Re: 802.1x

2005-11-02 Thread Oliver Graf
On Tue, Nov 01, 2005 at 09:27:57PM -0500, Alex M wrote: What is the difference between plain Radius identification compare to 802.1x? Basically 802.1x is between client and NAS, and radius is between NAS and AAA server. So how would you compare them? Oliver. - List

Re: PEAP MS_CHAP V2: problem with tunnel attributes on enterasys V2 switch

2005-11-02 Thread slapeyre
Yes ,i know that The V2 switches (and all Enterasys switches) support EAP-MD5 but i want to implement EAP-PEAP with ms-chapv2 and VLAN assignment It wasn´t a problem to configure EAP-PEAP with freeradius server (running on suse) and Enterasys switches. I want to implement VLAN assignment at a

using ldap, sql and pam for user authentification

2005-11-02 Thread Markus Krause
hi all! i want to configure the freeradius server (1.0.5) to use ldap, sql and pam as source for user authentification. i only get the first two to work at the same time (ldap and sql) but not together with pam. if i use this in /etc/raddb/users: # users wlanAuth-Type = EAP testuser

Re: New to List - First Time Set-up

2005-11-02 Thread tech13
Hi, Start with: http://www.oreilly.de/catalog/radius/chapter/ch05.html It was very helpful for me. Pierre Forget -- Original Message Date: Tue, 1 Nov 2005 15:12:19 -0800 From: Mark Sarria [EMAIL PROTECTED] Subject: New to List - First Time Set-up --

RE: 802.1x

2005-11-02 Thread Alex M
Now im totally lost... Can u give me an example what 802.1x does? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, November 02, 2005 11:04 AM To: FreeRadius users mailing list Subject: Re: 802.1x Alex M [EMAIL PROTECTED]

Re: freeradius with static IP

2005-11-02 Thread Dusty Doris
On Tue, 1 Nov 2005, Daniel Torres wrote: Hi, First of all excuse my englis it is not very well, i wanted to know if somebody has been able to set a freeradius server to assign static IP or if it is possible to assign static IP with freeradius1.0.5. Thanks for the information. Yes, I do

RE: 802.1x

2005-11-02 Thread Jeff Reilly
Alex, Features such as 'bandwidth and port blocking" (if any) are allocated/configured on the _NAS_ (in this case a NAS port) via AV pair/s provided by RADIUS...the '802.1x Supplicant" (Client/Endpoint) in simple terms... provides a secure/standardconduit which facilitates the communication of

RE: 802.1x

2005-11-02 Thread Alex M
Ok I got it By the way what is AV pair? And how do you get NAS related attributes to control bandwidth from vendors? Like if im using D-Link how could I get attributes from them? Thanks! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Reilly Sent:

Patches

2005-11-02 Thread kdr akm
Hi i need to ask is there any patch for PPPD to send this MAC adress to RADIUS ??? and what about rp-pppoe is there any patch let pppoe server is probrably rp-pppoe to send Mac address to pppd ? Yahoo! FareChase - Search multiple travel sites in one click. - List

RE: 802.1x

2005-11-02 Thread Guy Davies
Which Vendor Specific Attributes are implemented by a Vendor are, as the name suggests, specific to the vendor and totally up to them to choose. I would not be surprised if DLink implement *NO* VSAs. Given the market into which they're pitching their kit, I doubt very much that their kit

RE: 802.1x

2005-11-02 Thread Alex M
Ok, thanks From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Davies Sent: Wednesday, November 02, 2005 12:38 PM To: FreeRadius users mailing list Subject: RE: 802.1x Which Vendor Specific Attributes are implemented by a Vendor are, as the name suggests,

Re: SV: rlm_sql module won't compile under Solaris 10

2005-11-02 Thread M.McNeil
SUCCESS!! I already had /usr/ccs/bin in my path, however, it was listed BEFORE /usr/sfw/bin, which apparantly makes all the difference in the world. Here are the PATH and LD_LIBRARY_PATH environment variable settings I used, just in case someone else runs into the same issue:

RE: 802.1x

2005-11-02 Thread Alex M
Ok, will call Dlink to see if that have something (the hotspot itself has that functionality internally though) Also do you know if opensources such as NoCAT and ChillBox support such features? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Reilly

RE: 802.1x

2005-11-02 Thread Jonathan De Graeve
Chillispot certainly does! M0n0wall almost ;) Dont know about nocat J. Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Alex M Verzonden: woensdag 2 november 2005 19:19 Aan: 'FreeRadius users mailing list' Onderwerp: RE: 802.1x Ok, will call Dlink to see if

RE: 802.1x

2005-11-02 Thread Jeff Reilly
I have no experience with the opensouce efforts you mention below... Original Message Subject: RE: 802.1xFrom: "Alex M" [EMAIL PROTECTED]Date: Wed, November 02, 2005 11:19 amTo: "'FreeRadius users mailing list'"freeradius-users@lists.freeradius.org Ok, will call Dlink to see

attributes handling

2005-11-02 Thread kevin
Hi Guys, I want to get some idea about how to manipulate attributes before we respond to NAS. For example, before I send Access-Accept packet to the NAS, I want to add two additional attributes (let's say S and T) to NAS-1 and add X, Y, and Z to NAS-2. In short, I want to add some

RE: 802.1x

2005-11-02 Thread Alex M
Wikipedia well, can it show me how to block ports like port 88 on user side? Yea I should learn how to use goggle he he -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Seferovic Edvin Sent: Wednesday, November 02, 2005 4:42 PM To: 'FreeRadius users

RE: 802.1x

2005-11-02 Thread Seferovic Edvin
I hate quoting but IEEE 802.1X is an IEEE standard for port-based network access control, part of the IEEE 802 (802.1) group of protocols. It provides authentication to devices attached to a LAN port, establishing a point-to-point connection or preventing access from that port if authentication

RE: return ALL the AVPs for a username that belongs multiple groups

2005-11-02 Thread Lenir
Here's the rest of my config. Notice, that username 3000 belongs to group Dialin and Dialin2. The user can register fine, however in this case the Access-Accept packet only returns the AVPs related to group Dialin (I'm guessing is because it's the first one that it matches). mysql select * from

Problem with EAP/TLS and XP SP2

2005-11-02 Thread Hal Pomeranz
Radius Server: Freeradius 1.0.5 on Solaris 8 (Sparc) Client:Windows XP (SP2), Intel PRO/Wireless 2915 (a/b/g) Access Point: DLink DI-784 I'm having trouble getting my laptop (running Windows XP SP2) to authenticate to my access point using EAP/TLS. XP shows the wireless interface hung