AW: Freeradius on lenny doesn't permit mschap auth

2011-02-14 Thread Schaatsbergen, Chris
-users@lists.freeradius.org Betreff: Freeradius on lenny doesn't permit mschap auth Hi all, I had read and configure like http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWT O I have test ntlm_auth with success but radtest user passwd localhost 0 testing123 fail I

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-17 Thread Fabien COMBERNOUS
On 14/01/2011 23:47, Alan DeKok wrote: Fabien COMBERNOUS wrote: [...] David is not bridling but just remember his constraints. They are *his* constraints. If he can't even install a version of 2.1.10 in order to run radtest which can do MS-CHAP, then those constraints are ridiculous.

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-17 Thread Bjørn Mork
Fabien COMBERNOUS fcombern...@kezia.com writes: In a complex environment to change a piece of software can have unexpected consequences. And so to change it, it demands long testing procedures for several teams. I already worked in this kind of environment. And you have to give good reasons

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-17 Thread David Dumortier
Le Mon Jan 17 2011 � 09:29:47AM +0100, Fabien COMBERNOUS dit : On 14/01/2011 23:47, Alan DeKok wrote: Fabien COMBERNOUS wrote: [...] David is not bridling but just remember his constraints. They are *his* constraints. If he can't even install a version of 2.1.10 in order to run radtest

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-17 Thread Martín Ruiz [Ibersystems.es]
I think some comments.. are too heavys : P I'm reading this list looking for solutions, or improvements for my servers, but this threads are disgusting me. It's not necessary to write thing like this.. I'm not agree with this. When someone requests help, you can help as usually. If he can't do

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-17 Thread David Dumortier
Le Mon Jan 17 2011 � 10:13:56AM +0100, Bjørn Mork dit : Fabien COMBERNOUS fcombern...@kezia.com writes: [...] So? You've painted yourself into an unsupportable environment. The polite thing to do would be to state this when asking, to avoid wasting everyones time. Noone really cares

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-17 Thread Josip Rodin
On Mon, Jan 17, 2011 at 10:20:00AM +0100, David Dumortier wrote: In a complex environment to change a piece of software can have unexpected consequences. And so to change it, it demands long testing procedures for several teams. I will try to find a mschap string with a second

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-17 Thread Bjørn Mork
Josip Rodin j...@entuzijast.net writes: As usual, it would have helped if all parties would have steered away from snappy remarks. Rather than do that, it's often simpler and eminently more productive to keep silent. You are of course correct. I apologise for my unnecessary comment. I will

Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread David Dumortier
Hi all, I had read and configure like http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO I have test ntlm_auth with success but radtest user passwd localhost 0 testing123 fail I attach my debug output Thanks -- David Dumortier FreeRADIUS Version 2.0.4, for host

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Alan DeKok
David Dumortier wrote: Hi all, I had read and configure like http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO You didn't follow the steps. If you had, it would have worked. See also http://deployingradius.com/. It includes instructions on configuring Active

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread David Dumortier
Hi, Le Fri Jan 14 2011 � 11:36:04AM +0100, Alan DeKok dit : David Dumortier wrote: Hi all, I had read and configure like http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO You didn't follow the steps. If you had, it would have worked. If it had worked I

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Phil Mayers
On 14/01/11 10:59, David Dumortier wrote: You're running 2.0.4. I suggest upgrading to 2.1.10. I'm on Debian/lenny, I will stay on lenny. Sigh. So you're not willing to follow the advice people give you. Why ask? I admit I can have made a mistake but currently I don't see it, so I

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Alan DeKok
David Dumortier wrote: If it had worked I woundn't have post here. OK... so the documentation which works for everyone else doesn't work for you. Or, based on the debug output you posted, you didn't follow the documentation. See also http://deployingradius.com/. It includes

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Johan Meiring
On 2011/01/14 02:07 PM, Alan DeKok wrote: I attach my debug output You're running 2.0.4. I suggest upgrading to 2.1.10. I'm on Debian/lenny, I will stay on lenny. That's your choice. But... not our recommendation. I run debian lenny and 2.1.10. Download the source. Extract. run

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread David Dumortier
Le Fri Jan 14 2011 � 12:05:36PM +, Phil Mayers dit : On 14/01/11 10:59, David Dumortier wrote: You're running 2.0.4. I suggest upgrading to 2.1.10. I'm on Debian/lenny, I will stay on lenny. Sigh. So you're not willing to follow the advice people give you. Why ask? Mmmmh seems to

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Alan DeKok
David Dumortier wrote: Le Fri Jan 14 2011 � 12:05:36PM +, Phil Mayers dit : Sigh. So you're not willing to follow the advice people give you. Why ask? Mmmmh seems to be pretty offensive ! If you're offended when we give advice, I suggest you stop asking questions on this list. In a

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread David Dumortier
Le Fri Jan 14 2011 � 01:49:28PM +0100, Alan DeKok dit : David Dumortier wrote: [...] So radtest can't make an mschap request ? In 2.1.10, yes. But you want to use tools which are years out of date. I have some constraint, one is to be lenny compliant with lenny software, no

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Alexandre
David, I think you really are taking it the wrong way. Advices given by Alan are good ones. There's no point feeling offended by an email... it's even quite ridiculous (don't be offended). For Lenny there is absolutely no pb building a nice package from sources or even use backports repository

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Alan DeKok
David Dumortier wrote: I have some constraint, one is to be lenny compliant with lenny software, no backport. Our constraints are that when people ask questions, they follow the instructions in the answers. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Josip Rodin
On Fri, Jan 14, 2011 at 02:39:58PM +0200, Johan Meiring wrote: On 2011/01/14 02:07 PM, Alan DeKok wrote: I attach my debug output You're running 2.0.4. I suggest upgrading to 2.1.10. I'm on Debian/lenny, I will stay on lenny. That's your choice. But... not our recommendation. I

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Josip Rodin
On Fri, Jan 14, 2011 at 02:57:26PM +0100, joy wrote: On Fri, Jan 14, 2011 at 02:39:58PM +0200, Johan Meiring wrote: On 2011/01/14 02:07 PM, Alan DeKok wrote: I attach my debug output You're running 2.0.4. I suggest upgrading to 2.1.10. I'm on Debian/lenny, I will stay on lenny.

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Martín Ruiz [Ibersystems.es]
Oh mates! Free hugs here. : D! * Martín Ruiz* * * *Ibersystems Solutions, SL* * * Dpto. Redes Inalámbricas Tel. 902 909 858 93 184 52 13 669 37 95 21 Fax 93 758 63 01 http://www.ibersystems.es martinr...@ibersystems.es *Estemensaje puede contener información confidencial y/o

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Phil Mayers
On 14/01/11 12:44, David Dumortier wrote: Le Fri Jan 14 2011 � 12:05:36PM +, Phil Mayers dit : On 14/01/11 10:59, David Dumortier wrote: You're running 2.0.4. I suggest upgrading to 2.1.10. I'm on Debian/lenny, I will stay on lenny. Sigh. So you're not willing to follow the

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Johan Meiring
On 2011/01/14 03:57 PM, Josip Rodin wrote: Actually it's even simpler. Add lenny-backports to sources.list, update, and just install the new packages. Must say I didn't know that backports also maintained freeradius. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021)

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread David Dumortier
Le Fri Jan 14 2011 � 02:13:04PM +0100, Alexandre dit : David, I think you really are taking it the wrong way. I'm upset about my problem and not english speaker. I'm reading docs many times about a subject I don't understand quite good. I reacted a bit angrily, my apologizes. Advices given by

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread David Dumortier
Le Fri Jan 14 2011 � 02:32:12PM +, Phil Mayers dit : [...] Even though you are bridling at my advice, I'm going to try one last time to be helpful. An MS-CHAP request looks like this: User-Name = theuser MS-CHAP-Challenge = 0x32 hex digits MS-CHAP2-Response = 0x100 hex digits ...and

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Alan DeKok
David Dumortier wrote: -follow the steps presented in documentation. file raddb/modules/ntlm_auth doesn't exist (the directory modules doesn't either). Because you're running an old version. With all due respect, nothing prevents you from downloading 2.1.10, and *not* installing it.

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Fabien COMBERNOUS
Title: mail Kezia : Fabien COMBERNOUS On 14/01/2011 15:32, Phil Mayers wrote: [...] Even though you are bridling at my advice, I'm going to try one last time to be helpful. Imagine that David is alone, on an very isolated island without any

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Alan DeKok
Fabien COMBERNOUS wrote: Imagine that David is alone, on an very isolated island without any others humans. And he needs to eat. He asks help to learn how to kill animals of this island. Your answer was go to the supermarket. This answer didn't consider the question enough. He was told