RADIUS Packet Debugging

2008-04-07 Thread Lemaster, Rob
Does FreeRADIUS have a functionality that allows the administrator to debug RADIUS requests and responses? Something that will show the request and response with attributes, etc.. Thanks! FreeRADIUS: The other white meat. - List info/subscribe/unsubscribe? See

Windows AD Integration

2008-04-07 Thread Lemaster, Rob
Can FreeRADIUS be integrated into Windows Active Directory for user credentials and privelige based on Active Directory group? What is the best way to integrate FreeRADIUS into Windows Active Directory? Thanks! FreeRADIUS: It's what's for dinner. - List info/subscribe/unsubscribe? See

Re: RPM Build Errors

2008-04-07 Thread Jos Vos
On Sun, Apr 06, 2008 at 10:40:51PM -0700, SANDY KALUGDAN wrote: my .rpmmacros contains %_topdir %(echo $HOME)/rpmbuild For me this works (rpm 4.4.2), I just tried. [EMAIL PROTECTED] SPECS]# rpmbuild -bb freeradius.spec error: File % (echo $HOME)

Re: RPM Build Errors

2008-04-07 Thread SANDY KALUGDAN
I'm pretty sure about that. what should I use? echo '%_topdir %(echo $HOME)/rpmbuild' .rpmmacros or echo '%_topdir%(echo $HOME)/rpmbuild' .rpmmacros to populate the .rpmmacros - Original Message From: Jos Vos [EMAIL PROTECTED] To: FreeRadius users mailing list

Re: libpam-radius-auth password problem

2008-04-07 Thread Fabio Pedretti
Citando Alan DeKok [EMAIL PROTECTED]: Fabio Pedretti wrote: When I try to authenticate with ssh into the machine I noticed that freeradius receive this password \010\n\r\177INCORRECT, that it's not the one I typed. That's a PAM problem. There's little you can do to RADIUS to fix that.

freeradius 2.0.3 peap, mschapv2, sql

2008-04-07 Thread Martin . Gabauer
Hi all, I have following problem, I compiling and installing freeradius 2.0.3 from tgz. I configuring him for authorizing from windows clients (Winxp), whith using mysql to save login and password. The problem is that if password in sql is saved as user-password authorization works fine, but

Re: RPM Build Errors

2008-04-07 Thread Phil Mayers
Jos Vos wrote: On Sun, Apr 06, 2008 at 08:06:40PM +0100, Phil Mayers wrote: I can see two options, neither very pleasant :o( 1. For the short term distributions (Fedora, Ubuntu), volunteer to be a packager. In principle I could do this for Fedora; in practice I have no time or patience for

Re: freeradius 2.0.3 peap, mschapv2, sql

2008-04-07 Thread SANDY KALUGDAN
try to send the radiusd -X output after you've done some authentication. - Original Message From: [EMAIL PROTECTED] [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Monday, April 7, 2008 13:12:19 Subject: freeradius 2.0.3 peap, mschapv2, sql Hi all, I have following

Re: RADIUS Packet Debugging

2008-04-07 Thread Phil Mayers
Lemaster, Rob wrote: Does FreeRADIUS have a functionality that allows the administrator to debug RADIUS requests and responses? Something that will show the request and response with attributes, etc.. This is well documented, please read the docs before asking basic questions. e.g. man

Re: Windows AD Integration

2008-04-07 Thread Phil Mayers
Lemaster, Rob wrote: Can FreeRADIUS be integrated into Windows Active Directory for user Yes. A google search for freeradius active directory shows many results. credentials and privelige based on Active Directory group? What is the best way to integrate FreeRADIUS into Windows Active

Re: freeradius 2.0.3 peap, mschapv2, sql

2008-04-07 Thread mgabauer
On Mon, Apr 07, 2008 at 03:36:17AM -0700, SANDY KALUGDAN wrote: try to send the radiusd -X output after you've done some authentication. radiusd -X output whith gabo2 login and password saved as MD5 .. FreeRADIUS Version 2.0.3, for host i686-pc-linux-gnu, built on Mar 26 2008 at 12:53:26

Re: RPM Build Errors

2008-04-07 Thread Jos Vos
On Mon, Apr 07, 2008 at 12:07:38AM -0700, SANDY KALUGDAN wrote: I'm pretty sure about that. what should I use? echo '%_topdir %(echo $HOME)/rpmbuild' .rpmmacros or echo '%_topdir%(echo $HOME)/rpmbuild' .rpmmacros to populate the .rpmmacros The first one. -- --Jos Vos [EMAIL

Re: RPM Build Errors

2008-04-07 Thread SANDY KALUGDAN
that is the spec file i'm working on... - Original Message From: Austin G. Smith [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Monday, April 7, 2008 15:05:06 Subject: RE: RPM Build Errors Grab that .spec file that was posted earlier.

Re: RPM Build Errors

2008-04-07 Thread SANDY KALUGDAN
I'm used the first one but still same error begets me. - Original Message From: Jos Vos [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Monday, April 7, 2008 15:20:02 Subject: Re: RPM Build Errors On Mon, Apr 07, 2008 at 12:07:38AM -0700,

RE: Another Issue--

2008-04-07 Thread Austin G. Smith
Dang um ole vista man- I will try with XP today. Thanks for your reply! Austin G. Smith, A+, MCP Digital Son, I.T. Services www.digitalson.com 678.213.0550 x:101 Office 678.213.0535 Fax Need reliable hosting? www.digitalsonhosting.com From: [EMAIL PROTECTED]

Re: Another Issue--

2008-04-07 Thread Devinder Singh
Have u tried using NT Rad Ping Utility Enter the Radius IP Address user name password secret key testing123-1 to see if you can get a access-accept reply Devinder On 07/04/2008, Alan DeKok [EMAIL PROTECTED] wrote: Austin G. Smith wrote: I am having an issue authenticating against mysql

RE: RPM Build Errors

2008-04-07 Thread Austin G. Smith
Grab that .spec file that was posted earlier. It will work like a charm! ;) Austin G. Smith, A+, MCP Digital Son, I.T. Services www.digitalson.com 678.213.0550 x:101 Office 678.213.0535 Fax Need reliable hosting? www.digitalsonhosting.com -Original Message- From: [EMAIL PROTECTED]

Re: RPM Build Errors

2008-04-07 Thread Jos Vos
On Mon, Apr 07, 2008 at 07:50:06AM +0200, Alan DeKok wrote: Then the customers can pay for that. Since they're often paying the distro for LTS, they can go to the distro for help. However, most distros know nothing about the packages they're supporting, so the users end up here. This is

Re: freeradius 2.0.3 peap, mschapv2, sql

2008-04-07 Thread Ivan Kalik
I have following problem, I compiling and installing freeradius 2.0.3 from tgz. I configuring him for authorizing from windows clients (Winxp), whith using mysql to save login and password. The problem is that if password in sql is saved as user-password authorization works fine, but if I save

Re: Fwd: EAP Authentication

2008-04-07 Thread Ivan Kalik
I want to authenticate users through using EAP authentication. I managed to generate the client and root certs from Free Radius. I have installed the client sert in my notebook. and managed to get authenticated via AP to Radius. But i cant seem to find them in the Free Radius accounting

Re: Freeradius + CHAP

2008-04-07 Thread Ivan Kalik
I think that you should have figured out by now that you need to post relevant data: database entries for that user radiusd -X output from the request Ivan Kalik Kalik Informatika ISP Dana 7/4/2008, SANDY KALUGDAN [EMAIL PROTECTED] piše: What do you want to put in them? This is enough to get

Re: Freeradius + CHAP

2008-04-07 Thread SANDY KALUGDAN
mysql select * from radcheck; ++--+++---+ | id | UserName | Attribute | op | Value | ++--+++---+ | 1 | s| Cleartext-Password | := | s | | 2 | steve| Cleartext-Password | := | s |

Re: session-timeout for disconnect at fixed time

2008-04-07 Thread Ivan Kalik
What should be instead of ?. I want to enter result of the expressions like `%{expr: ((%l + 86399) %% 86400) - %l}`. How can I make it? Try just: ((%l + 86399) %% 86400) - %l Also, in the debug mode, how can I shorten debugs. I mean, I want to get only access-accept, access-reject,

Re: Freeradius + CHAP

2008-04-07 Thread Ivan Kalik
User-Password = \340\334\351\234 Shared secret in clents.conf and on the NAS is not the same. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with proxy.conf freeradius-server-2.0.1

2008-04-07 Thread Herve Brunet
Dear Alan, Thank you. It works fine now with the new version (2.0.3) Herve Alan DeKok a écrit : Herve Brunet wrote: I want authenticate user [EMAIL PROTECTED] to my local server and all others requets [EMAIL PROTECTED] will be proxied to rad1.eduroam.fr. ... The

Re: Freeradius + CHAP

2008-04-07 Thread SANDY KALUGDAN
I've checked the clients.conf and it uses testing123 as the secret. I've created a record on nas mysql select * from nas; ++---+---+--+---++---+-+ | id | nasname | shortname | type | ports | secret | community | description |

Re: Freeradius + CHAP

2008-04-07 Thread Ivan Kalik
nas table and clients.conf are both on radius server. You need to make testing123 secret on the portal that is sending those reqests. Ivan Kalik Kalik Informatika ISP Dana 7/4/2008, SANDY KALUGDAN [EMAIL PROTECTED] piše: I've checked the clients.conf and it uses testing123 as the secret. I've

Re: Freeradius + CHAP

2008-04-07 Thread SANDY KALUGDAN
chillispot hotspotlogin.cgi contains # Shared secret used to encrypt challenge with. Prevents dictionary attacks. # You should change this to your own shared secret. $uamsecret = testing123; # Uncomment the following line if you want to use ordinary user-password # for radius authentication.

Re: Freeradius + CHAP

2008-04-07 Thread Ivan Kalik
Can you do radtest from the machine on which chillispot is installed? If radtest does OK - it's a chilli bug. If radtest fails as well - crypto libraries on that machine are broken. Ivan Kalik Kalik Informatika ISP Dana 7/4/2008, SANDY KALUGDAN [EMAIL PROTECTED] piše: chillispot

can't make a rpm from radius sources

2008-04-07 Thread Cristian Novac
Hello all, I have downloaded freeradius-server-2.0.0.tar.gz and after intalling it, I made some code modifications to meet my expectations. Than I compiled again from the src directory using make make install; after this, freeradius worked fine, as I intended; Now I would like to make a rpm

FR 2.0.3 gives duplicate NULL realm error

2008-04-07 Thread John Horne
Hello, I have been running FR 2.0.2 (built from source) for a short while with no problems. I have now upgraded to 2.0.3 (built from Fedora 9 source RPM). When I try and start radiusd (using 'radiusd -X' I get the following error: realm NULL { /etc/raddb/proxy.conf[107]: Duplicate realm

Re: FR 2.0.3 gives duplicate NULL realm error

2008-04-07 Thread John Horne
On Mon, 2008-04-07 at 15:51 +0100, John Horne wrote: I have been running FR 2.0.2 (built from source) for a short while with no problems. I have now upgraded to 2.0.3 (built from Fedora 9 source RPM). When I try and start radiusd (using 'radiusd -X' I get the following error: realm

Re: RPM Build Errors

2008-04-07 Thread Alan DeKok
Jos Vos wrote: For all the 1000+ apps in a distro, there are mailing lists, forums, or additional commercial support. Uh... no. If you want to work for such a distro for free, go ahead. I understand your point, but this is the way it all works. And, again, the same happens for all other

RE: RPM Build Errors

2008-04-07 Thread Ben Wiechman
-Original Message- From: freeradius-users-bounces+ben=wisper- [EMAIL PROTECTED] [mailto:freeradius-users- [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Sunday, April 06, 2008 12:15 PM To: FreeRadius users mailing list Subject: Re: RPM Build Errors Hi, On Sun, Apr 06,

Re: EAP-TLS certificate

2008-04-07 Thread xia sihua
Message: 8 Date: Sat, 05 Apr 2008 08:49:35 +0200 From: Alan DeKok [EMAIL PROTECTED] Subject: Re: EAP-TLS certificate To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=ISO-8859-1 xia sihua wrote:

FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Charlie B
Hello everyone, We have setup FreeRadius w/ Active Direcotry using LDAP and ntlm as per the wiki and everything is working great save one item of concern. When our users are needing to reset their password or have reset their password ntlm fails I'm pretty certain that this is not a freeradius

Re: Fwd: EAP Authentication

2008-04-07 Thread Devinder Singh
Hi Ivan Yes i maanaged to solve the problem I was using files instead of SQL as i followed the wiki example on 802.1x secure wireless. Not i can authenticate users with certs and then they login into the captive portal to login to Radius Server. Thanks Devinder On 07/04/2008, Ivan Kalik

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Ivan Kalik
Wrong key: http://support.microsoft.com/kb/823731 Ivan Kalik Kalik Informatika ISP Dana 8/4/2008, Charlie B [EMAIL PROTECTED] piše: Hello everyone, We have setup FreeRadius w/ Active Direcotry using LDAP and ntlm as per the wiki and everything is working great save one item of concern. When

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Charlie B
Thanks Ivan, We though there should be a key in the current logedon user as well, but all of our domain users don't have an entry in the registry, even though we have it check to cache the credentials. The only way we can produce this key is to have WinXP use the prompt for credentials balloon.

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Charlie B
I guess I should add that this is a wired connection, not that this should change too much. Thank you again! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius + CHAP

2008-04-07 Thread SANDY KALUGDAN
[EMAIL PROTECTED] SPECS]# radtest s sandy locahost 1645 testing123 radclient: Failed to find IP address for host locahost: Success - Original Message From: Ivan Kalik [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Monday, April 7, 2008