Re: [RADIATOR] TTLS and AuthbyLSA

2011-01-11 Thread Johnson, Neil M
University of Iowa 319 384-0938 neil-john...@uiowa.edu > -Original Message- > From: Heikki Vatiainen [mailto:h...@open.com.au] > Sent: Monday, January 10, 2011 7:42 AM > To: Johnson, Neil M; Mike McCauley > Cc: radiator@open.com.au > Subject: Re: [RADIATOR] TTLS and AuthbyLSA &g

Re: [RADIATOR] TTLS and AuthbyLSA

2011-01-11 Thread Heikki Vatiainen
On 01/08/2011 01:18 AM, Johnson, Neil M wrote: > I'm trying to test authenticating users using TTLS and AuthByLSA. > > It appears that when I test for group membership, that the username is not > getting sent to the group test subroutine. > > Look for the line "Fri Jan 7 17:11:28 2011: DEBUG:

Re: [RADIATOR] TTLS and AuthbyLSA

2011-01-10 Thread Heikki Vatiainen
On 01/10/2011 05:48 PM, Johnson, Neil M wrote: > TTLS-MSCHAPv2 works. Great! > I was confused. I thought ttls-eap-mscahpv2 was ttls-mschapv2. Well, I did not notice this either until I checked wpa_supplicant doc and took a peek at the code. Only then I realised that EAP is not necessary and pla

Re: [RADIATOR] TTLS and AuthbyLSA

2011-01-10 Thread Johnson, Neil M
...@uiowa.edu > -Original Message- > From: Heikki Vatiainen [mailto:h...@open.com.au] > Sent: Monday, January 10, 2011 9:26 AM > To: Johnson, Neil M > Cc: Mike McCauley; radiator@open.com.au > Subject: Re: [RADIATOR] TTLS and AuthbyLSA > > On 01/10/2011 05:02 PM, Johnso

Re: [RADIATOR] TTLS and AuthbyLSA

2011-01-10 Thread Heikki Vatiainen
On 01/10/2011 05:02 PM, Johnson, Neil M wrote: > I'm using eapol_test from the wpa_supplicant sources. Can you try MSCHAPv2 instead of EAP-MSCHAPv2? If plain MSCHAPv2 runs in the TLS tunnel, then the User-Name attribute should be there too. Is there a specific reason why you are running EAP-MSCHA

[RADIATOR] TTLS and AuthbyLSA

2011-01-07 Thread Johnson, Neil M
I'm trying to test authenticating users using TTLS and AuthByLSA. It appears that when I test for group membership, that the username is not getting sent to the group test subroutine. Look for the line "Fri Jan 7 17:11:28 2011: DEBUG: Checking LSA Group membership for \\IOWADC1, ITS-WIRELESS-