EAP is in both the authenticate and authorize sections. I still have
not gotten it to work, today I am trying several different
permutations of the users file.
- Joe
On Thu, 16 Dec 2004 08:44:20 -0500 (EST), Dustin Doris
<[EMAIL PROTECTED]> wrote:
>
> > I have a radius box set up using 1.0.1. Currently it is doing
> > authentication and working fine. I am trying to integrate in 802.1x
> > auth. I have the EAP-TTLS w/ PAP working fine with a users entry of
> > "username" User-Password == "test", but I am confused how the users
> > and authorize and authenticate sections of the radiusd file should be
> > set to have EAP look at an LDAP entry. I know I have to set the pap
> > module to md5 to work with the LDAP and that I will have a new
> > huntgroup just for the .1x authentication, but I am stumped from
> > there. Below is how my users file and radiusd look now, my question is
> > really how should they look when I intergrate in the .1x
> >
> > Thanks in advance guys, you have helped me out in the past and I would
> > appreciate anything else you could do for me now.
> >
> > - Joe
> >
> >
> > ***radiusd.conf
> > ...
> > authorize {
> > autztype VPN_LDAP {
> > redundant {
> > VPN_LDAP1
> > VPN_LDAP2
> > }
> > }
> >
> > autztype Dial_LDAP {
> > redundant {
> > Dial_LDAP1
> > Dial_LDAP2
> > }
> > }
> > ...
> > authenticate {
> > authtype VPN_LDAP {
> > redundant {
> > VPN_LDAP1
> > VPN_LDAP2
> > }
> > }
> >
> > authtype Dial_LDAP {
> > redundant {
> > Dial_LDAP1
> > Dial_LDAP2
> > }
> > }
> >
> > ***users
> >
> > DEFAULT Autz-Type := VPN_LDAP, Auth-Type := VPN_LDAP, Huntgroup-Name == VPN
> >
> >
> > DEFAULT Autz-Type := Dial_LDAP, Auth-Type := Dial_LDAP, Huntgroup-Name ==
> > DIAL
> > Service-Type == Framed-User,
> > Ascend-Assign-IP-Pool = 1,
> > Framed-IP-Address = 255.255.255.254,
> > Framed-MTU = 1524,
> > Service-Type = Framed-User,
> > Fall-Through = No
> >
> > -
>
> Do you have eap in your authorize and authenticate sections?
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
