Re: WPA2 802.1X PEAPv0/EAP-MSCHAPv2

2010-04-01 Thread Alan DeKok
Ryan A. Krenzischek wrote: Greetings! I am at a road block here. I know setting up WPA2 Enterprise PEAPv0/EAP-MSCHAPv2 / 802.1X should be simple. It just isn't working! Perhaps I am suffering from green screen syndrome :) I have followed directions from:

Re: Freeradius + PEAP.. stuck on validating identity..

2010-04-01 Thread Matt Harlum
On 01/04/2010, at 1:44 PM, Matt Harlum wrote: On 01/04/2010, at 7:39 AM, Bruno Kremel wrote: On Wednesday 31 March 2010 21:28:48 Alan DeKok wrote: What should be there? Beacuse I don't know I am using Daloradius web interafce for adding data to database, so I just loaded default

Re: Freeradius + PEAP.. stuck on validating identity..

2010-04-01 Thread Bruno Kremel
2010/4/1 Matt Harlum m...@cactuar.net: On 01/04/2010, at 1:44 PM, Matt Harlum wrote: On 01/04/2010, at 7:39 AM, Bruno Kremel wrote: On Wednesday 31 March 2010 21:28:48 Alan DeKok wrote: What should be there? Beacuse I don't know I am using Daloradius web interafce for adding data to

Re: Freeradius + PEAP.. stuck on validating identity..

2010-04-01 Thread Matt Harlum
On 01/04/2010, at 8:40 PM, Bruno Kremel wrote: 2010/4/1 Matt Harlum m...@cactuar.net: On 01/04/2010, at 1:44 PM, Matt Harlum wrote: On 01/04/2010, at 7:39 AM, Bruno Kremel wrote: On Wednesday 31 March 2010 21:28:48 Alan DeKok wrote: What should be there? Beacuse I don't know I am

Re: Freeradius + PEAP.. stuck on validating identity..

2010-04-01 Thread Alan DeKok
Bruno Kremel wrote: Sending Access-Challenge of id 0 to 192.168.3.1 port 1320 EAP-Message = 0x010c00061900 Message-Authenticator = 0x State = 0x53b1704557bd694fbe3359243d2a2638 Finished request 40. Going to the next request Waking up

[no subject]

2010-04-01 Thread Saman Kwok
Hi ,I am happing problem that I couldn't resolve alone. If anyone in the list could help me will be appreciated. I have access point EnGenius 2610 and I run freeradius under RHEL5.RHEL5 have two ethernet card, eth0 : 192.168.1.4 to Internet, eth1 to Wifi Client with IP 192.168.0.1 (Client is

Re: Freeradius + PEAP.. stuck on validating identity..

2010-04-01 Thread Bruno Kremel
2010/4/1 Alan DeKok al...@deployingradius.com: Bruno Kremel wrote: Sending Access-Challenge of id 0 to 192.168.3.1 port 1320         EAP-Message = 0x010c00061900         Message-Authenticator = 0x         State = 0x53b1704557bd694fbe3359243d2a2638 Finished

Using Vendor Attributes

2010-04-01 Thread Paul Varvel
Hi everybody, I'm beginner with FreeRadius and I'd like to know where can I use a vendor specific attribute for my Redback router (in which configuration file). The dictionary is in /usr/share/freeradius/dictionary.redback and loaded when FreeRadius starts. When is try to use Context-Name =

Re: Freeradius + PEAP.. stuck on validating identity..

2010-04-01 Thread Alan DeKok
Bruno Kremel wrote: I am posting full log with first is radtest accepted and others are failde login from wifi client with 2 different accounts... FreeRADIUS Version 2.0.4, for host i486-pc-linux-gnu, built on Mar 29 2010 at 15:58:09 You should probably upgrade to 2.1.8. It has a lot of

NAS-IP vs srcIP

2010-04-01 Thread Marlon Duksa
Hi everyone - Can anyone think of a reason why the NAS-IP and the scr-IP of the access-req packet should not be the same? If the NAS-IP is configurable in the NAS, then the NAS-IP can be set to the IP address other than the src-ip of the NAS that is used in reqular FreeRadius

RE: NAS-IP vs srcIP

2010-04-01 Thread John Kane
Hi everyone - Can anyone think of a reason why the NAS-IP and the scr-IP of the access-req packet should not be the same? One of NAS is on the other side of a load balancer, source IP is not the same as NAS-IP. John This message is confidential to Prodea Systems, Inc unless otherwise

Re: NAS-IP vs srcIP

2010-04-01 Thread Phil Mayers
On 04/01/2010 05:39 PM, Marlon Duksa wrote: Hi everyone - Can anyone think of a reason why the NAS-IP and the scr-IP of the access-req packet should not be the same? If the NAS-IP is configurable in the NAS, then the NAS-IP can be set to the IP address other than the src-ip of the NAS that is

Re: NAS-IP vs srcIP

2010-04-01 Thread Alan DeKok
Marlon Duksa wrote: Can anyone think of a reason why the NAS-IP and the scr-IP of the access-req packet should not be the same? Many. There is *no* requirement in RADIUS that they be identical. When a packet is proxied, the NAS-IP-Address stays the same, but the source IP changes. Alan

Re: NAS-IP vs srcIP

2010-04-01 Thread James J J Hooper
--On 01 April 2010 09:39 -0700 Marlon Duksa mdu...@gmail.com wrote: Hi everyone - Can anyone think of a reason why the NAS-IP and the scr-IP of the access-req packet should not be the same? If the NAS-IP is configurable in the NAS, then the NAS-IP can be set to the IP address other than the

Kerberos (krb5) Module Overrides Other Authentication Types . . .

2010-04-01 Thread Mowgli Assor
{...} ++[preprocess] returns ok [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d - /var/log/radius/radacct/128.146.XXX.XXX/auth-detail-20100401 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/128.146

Re: NAS-IP vs srcIP

2010-04-01 Thread Michael Lecuyer
Plenty of reasons - but one you won't have control over even in CoA is that it could be proxied. The NAS-IPAddress is used in the CoA request packet to tell the NAS which client should receive the packet. Marlon Duksa wrote: Hi everyone - Can anyone think of a reason why the NAS-IP and the