RE: Can I get group-name from Active-directory? [sec=unclassified]

2007-12-19 Thread Hangjun He
I add group parameters in rlm_ldap section. Seems freeradius not do group search. groupname_attribute = memberOf groupmembership_filter = (cn=%{Stripped-User-Name:-%{User-Name}}) Anything else I need to configure in radiusd.conf? Waking up in 4 seconds... rad_recv:

Re: PEAP version 1 is supported in freeradius?

2007-12-19 Thread Alan DeKok
Raghavendra. S wrote: I want to setup freeradius server to test peap version 1. For that configured freeradius-server-snapshot-20071217, as below ... Added following block in eap.conf, Did you READ the text in experimental.conf as I said? It appears not, because the eap2 configuration

Re: With_nt_domain_hack +XPSup +LDAP

2007-12-19 Thread Alan DeKok
Dow, Corey wrote: I'm trying to setup an XP supplicant that authenticates through my NAS to an OpenLDAP server. The problem is that the native authentication provided by MS shows the user as MYDOMAIN\\user or MYPC\\user. As a result, the LDAP searches fail to find this user. The

problem ./configure and MYSql

2007-12-19 Thread Miha Bièek
Hi I am having troubles setting freeRadius to work with MySql. I 've studied the FAQ at: http://wiki.freeradius.org/index.php/FAQ#It_says_.22Could_not_link_..._file_not_found.22.2C_what_do_I_do.3F, followed the instructions but I still can't get it to work. I'm using

Re: problem ./configure and MYSql

2007-12-19 Thread A . L . M . Buxey
hi, you have installed the user programs for mysql - the library and the tools/database - but for compiling things that USE mysql, you need to install the development programs for mysql. usually mysql-devel, or mysql-dev or somesuch alan - List info/subscribe/unsubscribe? See

Server blown up after move

2007-12-19 Thread John Ellin
Hi all, Recently had to move free radius 1.1.7 from production server to test/backup server due to failed HD in RAID. config is radius + LDAP and worked fine on the old machine but, on the new machine it works fine when debugging, but not at all when running as a daemon. Output from netstat

Re: Server blown up after move

2007-12-19 Thread A . L . M . Buxey
Hi, what does the 'less debugging' mode - radiusd -x give you (thats a small x rather thana big X) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Configure Cisco Aironet 1130 with PEAP/Ms-Chap2

2007-12-19 Thread Julian Stöver
Hi, after solving my problem with creating certificates i got another problem: I enabled MsCHAP in the Radius configuration and added the server as an radius authentication and accounting server and also enables aes-ccmp and wpa2 mendatory key. but if i want to login, i get the message

Re: Configure Cisco Aironet 1130 with PEAP/Ms-Chap2

2007-12-19 Thread Rupert Finnigan
Hi, Might be talking rubbish, but think I can rememer my Cisco AP's defaulting to ports 1645 and 1646 for auth and accounting, whereas free-radius and radtest use 1812 and 1813. If I'm wrong please correct me, but might be worth checking? Rupes On 19/12/2007, Julian Stöver [EMAIL PROTECTED]

Re: Configure Cisco Aironet 1130 with PEAP/Ms-Chap2

2007-12-19 Thread Julian Stöver
Hey, you're right, ciscos default radius ports are 1645 and 1646, but you can change it. so the ports are ok ;) Am 19.12.2007 um 21:54 schrieb Rupert Finnigan: Hi, Might be talking rubbish, but think I can rememer my Cisco AP's defaulting to ports 1645 and 1646 for auth and accounting,

Re: Help w/ pam radius

2007-12-19 Thread Jeff Fishbaugh
Just thought I would reply to my own thread since I figured it out and probably others can benefit from it yes yes yes the variations in distro's PAM implementation will kill you that was all it was so beware -- knowing your PAM system on your machines is crucial if you don't want

RE: Can I get group-name from Active-directory? [sec=unclassified]

2007-12-19 Thread Ranner, Frank MR
From: [EMAIL PROTECTED] g [mailto:[EMAIL PROTECTED] adius.org] On Behalf Of Hangjun He Sent: Wednesday, 19 December 2007 19:32 To: FreeRadius users mailing list Subject: RE: Can I get group-name from Active-directory?