Re: another shared secret problem

2012-06-08 Thread Alan DeKok
Morris, Andi wrote: It pains me to send this to the list as I know I’m going to get shot The problem is that the FR server is reporting a shared secret mismatch when requests come from the new servers: The issue is: a) the shared secret is wrong b) one end (not FreeRADIUS) is creating a

Re: another shared secret problem

2012-06-08 Thread Fajar A. Nugraha
On Thu, Jun 7, 2012 at 7:36 PM, Morris, Andi amor...@cardiffmet.ac.uk wrote: The problem is that the FR server is reporting a shared secret mismatch when requests come from the new servers: I have typed and retyped the shared secret several times on both FR and IAS sides of the

RE: another shared secret problem

2012-06-08 Thread Morris, Andi
Got it! I needed to rethink the process of the conversation between my internal radius servers and the ORPS servers and realised that I had been adding the wrong shared secret into the clients.conf file. Thanks both for your help, Andi -Original Message- From:

Re: PAP followed by smsotp authentication [WAS: Re: MSCHAPv2 followed by a smsotp authentication]

2012-06-08 Thread Thomas Glanzmann
Hello Alan, [ sorry for the late response, I read that mailinglist only every few days ] The tar file seems strange. There's a smsotpd.2012-06-04c directory, but most of the files seem to have a smsotpd.2012-06-04 prefix. *Without* the directory: thank you for telling me. There was a slash

Virtual Server Pool Problem

2012-06-08 Thread manny
Hello all, I am attempting to setup a FreeRADIUS server to listen only on one IP address, but have two virtual servers. At the moment I am testing with simple servers, one that accepts and one that rejects. I have a freeradius server that is dependent on another server, and want to provide an

Re: Virtual Server Pool Problem

2012-06-08 Thread manny
So what I want to do is the following: Have two virtual servers listening on one IP and port (e.g. 192.168.100.251 1812) so that when the primary server fails or is down, the requests are proxied to the secondary virtual server. Is this possible? I want to be able to point to only one IP port

FreeRadius2 Krb

2012-06-08 Thread Lisa Besko
I'm trying to get FreeRadius2 to authenicate with MIT Kerberos. When radius enters kerberos, it dies with no message. Any suggestions on where to look for clues? OS: FreeBSD 9 Radius: FreeRadius 2.1.12 Kerberos: MIT Kbr5 1.9.2 I'm not seeing obvious errors in Debug output. [pap] WARNING!

Re: FreeRadius2 Krb

2012-06-08 Thread Timmy
Lisa, Search in the manual It doesn't work. and what did you **do** ? Timmy I'm trying to get FreeRadius2 to authenicate with MIT Kerberos. When radius enters kerberos, it dies with no message. Any suggestions on where to look for clues? OS: FreeBSD 9 Radius: FreeRadius 2.1.12 Kerberos:

Re: FreeRadius2 Krb

2012-06-08 Thread Timmy
On 2012-06-09 12:00 AM, Lisa Besko wrote: I'm trying to get FreeRadius2 to authenicate with MIT Kerberos. When radius enters kerberos, it dies with no message. Any suggestions on where to look for clues? OS: FreeBSD 9 Radius: FreeRadius 2.1.12 Kerberos: MIT Kbr5 1.9.2 I'm not seeing

Re: FreeRadius2 Krb

2012-06-08 Thread Lisa Besko
I've seen that on my radius servers before right before it goes into krb and get's my token from our kerberos server. I'm quite sure I've missed something in the config but I'm not finding it and the doc's I've found are lacking in the krb area. Believe me asking for help here is a last

Re: FreeRadius2 Krb

2012-06-08 Thread Lisa Besko
First I was able to authenticate with kinit so I'm pretty sure krb is working. Second yes I did do several things that were suggested for enabling krb and I did back up the original files and it works for the radtest if I add a user to the users file with a plain text password. Unfortunately

Re: FreeRadius2 Krb

2012-06-08 Thread John Dennis
On 06/08/2012 12:40 PM, Lisa Besko wrote: I've seen that on my radius servers before right before it goes into krb and get's my token from our kerberos server. I'm quite sure I've missed something in the config but I'm not finding it and the doc's I've found are lacking in the krb area.

freeradius openldap config help please

2012-06-08 Thread Steven Pokrandt
I have the following versions @(#) $OpenLDAP: slapd 2.4.21 (Dec 19 2011 15:40:04) $ buildd@allspice:/build/buildd/openldap-2.4.21/debian/build/servers/slapd freeradius: FreeRADIUS Version 2.1.8, for host x86_64-pc-linux-gnu, built on Jan 5 2010 at 02:56:18 I'm trying to import the ldif

v2.1.10 Why authorize_group check reply query changed?

2012-06-08 Thread JustJoe
For several years we have been happy using early v1 distributions of FreeRadius with a MySQL database on SuSe Linux. However, machines wear out and security issues are resolved so decided it was time to upgrade to v2.1.10 which is available as a package in Ubuntu 12.04. Instead of just copying