Help : issue in authenticating Wireless clients

2004-04-01 Thread Vasudevan.S
Dear All, I am re sending the mail again Can any one have any idea of what is wrong with the configuration or what am i doing wrong here ?? Thanks, Vasudevan.S Dear Alan DeKok, I am using free-radius 0.9.3 for authentication purpose. I have configured free radius and cisco 350 AP and I see

Re: ldap section

2004-04-01 Thread Kostas Kalevras
On Wed, 31 Mar 2004, Ron Wahler wrote: Can you authenticate without the idenity and password filled out? I can't seem to get it to work without these fields filled out? You need to setup the corresponding LDAP ACIs to allow search privileges to anonymous access (bad idea from a security

Re: Could not link driver rlm_sql_mysql problem.

2004-04-01 Thread Costin Manda
you can check dependencies with the Linux command ldd. What version of Freeradius are you using and have you compiled freeradius yourself? - Original Message - From: Shannon Sariman [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 01, 2004 10:29 AM Subject: Could not link

RE: counter module (again)

2004-04-01 Thread Tim Bots
Due to a wrong install (my fault :-( ) the man command doesn't work for freeradius settings. Can you send me an copy of this page? The db file isn't generated (what do I do wrong :-?) I hope someone can help me, Tim Bots -Oorspronkelijk bericht- Van: Kostas Kalevras [mailto:[EMAIL

RE: counter module (again)

2004-04-01 Thread Tariq Rashid
the man page should be there in the sources... just install it again. if you don't want to do that then just load it directly into man (man man_file_name). some version of the less/more pager can also read the man page directly. you can download a fresh copy of the sources from the website if

Re: Help : issue in authenticating Wireless clients

2004-04-01 Thread Gary McKinney
Vasudevan, This is how I preceive things: Indeed the radius server is sending the accept back to the nas... Wed Mar 31 12:45:51 2004 : Debug: rad_check_password: Found Auth-Type Accept Wed Mar 31 12:45:51 2004 : Debug: rad_check_password: Auth-Type = Accept, accepting the

Re: Could not link driver rlm_sql_mysql problem.

2004-04-01 Thread Gary McKinney
Hi Shannon, By default I don't think FreeRadius compiles with the sql drivers. You have to configure FreeRadius to compile with the MySQL drivers before you can use MySQL with it. Once compiled with the drivers it should work... At least that is what I remember - check the configuration

Ldap + freeradius

2004-04-01 Thread Murtuza
Hi, We are using ldap for authentication following are the ldap attributes. uid=username.domainname.com, ou=dialup, o=xxx objectclass=top objectclass=person objectclass=radiusprofile uid=username.domainname.com mail=username.domainname.com cn=username sn=lastname npsessionsallowed=1

TLS Alert read:fatal:unknown

2004-04-01 Thread Katsunori Kamada
Hello, I'm trying to authenticate my WinXPsp1 PC by 802.1x functions of Catalyst2950 and EAP-PEAP(MSCHAPv2) with FreeRADIUS. software versions: freeradius-snapshot-20040331 openssl-0.9.7d config of Cat.2950 (related part only): aaa new-model aaa authentication dot1x

FreeRadius IP-POOL + Ldap

2004-04-01 Thread Murtuza
Hi, We are using ldap for authentication following are the ldap attributes. uid=username.domainname.com, ou=dialup, o=xxx objectclass=top objectclass=person objectclass=radiusprofile uid=username.domainname.com mail=username.domainname.com cn=username sn=lastname npsessionsallowed=1

Re: Help : issue in authenticating Wireless clients

2004-04-01 Thread Michael Griego
I posted a response to this... Did you look at it? --Mike On Thu, 2004-04-01 at 02:41, Vasudevan.S wrote: Dear All, I am re sending the mail again Can any one have any idea of what is wrong with the configuration or what am i doing wrong here ?? Thanks, Vasudevan.S Dear

IP-POOL + Ldap

2004-04-01 Thread Murtuza
Adding to my last mail . How do we achieve the below using Radius and LDAP We have users dialing to a Cisco 5300 RAS How do we dynamically assign an Ip address from a given range of Ips to the dialup user. We need multiple users connecting with the same username. Regards Monty - List

Wireless Authentication against Windows AD

2004-04-01 Thread Steve OBrien
Does anyone know if wireless authentication (LEAP, PEAP, EAP, TLS, TTLS) is possible using freeradius authenticating to Windows AD without having to enter usernames or any user information on the freeradius box? I am still not sure why it cannot use the LDAPS connection that I have working from

Re: Wireless Authentication against Windows AD

2004-04-01 Thread Kevin C Miller
Does anyone know if wireless authentication (LEAP, PEAP, EAP, TLS, TTLS) is possible using freeradius authenticating to Windows AD without having to enter usernames or any user information on the freeradius box? I am still not sure why it cannot use the LDAPS connection that I have working from

Re: Wireless Authentication against Windows AD

2004-04-01 Thread Steve OBrien
So do I need to compile with rlm_krb? I am on Solaris 9 and was trying to compile with Kerberos but the Solaris distro does not include the necessary header files and I did not really want to open a whole new can of worms. What I was hoping to do was to have the freeradius box be root CA and the

Error in sql module causes freeradius to stop functioning

2004-04-01 Thread Kostas Zorbadelos
Hello to everyone. Yesterday I installed freeradius-0.9.3 on a Solaris 2.7 production environment. I use sql module and oracle as my database to store accounting. I first try to store the accounting data in the database and afterwards I write them in files with the detail module. The problem is

HUP signal does not always work in Solaris

2004-04-01 Thread Kostas Zorbadelos
Hello. In a Solaris 2.7 I compiled the latest freeradius release (0.9.3) with gcc 2.95.3. I use it in a production environment with the sql module and an Oracle database. When I change a configuration file and send the HUP signal to the server, sometimes the server is killed. I also notice that

Re: Alan

2004-04-01 Thread Alan Russell
No offense taken. I am developing this project myself (trying to learn as much as I can). I posted this comment because I set up freeradius with PEAP-TLS on a wireless network. I then connected one computer with ethernet to the same network. I ran ethereal to examine packets on the network and

Re: Help : issue in authenticating Wireless clients

2004-04-01 Thread Alan Russell
Vasudevan, Are you using eap-tls? I noticed that the tls section in your radius.conf file is commented out. Still learning about this stuff as well, but in my config I had to generate certificates for use with tls. Alan Russell - List info/subscribe/unsubscribe? See

Re: Freeradius/Alan

2004-04-01 Thread Kaczmarek, Thaddeus
Title: Re: Freeradius/Alan On Wed, 2004-03-31 at 22:31, Steve OBrien wrote: I don't in any way wish to be derogatory. I applaud what all you guys are doing. It's just that I have posted several questions and seen several other questions posted that get no response. Granted these may be

Re: Freeradius/Alan

2004-04-01 Thread Steve OBrien
It is amazing how top posting gets scourged, but it is for good reason. The quickest way to annoy mailing users is to top post, makes it much more difficult to read. Also making snide comments doesn't earn many brownie points either. Many time's I have asked question's and gotten minimal

Re: Alan

2004-04-01 Thread [EMAIL PROTECTED]
On Thu, 1 Apr 2004 12:16:30 -0600, Alan Russell wrote: No offense taken. I am developing this project myself (trying to learn as much as I can). I posted this comment because I set up freeradius with PEAP-TLS on a wireless network. I then connected one computer with ethernet to the same

Re: Alan

2004-04-01 Thread Alan Russell
On Thu, 1 Apr 2004 12:16:30 -0600, Alan Russell wrote: No offense taken. I am developing this project myself (trying to learn as much as I can). I posted this comment because I set up freeradius with PEAP-TLS on a wireless network. I then connected one computer with ethernet to the same

Re: Freeradius/Alan

2004-04-01 Thread Alan Russell
It is amazing how top posting gets scourged, but it is for good reason. The quickest way to annoy mailing users is to top post, makes it much more difficult to read. Also making snide comments doesn't earn many brownie points either. Many time's I have asked question's and gotten minimal

Re: Could not link driver rlm_sql_mysql problem.

2004-04-01 Thread Shannon Sariman
Hi Costin, You wrote: you can check dependencies with the Linux command ldd. What version ofFreeradius are you using and have you compiled freeradius yourself? I am using freeradius-0.9.2 and yes I have compiled freeradius myself. I used the "./configure" with no additional options.

rlm_eap_tls log bug?

2004-04-01 Thread Chris Ross
Hey. I just noticed that at startup, the following is logged to my radius.log: Fri Apr 2 00:02:29 2004 : Error: rlm_eap_tls: conf N ctx stored I looked at the source, and this looks like a debugging, or informational, message. It's a message that occurs at the only successful result of

Unsubscribe

2004-04-01 Thread Tod Kang
[EMAIL PROTECTED]

LDAPS and non-standard ports - patch

2004-04-01 Thread Tarun Bhushan
Hi Kostas I wanted to submit a patch to rlm_ldap (see below). The patch is very simple - the addition of one line, and change of an existing line, to rlm_ldap.c. === PATCH [EMAIL PROTECTED] SOURCES]# cat freeradius-0.9.3-tlsmode.patch ---