Re: PEAP and proxying

2005-03-21 Thread Mark
Hi Alan I did as you suggested and managed to get just the tunnel proxied by adding the line DEFAULTEAP-Type == MS-CHAP-V2, Proxy-To-Realm := mydomain and setting proxy_tunneled_request_as_eap = no in the peap section of eap.conf. Is this the way you would suggest to do it? I envisage

XP Computer Account Authentication

2005-03-21 Thread Dagoberto Luiz Schonardie
Hi I´m using Freeradius 1.0.2 and Samba 3.0.11 on a FreeBSD 5.0.3. I´m authenticating wireless clients on aWindowsPDC using PEAP/MSCHAPV2 with ntlm_auth an winbind and it works fine for the users account authentication. Is it possible to authenticate the Windows XP computer account in

FreeRadius + FreeTDS + MSSQL70

2005-03-21 Thread Michael Lam
Title: FreeRadius + FreeTDS + MSSQL70 Dear All How to setup the Freeradius to support FreeTDS and MSSQL70? Can provide more information and document? mssql.conf driver = rlm_sql_freetds server = 192.168.1.1 login = sa password = radius radus_db = radius After I run the radiusd

Re: FreeRADIUS and MySQL+SSL

2005-03-21 Thread Wolfram Schlich
* Paul Hampson [EMAIL PROTECTED] [2005-03-20 03:50]: On Sat, Mar 19, 2005 at 02:06:56PM +0100, Wolfram Schlich wrote: * Paul Hampson [EMAIL PROTECTED] [2005-03-19 04:56]: On Sat, Mar 19, 2005 at 03:52:52AM +0100, Wolfram Schlich wrote: * Wolfram Schlich [EMAIL PROTECTED] [2005-03-17

Re: Realm rewrite

2005-03-21 Thread David Manchado
Hello! El Viernes, 18 de Marzo de 2005 19:42, Alan DeKok escribió: David Manchado [EMAIL PROTECTED] wrote: I want to force that the whole realm adsl.realm1 must be rewritten as adsl.realm1.com so I won't have to add the same user as [EMAIL PROTECTED] and [EMAIL PROTECTED] That's just

Re: XP Computer Account Authentication

2005-03-21 Thread Michael Griego
Dagoberto Luiz Schonardie wrote: Is it possible to authenticate the Windows XP computer account in this environment ? Not currently. --Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

WinXP EAP-TLS: Zertifikat

2005-03-21 Thread Thomas Schleindl
Hallo, ich habe einen Freeradius Server der letzten Version unter CentOS 4 laufen. PEAP funktioniert wunderbar, auch die überprüfung des Serverzertifikates passt soweit. Im nächsten Schritt möchte ich gerne den Client mittels Zertifikat anstatt usr/pwd identifizieren. Leider gibt Windows immer

radclient

2005-03-21 Thread Vicky El Fhaily
Hi guys and girls, I have recently downloaded and installed freeRADIUS on a fedora (Red Hat Linux) machine. The radtest is successful but the radclient :( is not. For example : #radclient localhost auth testing123 gives nothing, just like above. It hangs the terminal and I have to end the

Doc bug?

2005-03-21 Thread Stefan Winter
Hello, in doc/Acct-Type all the examples state things like Acct-Type:= SQLFOO but in the dictionary, Acct-Type is defined as an integer. I am now asking myself if one shouldn't better use integer values for the := operator, and as well whether or not it will work anyway as described in the

Re: FreeRadius + FreeTDS + MSSQL70

2005-03-21 Thread Alan DeKok
Michael Lam [EMAIL PROTECTED] wrote: How to setup the Freeradius to support FreeTDS and MSSQL70? You don't. Use iodbc. mssql.conf driver = rlm_sql_freetds If that's in the default mssql.conf, it should be fixed. rlm_sql_freetds was deleted years ago. Alan DeKok. - List

add realm in huntgroup and force proxy with latest cvs

2005-03-21 Thread Jason Ornstein
Howdy, I'm attempting add a realm based on conditions in a huntgroup and I'm wondering if this is even possible and, if so, what I might be missing to make this work. Here is my [huntgroup] file cisco-router-admin NAS-IP-Address == 10.15.32.71, NAS-Port-Id == 66-67, NAS-Port-Type ==

RE: add realm in huntgroup and force proxy with latest cvs

2005-03-21 Thread Mitchell, Michael J
It looks like I'm interested in the 'Realm' or 'Proxy-To-Realm' attributes, but I'm not sure where to put them. I think that I'd have to do this in the users file, but I'm not sure if that is too late in the process. Maybe something along these lines: DEFAULT Huntgroup-Name ==

Variable...

2005-03-21 Thread Chan Min Wai
Dear all, I would like to have the variable below. (Can get from almost everywhere) 1) User-Name 2) Nas-Ip-Address 3) Framed-Ip-Address (Only can get the information if the exec run on the accounting part) 4) Acct-Status-Type 5) Acct-Session-Id 6) Acct-Unique-Session-Id 7) Acct-Session-Time 8)

Re: Doc bug?

2005-03-21 Thread Alan DeKok
Stefan Winter [EMAIL PROTECTED] wrote: in doc/Acct-Type all the examples state things like Acct-Type:= SQLFOO but in the dictionary, Acct-Type is defined as an integer. That's OK. The parser is forgiving (i.e. dumb) I am now asking myself if one shouldn't better use integer values for the

Re: radclient

2005-03-21 Thread Alan DeKok
Vicky El Fhaily [EMAIL PROTECTED] wrote: For example : #radclient localhost auth testing123 gives nothing, just like above. Why not read the man page for radclient, or radclient -h? You're not using it properly. Even the debugger gives nothing, blank. (Also tried radiusd -x -x -x). I

Re: PEAP and proxying

2005-03-21 Thread Alan DeKok
Mark [EMAIL PROTECTED] wrote: I did as you suggested and managed to get just the tunnel proxied by adding the line DEFAULT EAP-Type == MS-CHAP-V2, Proxy-To-Realm := mydomain and setting proxy_tunneled_request_as_eap = no in the peap section of eap.conf. Is this the way you would

Re: Freeradius-Users digest, Vol 1 #4441 - 10 msgs

2005-03-21 Thread Vicente Barrientos Valdivia
Guy. mssql.conf driver = rlm_sql_freetds #server = 192.168.1.1 server = name_of_MSSQLSERVER port=1433 login = sa password = radius radus_db = radius try unixodbc+freetds+freeradius, I use this and good work. Vicente. Message: 4 From: