wrote: > > > * ntlm_auth_prog-with-variables.patch: > > This one is related to my last request. I need to use the variable > > %{Handler:Identifier} in NtlmAuthPr

[RADIATOR] AuthNTLM feature requests

2014-08-19 Thread Klara Mall
Hi, I have two feature requests for AuthNTLM. I wrote patches for these which work for me. But I'm not sure of what quality they are. ;) Both are attached. All patches are against radiator 4.13 (latest patch set). * ntlm_auth_prog-with-variables.patch: This one is related to my last request. I ne

Re: [RADIATOR] PEAP and realm check

2014-08-19 Thread Klara Mall
Hi, On Wed, Aug 20, 2014 at 12:34:36AM +0300, Heikki Vatiainen wrote: > Hopefully the above helps. With %u the users can use > anonymous@colubris-test to hide the real username (the inner > identity in PEAP/EAP-MSCHAP-V2) but will need to have the correct > realm. The above made it very clear to

Re: [RADIATOR] PEAP and realm check

2014-08-19 Thread Klara Mall
Hi, On Tue, Aug 19, 2014 at 02:39:02PM -0600, Roberto Pantoja wrote: > you can do something similar to this: > > > AuthByPolicy ContinueUntilAcceptOrChallenge > > # ActiveDirectory Group 1 > > Identifier Group1-PEAP > NtlmAuthProg /usr/bi

[RADIATOR] PEAP and realm check

2014-08-19 Thread Klara Mall
atch radiator for this to work - there will be another email for this :) ). Thanks in advance Klara -- Karlsruher Institut für Technologie (KIT) Steinbuch Centre for Computing (SCC) Klara Mall Netze und Telekommunikation (NET) Hermann-von-Helmholtz-Platz 1 76344 Eggenstein-Leopoldshafen Telefon: +49

Re: [RADIATOR] Radiator using WPA2-Enterprise and dynamic VLAN Assignment (Part 1)

2014-03-26 Thread Klara Mall
rt from that: is it possible to proxy the request of the controller through radiator to the Ignition Server i.e. to configure the radiator server as a client on the Ignition Server? Then you'd see all attributes that the Ignition Server is sending in the radiator debug log. Reg

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-19 Thread Klara Mall
Hi Heikki, On Tue, Nov 19, 2013 at 10:52:34PM +0100, Heikki Vatiainen wrote: > On 11/17/2013 11:04 PM, Klara Mall wrote: > > >> I reported it as a bug but it was rejected: > >> https://rt.cpan.org/Public/Bug/Display.html?id=90453 > >> > >> I think Stef

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-17 Thread Klara Mall
Hi, On Sun, Nov 17, 2013 at 08:09:07PM +0100, Klara Mall wrote: > > I think the module maintainer should be let known of this problem and > > can tell if there's a problem. It's quite likely he can quickly tell if > > and what kind of fix is needed. > > I report

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-17 Thread Klara Mall
Hi Heikki, thank you very much for your reply. On Wed, Nov 13, 2013 at 04:30:31PM +0100, Heikki Vatiainen wrote: > > I want to report this to the module maintainers. Please tell if I'm > > wrong somewhere. > > I think the module maintainer should be let known of this problem and > can tell if th

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-12 Thread Klara Mall
Hi, On Tue, Nov 12, 2013 at 10:55:12PM +0100, Klara Mall wrote: > So is this a bug in IO::Socket::SSL? Yes, I think so. In this module SSL variables which are not set are overriden with global variables. But it seems for this one (the identity is set to $host) it is too early. So I moved t

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-12 Thread Klara Mall
Hi, On Tue, Nov 12, 2013 at 10:29:18PM +0100, Klara Mall wrote: > I analyzed now (given two different LDAP server hosts): > a. if I use SSL in both connections it works. > b. if I use TLS in both connections it works. > c. if I use TLS in RewriteFunction and SSL in AuthBy LDAP2 it

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-12 Thread Klara Mall
Sorry, I told something wrong, see below... On Tue, Nov 12, 2013 at 09:58:08PM +0100, Klara Mall wrote: > many thanks for your reply! > > I modified Ldap.pm (debug output for IO::Socket::SSL). > > Configuration snippet: > --- > >

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-12 Thread Klara Mall
how this can be fixed. Best Regards Klara On Tue, Nov 12, 2013 at 12:23:53AM +0100, Heikki Vatiainen wrote: > On 11/11/2013 11:58 PM, Klara Mall wrote: > > > With this configuration the connection fails about half of the time (not > > always) with: > > "ERR: Co

Re: [RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-11 Thread Klara Mall
Addendum: On 11/11/2013 10:58 PM, Klara Mall wrote: > I have a problem with connecting to our Active Directory servers (LDAP) > on port 636 with radiator. Port 3269 is working but I have to use 636 > for a certain reason. > > The mad thing is: I cannot reproduce the problem wit

[RADIATOR] Net::LDAPS problem with Active Directory on port 636

2013-11-11 Thread Klara Mall
op several times and the connection never fails. I also removed the patch by Raphael Luta (in Ldap.pm) which permits multiple hostnames. But it made no difference. I wasn't able to find the difference between the radiator code and my code. Can you help me? Best regards Klara -- K

Re: [RADIATOR] logging (radiator and authlog) and accounting to ElasticSearch

2013-09-23 Thread Klara Mall
(KIT) Steinbuch Centre for Computing (SCC) Klara Mall Netze und Telekommunikation (NET) Hermann-von-Helmholtz-Platz 1 76344 Eggenstein-Leopoldshafen Telefon: +49 721 608-28630 Telefon: +49 721 608-48946 E-Mail: klara.m...@kit.edu Web: http://www.scc.kit.edu KIT - Universität des Landes Baden

Re: [RADIATOR] logging (radiator and authlog) and accounting to ElasticSearch

2013-09-19 Thread Klara Mall
ie (KIT) Steinbuch Centre for Computing (SCC) Klara Mall Netze und Telekommunikation (NET) Hermann-von-Helmholtz-Platz 1 76344 Eggenstein-Leopoldshafen Telefon: +49 721 608-28630 Telefon: +49 721 608-48946 E-Mail: klara.m...@kit.edu Web: http://www.scc.kit.edu KIT - Universität des Landes Baden-Württem

[RADIATOR] stale pidfile

2011-04-10 Thread Klara Mall
Regards Klara -- Karlsruher Institut für Technologie (KIT) Steinbuch Centre for Computing (SCC) Klara Mall Netze und Kommunikation (NET) Hermann-von-Helmholtz-Platz 1 76344 Eggenstein-Leopoldshafen Telefon: +49 721 608-28630 E-Mail: klara.m...@kit.edu Web: http://www.scc

[RADIATOR] logfile permissions

2011-04-10 Thread Klara Mall
$> = $uid; + $self->log($main::LOG_ERR, "Could not set User to $self->{User} (got $>): $!") + unless $> == $uid; + } } } else Regards Klara -- Karlsruher Institut f

[RADIATOR] AuthLogSYSLOG.pm

2011-04-07 Thread Klara Mall
openlog($ident, $logopt, $self->{Facility}); syslog("$self->{Facility}|$self->{Priority}", $str); closelog() Regards Klara -- Karlsruher Institut für Technologie (KIT) Steinbuch Centre for Computing (SCC) Klara Mall Netze und Kommunikation (NET) Hermann-

Re: [RADIATOR] Colubris-AVPair

2011-02-28 Thread Klara Mall
Hi, On 02/28/2011 09:42 PM, Heikki Vatiainen wrote: > On 02/28/2011 06:31 AM, Jeffrey Lee wrote: > >> Mon Feb 28 15:27:01 2011: ERR: Attribute number 254 (vendor 8744) is not >> defined >> in your dictionary >> Mon Feb 28 15:27:01 2011: ERR: Attribute number 251 (vendor 8744) is not >> defined

Re: [RADIATOR] Issues with AuthbyNTLM (LONG)

2010-09-25 Thread Klara Mall
I found the issue is reported and probably recently even resolved (see from comment 41): https://bugzilla.samba.org/show_bug.cgi?id=6563 Regards Klara -- Karlsruher Institut für Technologie (KIT) Steinbuch Centre for Computing (SCC) Klara Mall Netze und Kommunikation (NET) Hermann-von-Helmholtz-Pla