Re: Want to silently discard the request if authentication module as web?service client connecting to the web service server is down.

Alexander, We have a little different scenario. We have two different instances of web server connecting to two different Radius server such that if one of the radius server not able to connect the webserver, radius client can fail over to another radius server which has a different web-server

Re: Want to silently discard the request if authentication module as?web?service client connecting to the web service server is down.

Ankur G anku...@globallogic.com wrote: We have a little different scenario. We have two different instances of web server connecting to two different Radius server such that if one of the radius server not able to connect the webserver, radius client can fail over to another radius server

Re: NAS IP ALLOW ALL (Solved)

0.0.0.0/0 ? alan - Reply message - From: aceror aceror2...@yahoo.es Date: Wed, Aug 10, 2011 00:18 Subject: NAS IP ALLOW ALL (Solved) To: FreeRadius users mailing list freeradius-users@lists.freeradius.org My last try make the job! Thanks to all. El mar, 09-08-2011 a las 07:47 +0200,

Re: AW: User Problem with Cisco Nexus 4.x

test Auth-Type := Pap, Huntgroup-Name == nexus, MD5-Password := 098f6bcd4621d373cade4e832627b4f6 Login-Service = Telnet, Vendor-Specific = Cisco, What the HECK is that last line? Why is it there? What do you think it's doing? *Nothing* in any of the documentation leads

Re: How to log TLS name instead of username

I tried the same config with 2.1.11 but the same result. My config: eap.conf- default_eap_type = tls tls { certdir = ${confdir}/certs cadir = ${confdir}/certs private_key_password = whatever private_key_file =

Hello all

Hello all i use freeradius with the network access control Packetfence I have a problem with captive portal registration I use radius authentication and i have this problem when i put login pass in the authentication page rad_recv: Access-Request packet from host 127.0.0.1 port 47764, id=171,

Re: Hello all

Follow the advice of the WARNING lines and check your shared secret in clients.conf as that password looks quirky alan - Reply message - From: Jon Cash chafik...@gmail.com Date: Wed, Aug 10, 2011 11:51 Subject: Hello all To: freeradius-users@lists.freeradius.org

Re: How to log TLS name instead of username

Do not set auth-type for EAP in your users file, the server is not stupid alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to log TLS name instead of username

:D my users file looks like this user Cleartext-Password := pass - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Need your help me get daloradius fully integrated with freeradius

Hi, This is my first email on freeradius mailing list so I would like to say thanks to freeradius development team and all those who participate in this mailing list. I am using freeradius 2.1.11 on Debian 6.0 to have enough control over pptpd users. Everything is hosted on a single machine and

how to refer to default virual server via dynamic clients sql lookup

hi i have 2 virtual servers active: default dynamic-clients i wan to lookup every nas via sql dynamic-clients. my dynamic-clients configuration file client dynamic { ipaddr = 0.0.0.0 netmask = 0 lifetime = 3600 } server dynamic_client_server { authorize { if (%{sql:

Re: how to refer to default virual server via dynamic clients sql lookup

Łukasz Kostka wrote: i have 2 virtual servers active: default dynamic-clients No, you don't. The debug log clearly shows this. i wan to lookup every nas via sql dynamic-clients. my dynamic-clients configuration file client dynamic { ipaddr = 0.0.0.0 netmask = 0

Re: how to refer to default virual server via dynamic clients sql lookup

W dniu 10.08.2011 14:42, Alan DeKok pisze: Łukasz Kostka wrote: i have 2 virtual servers active: default dynamic-clients No, you don't. The debug log clearly shows this. ls -l /etc/freeradius/sites-enabled/ razem 0 lrwxrwxrwx 1 root freerad 26 05-17 12:08 default -

SSH to use CHAP

Hello! I try to authenticate ssh users via PAM using FreeRadius. Is it possible to use CHAP for the authentication between radius server and radius client? SSH client - SSH server - PAM - Radius Client - CHAP- Radius Server For example, if I specify in radius server to use CHAP auth-type for a

Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

Hello, I would like to help with this: I have Freeradius version 2.1.6 I have it running with SQL and DialupAdmin. How do I give access to wifi users who authenticate with username pass over PEAP only to a group of users? I mean that authorised would be only users from group WIFI and not other

Re: Proxying based on a regex (now with more questions)

So, according to the docs in proxy.conf and Arran's comment here, the regex stuff should work fine…but in 2.1.11, we're not seeing that behavior. Right now, requests are only getting proxied properly if it's an exact match on the realm name ( realm hokies { or realm w2k.vt.edu { ), whereas

Re: SSH to use CHAP

chesschi chess...@gmail.com wrote: I try to authenticate ssh users via PAM using FreeRadius. Is it possible to use CHAP for the authentication between radius server and radius client? SSH client - SSH server - PAM - Radius Client - CHAP- Radius Server As far as I am aware, this cannot

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

Hello, I would like to help with this: I have Freeradius version 2.1.6 I have it running with SQL and DialupAdmin. How do I give access to wifi users who authenticate with username pass over PEAP only to a group of users? I mean that authorised would be only users from group WIFI and not

Re: Freeradius + MySQL + WiFi PEAP authorisation only to a group of users

I would think something like this in your users file: DEFAULT NAS-Ip-Address == your.wifi.nas.ip, Group == WIFI DEFAULT NAS-Ip-Address == your.wifi.nas.ip, Auth-Type = Reject - Thank you for the answer but I do not use any users file - I use mysql and users are stored in radcheck table and