Re: wired 802.1x supplicent open source where i can get it?

2007-12-04 Thread Patrice Oliver
Hi, Guy Davies a écrit : Hi Alan, The supplicant is the software on the device trying to connect, rather than the server. Unless FreeRADIUS has moved in a totally different direction from when I was using it frequently, it is purely a RADIUS server (the authentication server in the 802.1x

Re: Login rejected. Error 691.

2007-12-04 Thread pungki arianto
On Dec 4, 2007 1:19 PM, Alan DeKok [EMAIL PROTECTED] wrote: pungki arianto wrote: How can I create clear text password for user? Is there any documentation that I have to read for setting that? Yes. Lots. The FAQ, config files, etc. I read the FAQ from

Re: Login rejected. Error 691.

2007-12-04 Thread liran tal
On Dec 4, 2007 10:32 AM, pungki arianto [EMAIL PROTECTED] wrote: I read the FAQ from http://wiki.freeradius.org/index.php/FAQ#Debugging_it_yourself but the Cleartext-Password attribute is only for freeradius 1.1.6 / 1.1.7 or 2.0.0pre2. I'm using freeRadius 1.1.2 and Cleartext-Password

xpextensions question

2007-12-04 Thread Bernd
Is there any further HOWTO or somebody who can give me detailed instruction on how to get PEAP authentication done with a WinXP Client? I've installed the microsoft hotfix for SP2, but I don't see what to do with this xpextensions file. Thanks in advance - Bernd - List

Re: xpextensions question

2007-12-04 Thread tnt
Place it in the /certs directory. It will be used by CA.all script to generate certificates usable with XP supplicant. Ivan Kalik Kalik Informatika ISP Dana 4/12/2007, Bernd [EMAIL PROTECTED] piše: Is there any further HOWTO or somebody who can give me detailed instruction on how to get PEAP

Re: xpextensions question

2007-12-04 Thread Alan DeKok
Bernd wrote: Is there any further HOWTO or somebody who can give me detailed instruction on how to get PEAP authentication done with a WinXP Client? I've installed the microsoft hotfix for SP2, but I don't see what to do with this xpextensions file. See the Wiki and the comments in

Re: EAP-TLS and PEAP redundancy options

2007-12-04 Thread John Paul
John Paul wrote: The issue is that if a machine is authenticated and the server that did the authentication is down, the switch will contact the other server and the EAP conversation will fail, causing authentication to fail. Research indicates that this is because the client and server have

Re: EAP-TLS and PEAP redundancy options

2007-12-04 Thread Alan DeKok
John Paul wrote: When I tested this the first time, authentications to server 1 worked and to server 2 did not. When I couldn't figure it out, I turned the test machines off and left for the day. The next day I had server 1 turned off - I turned the test machines on and authentications to

Re: EAP-TLS and PEAP redundancy options

2007-12-04 Thread tnt
Debug the switch. It's quite likely that it isn't marking the radius server that is down as dead but it tries it again when it recieves the challenge. Ivan Kalik Kalik informatika ISP Dana 4/12/2007, John Paul [EMAIL PROTECTED] piše: John Paul wrote: The issue is that if a machine is

Re: EAP-TLS and PEAP redundancy options

2007-12-04 Thread John Paul
FreeRADIUS does not do session resumption. If the supplicant tries to do session resumption, I don't know what will happen. You should ensure that the supplicant has session resumption disabled. Windows does support it but it's switched off by default and I have verified this

Re: EAP-TLS and PEAP redundancy options

2007-12-04 Thread Phil Mayers
John Paul wrote: John Paul wrote: The issue is that if a machine is authenticated and the server that did the authentication is down, the switch will contact the other server and the EAP conversation will fail, causing authentication to fail. Research indicates that this is because the client

Re: Configuring LDAP for query ONLY...

2007-12-04 Thread Eric Martell
Hi, Is it possible to altogether avoid authenticate section and just do ldap lookups in the authorize section? authorize { ldap { notfound = reject } } The problem is in the authenticate section, radius gets the userDN from the authorize and tries to bind ldap with password which

unsubscribe

2007-12-04 Thread Denise Fernandes
Denise Fernandes WG-TEL FCCN Av. do Brasil, n.º 101 - Lisboa Telef. +351 218440100 Fax +351 218472167 www.fccn.pt BLOCKED::http://www.fccn.pt/ Aviso de Confidencialidade Esta mensagem é exclusivamente destinada ao seu destinatário, podendo conter informação CONFIDENCIAL, cuja

Re: Configuring LDAP for query ONLY...

2007-12-04 Thread Eric Martell
Thanks so much Phil. I am using freeradius-1.0.4 I am going to install the latest version and will try your suggestion. Thanks and Regards. Eric. --- Phil Mayers [EMAIL PROTECTED] wrote: Eric Martell wrote: Hi, Is it possible to altogether avoid authenticate section and just do ldap

Re: EAP-TLS and PEAP redundancy options

2007-12-04 Thread Alan DeKok
Phil Mayers wrote: There are patches to enable this, but they have not, as yet, been integrated. In any case, they won't help you to fail over from one server to another. If/when those patches get integrated, it would be highly useful to support failover between servers. I guess the

Re: EAP-TLS and PEAP redundancy options

2007-12-04 Thread John Paul
On 12/4/2007 at 10:01 AM, in message [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: Debug the switch. It's quite likely that it isn't marking the radius server that is down as dead but it tries it again when it recieves the challenge. Bingo, we have a winner. The switch was attempting to contact