Re: Simultaneous-Use

2003-09-20 Thread Double
On Fri, 19 Sep 2003 11:8:55 +0800 [EMAIL PROTECTED] wrote: test Auth-Type = Crypt-Local, Crypt-Password == $1$YoWRpiSV$QsHmtOSFoOGEw4i7LjaLV/, Simultaneous-Use := 1 Hi all! How to configure some accounts be limited to only one login at a time and some not?

RE: proxy.conf problem

2003-09-20 Thread Mustafa N. deeb
Yes Below is the debug of 2 attempts, the first is successful and the other is not I'm using ntradping for testing rad_recv: Access-Request packet from host 192.116.17.51:1882, id=0, length=47 Sat Sep 20 15:26:15 2003 : Debug: Thread 1 assigned request 0 Sat Sep 20 15:26:15 2003 : Debug: ---

Re: Wireless clients, Cisco leap, Radius Samba

2003-09-20 Thread Alan DeKok
Alan Munday [EMAIL PROTECTED] wrote: Not able to find any refs to EAP-TTLS in Windows XP or Cisco's ACU wireless clients. Does this require a third party option? Unfortunately, yes. Windows XP ships with PEAP, which is an idiotic protocol. It's more complicated than TTLS, and does

Re: proxy.conf problem

2003-09-20 Thread Alan DeKok
Mustafa N. deeb [EMAIL PROTECTED] wrote: Below is the debug of 2 attempts, the first is successful and the other is not So compare the two, to see what the differences are. You do realize that the two usernames test and [EMAIL PROTECTED] are different, don't you? The 'users' file keys on

Re: RADIUS PAM Module with RH9.

2003-09-20 Thread Alan DeKok
Kenneth Mix [EMAIL PROTECTED] wrote: When I am running radiusd -X, it stops at: pam_pass: using pamauth string radiusd for pam.conf lookup Ok... so it's locking somewhere. After this it will not authenticate any other users, PAM or other. Also, the PAM module never seems to contact my IAS

Re: dialin server on RedHat 8.0 with RADIUS authentication

2003-09-20 Thread Alan DeKok
Alan Lehman [EMAIL PROTECTED] wrote: It seems like there is not a good explanation in any one place on how to set this up. Most of what follows was assembled from existing documentation. It took a while to piece these steps togather and make it work, so I thought I would share how I did it.

Re: how to access authorization database from a different RLM than rlm_sql

2003-09-20 Thread Alan DeKok
Dave Mason [EMAIL PROTECTED] wrote: This may seem a bit unusual, but I find myself in a situation where I need to update the SQL authorization database from a different RLM module than rlm_sql. That is, in my new RLM I'll want to update the radcheck and usergroup tables with data that will

Re: dialin server on RedHat 8.0 with RADIUS authentication

2003-09-20 Thread Alan Lehman
Alan DeKok wrote: Alan Lehman [EMAIL PROTECTED] wrote: It seems like there is not a good explanation in any one place on how to set this up. Most of what follows was assembled from existing documentation. It took a while to piece these steps togather and make it work, so I thought I would

Re: TTLS/Radius Accounting

2003-09-20 Thread Michael Griego
This really sounds like a fundamental design problem (problem used lightly in this case) in EAP-TTLS. The only UserID that the NAS (Access Point) knows about is the one sent to the initial EAP-Identity request. After the intial tunnel is setup, the second (true) EAP-Identity request is sent

Re: TTLS/Radius Accounting

2003-09-20 Thread Alan DeKok
Michael Griego [EMAIL PROTECTED] wrote: This really sounds like a fundamental design problem (problem used lightly in this case) in EAP-TTLS. The only UserID that the NAS (Access Point) knows about is the one sent to the initial EAP-Identity request. Absolutely. The only way I can see to