Re: help

2010-10-29 Thread Alan Buxey
Hi, I am using free-radius version 2.10 � I am trying to get the server statistics to be displayed for number of access-requests, responses etc: � � echo Message-Authenticator = 0x00,FreeRADIUS-Statistics-Type = 1 | radclient localhost:18120 status

Re: %RAD_REPLY hash problem

2010-10-29 Thread Ana Gallardo
Hello, thank you very much for your response. I’m not sure if this will fix it, but try: use constant RLM_MODULE_UPDATED= 8;# /* OK (pairs modified) */ then change “return RLM_MODULE_OK” to: return RLM_MODULE_UPDATED; I try that but the problem persist. If this doesn’t fix

duplicate users + Free Radius

2010-10-29 Thread Tyler Nally
Curious... assuming FreeRadius is configured to allow people to use the NAS via a username/password combination... would that allow johndoe to use both laptop computer and iPhone (and other wifi enabled devices) concurrently? or does FreeRadius boot the oldest authenticated login off of

rlm_ldap and (automagic) xlat

2010-10-29 Thread Sven Hartge
Hi all! I am using freeradius 2.1.10 (from backports) on a Debian Lenny server to authenticate wireless users using EAP and normal users (from Ascend NAS and ASA5510) with CHAP and PAP and so on. My backend is a LDAP directory (OpenLDAP). So far, everything is fine and working great. My

Re: duplicate users + Free Radius

2010-10-29 Thread Sven Hartge
Tyler Nally tna...@technally.com wrote: Curious... assuming FreeRadius is configured to allow people to use the NAS via a username/password combination... would that allow johndoe to use both laptop computer and iPhone (and other wifi enabled devices) concurrently? or does FreeRadius boot

Re: Authenticating agains AD issues

2010-10-29 Thread Nick Owen
On Thu, Oct 28, 2010 at 6:15 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, I ran across a post on the redhat forums that stated that you must start smbd before winbindd, otherwise even though running ntlm_auth seems to work from the command line. It doesn't work when running

Re: duplicate users + Free Radius

2010-10-29 Thread Alan DeKok
Tyler Nally wrote: Curious... assuming FreeRadius is configured to allow people to use the NAS via a username/password combination... would that allow johndoe to use both laptop computer and iPhone (and other wifi enabled devices) concurrently? or does FreeRadius boot the oldest authenticated

Re: rlm_ldap and (automagic) xlat

2010-10-29 Thread Alan DeKok
Sven Hartge wrote: ... | update request { | GIFB-NetzAccStatus := %{ldap:ldap:///dc=fh-giessen-friedberg,dc=de?GIFB-NetzAccStatus?sub?uid=%u}; | GIFB-Status := %{ldap:ldap:///dc=fh-giessen-friedberg,dc=de?GIFB-Status?sub?uid=%u}; ... Now, for my

RE: %RAD_REPLY hash problem

2010-10-29 Thread Garber, Neal
Yes, I know :) but it would be better if we can solve that I agree, but I haven't found a better solution (i.e., that's what I do to workaround the problem). - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-SIM authentication / Supplicant

2010-10-29 Thread tmuehlhoff
Any more activities in this context ? I'm trying to set up soemthing in this area. T. -- View this message in context: http://freeradius.1045715.n5.nabble.com/EAP-SIM-authentication-Supplicant-tp2752052p3242070.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

FAQ and Wiki down?

2010-10-29 Thread David Jea
Hi, For past two days, I can't reach to these 2 tabs: FAQ and Wiki. All the others are good. http://wiki.freeradius.org/index.php/FAQ http://wiki.freeradius.org/ I thought it was my issue, but my internet is good, no proxy, tried with IE and Firefox, it does seem to me that wiki site is down.

Re: FAQ and Wiki down?

2010-10-29 Thread Marinko Tarlac
Works fine for me... On 10/29/2010 4:33 PM, David Jea wrote: Hi, For past two days, I can't reach to these 2 tabs: FAQ and Wiki. All the others are good. http://wiki.freeradius.org/index.php/FAQ http://wiki.freeradius.org/ I thought it was my issue, but my internet is good, no proxy, tried

Re: FAQ and Wiki down?

2010-10-29 Thread John Dennis
On 10/29/2010 10:33 AM, David Jea wrote: Hi, For past two days, I can't reach to these 2 tabs: FAQ and Wiki. All the others are good. http://wiki.freeradius.org/index.php/FAQ http://wiki.freeradius.org/ I thought it was my issue, but my internet is good, no proxy, tried with IE and Firefox,

RE: FAQ and Wiki down?

2010-10-29 Thread Mark Holmes
Works for me also -Original Message- From: freeradius-users-bounces+mark.holmes=nuffield.ox.ac...@lists.freeradius.org [mailto:freeradius-users-bounces+mark.holmes=nuffield.ox.ac...@lists.freeradius.org] On Behalf Of Marinko Tarlac Sent: 29 October 2010 15:40 To: dcjea...@gmail.com;

Re: FAQ and Wiki down?

2010-10-29 Thread David Jea
Thanks all. It is my end's problem. My home computer network work fine, but my company's network somehow cannot find wiki.freeradius.org. Still puzzled to me, but out of scope of this mailing list. Thanks, David On Fri, Oct 29, 2010 at 7:43 AM, Mark Holmes mark.hol...@nuffield.ox.ac.ukwrote:

RE: FAQ and Wiki down?

2010-10-29 Thread Sallee, Stephen (Jake)
I feel your pain, we have the same thing happen form time to time. Check with your ISP, when it happens to us it is usually their DNS server caching and old entry or a bad statement in one of their routers. Good luck! Jake Sallee Godfather Of Bandwidth Network Engineer Fone: 254-295-4658

Re: FAQ and Wiki down?

2010-10-29 Thread Johan Meiring
On 2010/10/29 04:43 PM, Mark Holmes wrote: Works for me also IE sometimes doesn't work if the website does not start with www. You then need to explicitly specify http:// Try adding http:// in front of wiki.freeradius.org -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021)

Re: rlm_ldap and (automagic) xlat

2010-10-29 Thread Sven Hartge
Alan DeKok al...@deployingradius.com wrote: Sven Hartge wrote: ... | update request { | GIFB-NetzAccStatus := %{ldap:ldap:///dc=fh-giessen-friedberg,dc=de?GIFB-NetzAccStatus?sub?uid=%u}; | GIFB-Status :=

Re: rlm_ldap and (automagic) xlat

2010-10-29 Thread Alan DeKok
Sven Hartge wrote: Just out of curiosity: is there an easy way to see the whole contents of all lists while debugging? Not really. It's a *lot* of data. It's possible to patch the server to do this. If you do it, send us the patch. :) Alan DeKok. - List info/subscribe/unsubscribe? See

Re: rlm_ldap and (automagic) xlat

2010-10-29 Thread Sven Hartge
Alan DeKok al...@deployingradius.com wrote: Sven Hartge wrote: Just out of curiosity: is there an easy way to see the whole contents of all lists while debugging? Not really. It's a *lot* of data. Yeah, I thought so. Another thought: Are those lists fully available to the perl module?

Re: rlm_ldap and (automagic) xlat

2010-10-29 Thread Alan DeKok
Sven Hartge wrote: Yeah, I thought so. Another thought: Are those lists fully available to the perl module? Maybe then I could just dump the %hashes to disk to examine them. Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: help

2010-10-29 Thread balaram velega
Hi Alan, Thisi s the response I am getting: echo Message-Authenticator = 0x00,FreeRADIUS-Statistics-Type = 3 | radclient localhost:18120 status testing5 Received response ID 254, code 2, length = 20 whats the location of the docuemnt? whatelse should I do to print the other statistics like

Can't get LEAP working [beginner]

2010-10-29 Thread David Jea
Hi, I installed freeradius and have radtest passed. Playing with it with Cisco gears. The system includes freeRadius (ip: 60.60.0.9 on vlan 660) and Cisco controller(ip: 60.62.0.11)/AP (on vlan 662). Using a Windows 7 laptop + Intel 6200 wifi chipset as the client. I understand LEAP is not

Re: Can't get LEAP working [beginner]

2010-10-29 Thread William Burnett
It appears you have your Auth-Type set to EAP (Auth-Type = EAP) in your users file.. Do not set the Auth-Type, the RADIUS server is smart enough to figure it out based on the Access-Request packet. Just set your user w/ the following: UserName Cleartext-Password := password any

Re: Authenticating agains AD issues

2010-10-29 Thread Alan Buxey
Hi, This may be 100% off the mark, but have tried using the AD radius plugin IAS? I have tested its support for proxying for a proof-of-concept and it was quite simple to setup. I have no production experience. cough splutter. why use IAS? this is a FreeRADIUS mailing list. FR is superior

Re: FAQ and Wiki down?

2010-10-29 Thread Alan Buxey
Hi, For past two days, I can't reach to these 2 tabs: FAQ and Wiki. All the others are good. [1]http://wiki.freeradius.org/index.php/FAQ [2]http://wiki.freeradius.org/ I thought it was my issue, but my internet is good, no proxy, tried with IE and Firefox, it does seem

Re: Can't get LEAP working [beginner]

2010-10-29 Thread Alan Buxey
Hi, Hmmm. probably not the case, here is my 'users' file: isnt it a little more obvious than that? Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have

Re: Can't get LEAP working [beginner]

2010-10-29 Thread David Jea
ah but this is LEAP I am testing, which does not require OPENSSL support. In wiki page, http://wiki.freeradius.org/Rlm_eap === INSTALLATION EAP, EAP-MD5, and Cisco *LEAP* do not require any additional packages. * FreeRADIUS* http://wiki.freeradius.org/FreeRADIUS contains all the required

Re: Can't get LEAP working [beginner]

2010-10-29 Thread David Jea
Thanks Alan. After installing openssl development package, libssl-dev, for ubuntu 10.10, and recompiling freeradius. I now have PEAP MSCHAPv2 working, client connecting good. Though LEAP still not working (with same id/pw), but I will figure out that later and play with certificates stuffs first.

Re: Can't get LEAP working [beginner]

2010-10-29 Thread Alan DeKok
David Jea wrote: ah but this is LEAP I am testing, which does not require OPENSSL support. Yes. The only reason LEAP doesn't work is that the password you gave the server doesn't match the password you entered on the client. Alan DeKok. - List info/subscribe/unsubscribe? See