Re: PEAP or TTLS with Ldap ?

Hi Chris, I've modified my users file like this : #= # Test's User for 802.1x EAP/PEAP or EAP/TTLS #= jpc User-Password == jpc

Re: PEAP or TTLS with Ldap ?

Hi, I've realized a other test with a modification radiusd.conf. I've added ldap in authorize section like this : authorize { preprocess chap mschap suffix # ldap gets the Configured password. ldap eap files } But now, server don't

Re: Cisco catalyst + freeradius failing all the time

: entering group authorize for request 1 modcall[authorize]: module preprocess returns ok for request 1 radius_xlat: '/var/log/radacct/192.84.145.6/auth-detail-20040206' rlm_detail: /var/log/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radacct/192.84.145.6/auth-detail

Cisco SIP Proxy Server accounting to Freeradius

Hi All, I'm in the process of setting up a cisco sip proxy server CSPS. It can only do accounting to a Radius and therefore i installed Freeradius 0.9.3 on the redhat 7.3 running the CSPS Server. My problem is that the accounting is rejected as follows: eceived Accounting-Request packet from

Re: Cisco catalyst + freeradius failing all the time

-Authenticator = 0x76aaed3bbe247a92723119811f6c modcall: entering group authorize for request 1 modcall[authorize]: module preprocess returns ok for request 1 radius_xlat: '/var/log/radacct/192.84.145.6/auth-detail-20040206' rlm_detail: /var/log/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands

RE: EAP/TLS sending bad certificate

Message: 1 Date: Thu, 05 Feb 2004 17:28:40 +0530 From: Arindam Roy [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: EAP/TLS sending bad certificate Reply-To: [EMAIL PROTECTED] Hello all, I am running freeradius-snapshot-20040128, RH8, xsupplicant. Whenever Radius sends a Sever Hello done

Re: Cisco catalyst + freeradius failing all the time

Hi ricardo, I don't where is your problem, but i've the same config that's works. rlm_eap_md5: No password configured for this user Check your users file if there a line like this : (don't use Auth-Type) veraldi User-Password == See below some informations on my conf :

[Fwd: Re: EAP/TLS sending bad certificate]

Original Message Subject: Re: EAP/TLS sending bad certificate Date: Fri, 06 Feb 2004 18:49:42 +0530 From: Arindam Roy [EMAIL PROTECTED] To: [EMAIL PROTECTED]

Re: LDAP Group membership problems

What's in your users file? Check http://doris.cc/radius it explains how to use the User-Profile to send back group reply attributes. Here is some relevent parts. LDAP Entry dn: uid=dial,ou=profiles,ou=radius,dc=mydomain,dc=com objectclass: radiusprofile uid: dial radiusServiceType: Framed-User

Re: PEAP or TTLS with Ldap ?

At 03:16 AM 2/6/2004, Jean-Paul Chapalain wrote: Hi, I've realized a other test with a modification radiusd.conf. I've added ldap in authorize section like this : authorize { preprocess chap mschap suffix # ldap gets the Configured password. ldap

radius kerberos interaction

[authorize]: module preprocess returns ok for request 0 radius_xlat: '/var/log/radius/radacct/129.186.250.32/auth-detail-20040206' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/***.***.***.***/auth-detail-20040206 modcall[authorize

Passwords

Ive got a working MySQL/freeRadius setup working. However, a possible customer, that wants to switch to us, only has access to unix style encrypted passwords. Is there a way I can put them in as encrypted, but still be able to login with the unencrypted password? Or to decrypt the

Lost Patches

Alan, Some time ago I submitted 2 patches: - One to add the # to the list of allowed characters in the sql database. - One to add the accounting_update_query_alt functionality to the sql module. Is there a chance that any one of these patches gets included in the CVS? If there is, I will gladly

RE: Passwords

Let me rephrase that, it didnt come out at all like I wanted. I want to store a Crypt-Password in the DB, but I would like to have a web based front end that will allow customers to just enter plain text passwords. Is there a simple way to accomplish that? Example: abC6Def is what

RE: PAP Challenge password change

Title: Message Really need to get some help on this. I see that the ACE Radius server sends the Access-Challenge packet. However I have no idea how I set this up in my MySQL DB. What should I enter into the DB to send back the Access-Challenge packets ? Any help would be great.. Really

preproxy for calledstationid to realm

We proxy for a ton of realms, and all works fine on our 0.8.1 radius farm, utilizing MySQL on separate servers accounting and some radgroupcheck/reply stuff. We have to start processing proxy requests for unique Called-Station-ID with unknown realms. We have a unique dnis (final four) number, so

Unknown module rcode 'DEFAULT' in attrs

Hello, Learning freeradius-0.9.3 - never used before. Had it running in default setup after install so it answered from another client requests. Want to add some Ascend-Data-Filter and having problems. Can't understand problem from reading archives. End of start using

Re: preproxy for calledstationid to realm

At 09:55 PM 2/6/2004, Jim wrote: snip preproxy_users file: DEFAULT Called-Station-ID =~ *1234, Proxy-To-Realm := realmname The realm will be stripped before sending on the packets to the auth server. Will/should this work? Any downside besides the fact we have to do this on all of our

Re: Unknown module rcode 'DEFAULT' in attrs

At 09:58 PM 2/6/2004, John Ensley wrote: Hello, Learning freeradius-0.9.3 - never used before. Had it running in default setup after install so it answered from another client requests. Want to add some Ascend-Data-Filter and having problems. Can't understand problem from