freeradius+WinXP-PEAP+PAM

2006-07-09 Thread Muthu
Hi, I am trying to use PAM authentication with freeradius for Win XP client (PEAP). I am getting error in the tls section. Ver : FreeRADIUS 1.1.1 in Linux AP : Linksys Client : Windows XP I enabled the options in raidusd.conf and I have placed with prober entries in /etc/pam.d I ran

Re: Error: WARNING: Unresponsive child

2006-07-09 Thread Phil Mayers
Alan DeKok wrote: Farhan Karim [EMAIL PROTECTED] wrote: we are facing a continuous problems in free-radius server. It had been working fine but lately now an error that it generates as we enable forwarding packets from INFRANET Radius Server to FreeRadius server. INFRANET? What's that? I

Re: freeradius+WinXP-PEAP+PAM

2006-07-09 Thread Phil Mayers
Muthu wrote: Hi, I am trying to use PAM authentication with freeradius for Win XP client (PEAP). I am getting error in the tls section. You cannot use PAM to answer PEAP/MS-CHAP requests. You must either have the plaintext password for the user, the NT or LM hashes for their password, or

Cisco, RADIUS , LDAP Authentication Problem

2006-07-09 Thread Thato Molise
Hi all, I'm currently running redhat linux 3 ES with kernel-2.4.21-27.ELopenldap-2.0.27-17, and freeradius-1.0.1-1.RHEL3. I dont have a problem authenticating RADIUS against LDAP but the major problem is RADIUS is ignoring LDAP Expiration date for unix Accounts; what causes this? - List

Re: freeradius+WinXP-PEAP+PAM

2006-07-09 Thread Alan DeKok
Muthu [EMAIL PROTECTED] wrote: I am trying to use PAM authentication with freeradius for Win XP client (PEAP). It's impossible. I enabled the options in raidusd.conf and I have placed with prober entries in /etc/pam.d No, PAM doesn't support MSCHAP, which is what PEAP uses. So you

Re: Get my SSHA ldap passwds?

2006-07-09 Thread John Gray
I made a little progress on this. If put: DEFAULT Auth-Type = PAP in users I can get pap to work with hashed passwds if they are hashed with crypt. MD5 and so on all seem to fail. Pap either thinks they are the wrong length or that they don't match? Crypt is certainly better then

Can I run a shell scipt automatically after authorizing?

2006-07-09 Thread Kun Niu
Dear all, Now I have a shell script to run after a authentication session. How can I implement this? From the config file? Thanks for your attention and look forward to your reply. Sincerely, Kun - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can I run a shell scipt automatically after authorizing?

2006-07-09 Thread Alan DeKok
Kun Niu [EMAIL PROTECTED] wrote: Now I have a shell script to run after a authentication session. How can I implement this? See the exec module, and the Exec-Program attribrute. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error: WARNING: Unresponsive child

2006-07-09 Thread Alan DeKok
Phil Mayers [EMAIL PROTECTED] wrote: I believe it's the new and very very stupid name for a Juniper (Funk-based?) Yes. Juniper bought Funk. product that checks your AV definitions are up to date before letting you through the firewall using either 802.1x or eap-over-udp maybe?