MAC address authentication

Hi list, Plz explain the overview of how to enable mac address based authentication where all the three parameters (uid, userPassword and radiusCallingStationId are matched from the ldap database).. at presently am able to do uid + userPassword successfully from openldap database -- Registerd

Re: Red Hat vs. Slackware

On Thu, 15 Feb 2007, silvia bogos wrote: please i need to decide what to use RED HAT OR SLACKWARE. Um, use whichever one you want? To the rest of us, the distribution you choose to run really doesn't matter. That said, I moved off of Slackware around 1998 and haven't looked back. -- Jeremy

Re: Red Hat vs. Slackware

Redhat is probably the Ford of the linux distributions: it'll get you to where you want to be, it just might not do it as quickly or flashily as other distros. For most installs I recommend CentOS - which is basically Redhat Enterpise 4 but free. You pretty much can't go wrong with any modern,

Re: Red Hat vs. Slackware

but i knew that slackware is the most secure and flexible and greater than any other os so what do u think thanx On 2/15/07, Gaddis, Jeremy L. [EMAIL PROTECTED] wrote: On Thu, 15 Feb 2007, silvia bogos wrote: please i need to decide what to use RED HAT OR SLACKWARE. Um, use whichever one

RE: Red Hat vs. Slackware

Personally i'd recommend a distro with a functioning package handler, my suggestion is debian. Feels good when you update the whole system with the ease of one command. The wet dream of every admin. //M From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] org] On

TTY?

Hi! Got a quick question. When i input radwho, i get this output.. Login Name What TTY When From Location userlogin username PPP S12 Thu 11:21 127.0.0.1 XXX.XXX.XXX.XXX What does the TTY mean? What kind of TTY is radius using? Is there a limit to how

Re: Linksys WRT54G - DD-WRT - Wireless Auth

Thanks Alan, What I'll probably have a go at will be attempting to authenticate it against Samba if possible, not looked into how it works yet, but I'm hopeful. :) R On 15/02/07, Alan DeKok [EMAIL PROTECTED] wrote: Richard Hamilton-Frost wrote: What I want: To be able to authenticate

Doubt about RADIUS server errors.

Hi All, I am using free radius server with dot1X. and supplicant is on windows XP. Here when I use user name = 3 letters I am getting following error... 1. Received packet from 192.168.112.90 with invalid Message-Authenticator! (Shared secret is incorrect.) and for user name =3

Re: Simple security

Thanks Jeremy. I've been doing various searches for practical examples of 802.1x in a LAN setting and haven't found anything yet. Have you? -Original Message- From: Gaddis, Jeremy L. [EMAIL PROTECTED] Date: Thu, 15 Feb 2007 00:07:42 To:FreeRadius users mailing list

Re: Doubt about RADIUS server errors.

[EMAIL PROTECTED] wrote: Hi All, I am using free radius server with dot1X. and supplicant is on windows XP. Here when I use user name = 3 letters I am getting following error... * 1.* *Received packet from 192.168.112.90 with invalid Message-Authenticator! (Shared secret is

Does the latest cvs support the read_gro ups parameter

Hi! I am using the latest cvs version of freeradius. Does this version support the read_group parameter? In the conf file there is written that setting it to yes causes to read the group table. From my observation freeradius works like this: 1 - checks records from radcheck 2 - if they match,

Getting error in radius server with dot1X and supplicant on windows XP...

Hi All, I am using free radius server with dot1X. and supplicant is on windows XP. Here when I use user name = 3 letters I am getting following error... 1. Received packet from 192.168.112.90 with invalid Message-Authenticator! (Shared secret is incorrect.) and for user name =3

Re: Simple security

Hi, Thanks Jeremy. I've been doing various searches for practical examples of 802.1x in a LAN setting and haven't found anything yet. Have you? it all depends on what kit you've got, both in the network space and in the server architecture. eg with decent Cisco or HP switches you can

rlm_sql question

I am using freeradius 1.1.4 with mysql. I had to change the authorize_check_query. authorize_check_query = SELECT radcheck.id, radcheck.UserName, radcheck.Attribute, radcheck.Value, radcheck.op \ FROM radcheck,nas \ WHERE (Username = '%{SQL-User-Name}') \ and (nas.type='Enterasys

1.1.4 - TTLS - missing attributes

Hi list! Recently upgraded from 1.1.3 to 1.1.4 to support EAP-PEAP for Windows Vista clients. That works fine but now I got problems with missing reply attributes for Mac OSX clients using EAP-TTLS. FreeRADIUS sends an Access-Challenge with the correct attributes but they are missing from the

Re: rlm_sql question

Please forget this question. Someone had changed a network setting, so that mysql and rlm_sql did not reach the same databases. Right now everything works as expected. Sorry Norbert Wegener Norbert Wegener schrieb: I am using freeradius 1.1.4 with mysql. I had to change the

Re: 1.1.4 - TTLS - missing attributes

Hi, Recently upgraded from 1.1.3 to 1.1.4 to support EAP-PEAP for Windows Vista clients. That works fine but now I got problems with missing reply attributes for Mac OSX clients using EAP-TTLS. I can also report the same issue. I have been looking at it for a little while now - I thought

Re: 1.1.4 - TTLS - missing attributes

[EMAIL PROTECTED] wrote: I can also report the same issue. I have been looking at it for a little while now - I thought it may have been my attribute filter being too strict - but I saw no EAP-TTLS attributes that are documented that I'm not allowingand I believe I havent changed my

Re: db.counter not found!

Hi, bash-2.05b# ls -l /usr/local/etc/raddb/db.counter -rw--- 1 root wheel 24576 Nov 21 2003 /usr/local/etc/raddb/db.counter drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb right. so root is okay. do you run radiusd as root? alan - List info/subscribe/unsubscribe? See

Algorithm used by FreeRADIUS to choose cipher suite used with EAP-TLS/TTLS

Hi, How does FreeRADIUS's rlm_eap module choose the cipher suite used for EAP-TLS/TTLS sessions? RFC 2246 for TLS states that the client presents the list of ciphersuites supported to the server and the server picks one that it supports. Is there a way to configure FreeRADIUS to only use a

Re: db.counter not found!

Hi, On 2/15/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi, bash-2.05b# ls -l /usr/local/etc/raddb/db.counter -rw--- 1 root wheel 24576 Nov 21 2003 /usr/local/etc/raddb/db.counter drwxr-xr-x 5 root wheel1536 Feb 14 12:09 raddb right. so root is okay. do you run

Re: Algorithm used by FreeRADIUS to choose cipher suite used with EAP-TLS/TTLS

Walter Goulet wrote: How does FreeRADIUS's rlm_eap module choose the cipher suite used for EAP-TLS/TTLS sessions? It relies on OpenSSL to do the negotiation. RFC 2246 for TLS states that the client presents the list of ciphersuites supported to the server and the server picks one that it

Getting error in radius server with dot1X and supplicant on windows XP...

Hi All, I am using free radius server with dot1X. and supplicant is on windows XP. Here when I use user name = 3 letters I am getting following error... 1. Received packet from 192.168.112.90 with invalid Message-Authenticator! (Shared secret is incorrect.) and for user name =3

Re: MySQL support in Windows binary of FreeRadius

Thanks Peter and Alan for your replies. I don't mind recompiling, except that I need to run FreeRadius as a Windows service, and I don't know what it takes to enable mysql in the compilation. Basically my problem with the default setup, is that it logs on a per-day basis. If I can configure

Configure FreeRadius to generate new accounting file by hour

Hi all. Just want to pose this qn to the community: Is it possible to configure FreeRadius, so that instead of generate a new accouting file per-day, can it be per-hour (or better: per-n minutes)? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: [unclas] Configure FreeRadius to generate new accounting file by hour

-Original Message- Hi all. Just want to pose this qn to the community: Is it possible to configure FreeRadius, so that instead of generate a new accouting file per-day, can it be per-hour (or better: per-n minutes)? Thanks - List info/subscribe/unsubscribe? See

Re: [unclas] Configure FreeRadius to generate new accounting file by hour

Hello Ranner, Beautiful! Thanks for the quick pointer. I did a keyword search, but I guess I missed out on this one. Ranner, Frank MR wrote: -Original Message- Hi all. Just want to pose this qn to the community: Is it possible to configure FreeRadius, so that instead of