RE: EAP-TTLS + PAP with external script

2008-05-15 Thread Dario Maccari
authorize { preprocess suffix eap pap papauth } pap really should go at the end - i believe the default config mentions this...with maybe exclaimation marks or capital letters? alan How is this supposed to help me in any way to

Re: EAP-TTLS + PAP with external script

2008-05-15 Thread Alan DeKok
Dario Maccari wrote: How is this supposed to help me in any way to configure FR to do PAP authentication? If you are configured the *server* to do PAP authentication, then the default configuration files should be used. Your module (exec/whatever) should supply a known good password. The

RE: EAP-TTLS + PAP with external script

2008-05-15 Thread Dario Maccari
If you are configured the *server* to do PAP authentication, then the default configuration files should be used. Your module (exec/whatever) should supply a known good password. The server then uses that to authenticate the user. I configured the CLIENT to do EAP-TTLS with inner PAP. The

RE: EAP-TTLS + PAP with external script

2008-05-15 Thread Ivan Kalik
I configured the CLIENT to do EAP-TTLS with inner PAP. The server needs to fit inside a more complex structure in wich no known good password is available. User data are stored outside the radius server and can't be accessed in any other way than the ones that are given to me. So why do you

Re: EAP-TTLS + PAP with external script

2008-05-15 Thread Alan DeKok
Dario Maccari wrote: I configured the CLIENT to do EAP-TTLS with inner PAP. Yes, you said that. The server needs to fit inside a more complex structure in wich no known good password is available. sigh That is NOT what you said before. .. Will work?. It should. Alan DeKok. -

Re: EAP-TTLS + PAP with external script

2008-05-15 Thread d_maccari
So why do you bother with radius and EAP for authentication when you are not going to use them? Use captive portal and run that php script from the login page. If you need accounting use radius for that. I need to insert a wpa/wpa2 enterprise wlan, which do need eap and radius, side by side a

Re: EAP-TTLS + PAP with external script

2008-05-15 Thread d_maccari
sigh That is NOT what you said before. Sorry, probably a language barrier. I think my english is not good enough to really explain what i was trying to accomplish. Thanks for your patience. It should. I'll try that solution than wich will lead at, at least, less misunderstanding with

RE: EAP-TTLS + PAP with external script

2008-05-14 Thread Dario Maccari
As you can see there is the message: rlm_pap: WARNING! No known good password found for the user. Authentication may fail because of this. modcall[authorize]: module pap returns noop for request 9 So the php script for pap authorization is not even executed. Maybe there is something i

Re: EAP-TTLS + PAP with external script

2008-05-14 Thread A . L . M . Buxey
Hi, authorize { preprocess suffix eap pap papauth } pap really should go at the end - i believe the default config mentions this...with maybe exclaimation marks or capital letters? alan - List info/subscribe/unsubscribe? See

Re: EAP-TTLS + PAP with external script

2008-05-13 Thread A . L . M . Buxey
Hi, you're not authorising the user. theres nothing to allow them access in the authorise section. modcall: entering group authorize for request 9 modcall[authorize]: module preprocess returns ok for request 9 rlm_realm: No '@' in User-Name = testa, looking up realm NULL rlm_realm:

RE: EAP-TTLS + PAP with external script

2008-05-13 Thread Dario Maccari
Isn't pap in authorize section there to do the job? How can i authorize ANY user so that they will be authenticated by the php script? Bye Dario Maccari Hi, you're not authorising the user. theres nothing to allow them access in the authorise section.