Combining ntlm_auth and mac address verification in freeradius

2010-10-15 Thread Langen Mike
Hi there. I've got the problem that I want to combine active directory authentication with mac address verification. So only user can log in which hardware is listed in a text file or similar. In the whole world wide web I didn't find a hint how to combine multiple authentication methods in

Re: Combining ntlm_auth and mac address verification in freeradius

2010-10-15 Thread Phil Mayers
On 10/15/2010 08:06 AM, Langen Mike wrote: Hi there. I’ve got the problem that I want to combine active directory authentication with mac address verification. So only user can log in which hardware is listed in a text file or similar. In the whole world wide web I didn’t find a hint how to

AW: Combining ntlm_auth and mac address verification in freeradius

2010-10-15 Thread Langen Mike
Hi Phil. Thank you for your quick answer. That's exactly, what I need. Where do you get this information? It's really hard to retrieve usable information from wiki.freeradius.org... Is there a good resource for this kind of information? I do have difficulties to understand, how freeradius is

radtest issue

2010-10-15 Thread Sujith Paily K
I have installed freeradius2 freeradius2-utils on centos5.5 using yum. I did the basic configuration and test with radtest - radtest testing password 127.0.0.1 10 testing123 Sending Access-Request of id 221 to 127.0.0.1 port 1812

Re: AW: Combining ntlm_auth and mac address verification in freeradius

2010-10-15 Thread Phil Mayers
On 15/10/10 10:13, Langen Mike wrote: Hi Phil. Thank you for your quick answer. That's exactly, what I need. Where do you get this information? It's really hard to retrieve usable information from wiki.freeradius.org... Mainly accumulated knowledge. Is there a good resource for this kind

RE: Service-Logon

2010-10-15 Thread Jay Kuhne (jkuhne)
Hi Alan and all, This is just a follow-up, here is the config which works for Service-Logon with Cisco AVP. The A vs N in front of the service name determines whether service is applied at bring-up (AutoLogon) or applied via COA afterwards test...@asr_domain1 Cleartext-Password := hello1

AW: AW: Combining ntlm_auth and mac address verification in freeradius

2010-10-15 Thread Langen Mike
Hi Phil. Thank you very much. That would do for now! Kind regards Mike -Ursprüngliche Nachricht- Von: freeradius-users-bounces+mike.langen=ofwi...@lists.freeradius.org [mailto:freeradius-users-bounces+mike.langen=ofwi...@lists.freeradius.org] Im Auftrag von Phil Mayers Gesendet:

Re: radtest issue

2010-10-15 Thread Ryan Garrett
The NAS-IP-Address field should be set to whatever you are using as your supplicant, most likely your switch. On Fri, Oct 15, 2010 at 4:15 AM, Sujith Paily K suj...@sparksupport.comwrote: I have installed freeradius2 freeradius2-utils on centos5.5 using yum. I did the basic configuration and

RE: Proxy Issue

2010-10-15 Thread Garber, Neal
Ah... I don't usually do builds tests without pthreads. Actually, I am building/testing with pthreads. However, I was running in debug mode (radiusd -X). The problem does not occur when I don't start radiusd with -X. Some additional debug code in event.c shows the following sequence of

Toggle Calling-Station-Id check item based on Framed-Protocol?

2010-10-15 Thread William Burnett
Hello all.. I'm trying to setup my Radius server so that it will map MAC addresses to TTLS user/pass for 802.1x. I have that part working fine. The problem is, the same user/pass pair I'm also using for the clients PPPoE authentication. I want the Calling-Station-Id to be verified when an

Re: Toggle Calling-Station-Id check item based on Framed-Protocol?

2010-10-15 Thread William Burnett
Thinking this over I may have thought of a solution, but if anyone can suggest something better let me know... I write another SQL module call it sql_ppp and change the query so that it omits any records with an attribute == Calling-Station-Id, and the use unlang to call that module when