Re: Newslists

Hi, > Ok but then > > The thing about the attr_rewrite module is that it looks at ALL attributes > in the list. In this case, you have two Configuration-Tokens. One has > value "SHAPED_NORMAL", and the other "UNSHAPED_NORMAL". It doesn't match > the first, but it does match the second. After

RE: Newslists

Ok but then The thing about the attr_rewrite module is that it looks at ALL attributes in the list. In this case, you have two Configuration-Tokens. One has value "SHAPED_NORMAL", and the other "UNSHAPED_NORMAL". It doesn't match the first, but it does match the second. After that, it says it

Re: Using freeradius integrated with Active Directory toautenticatecisco passwords

Jeffrey Hutzelman wrote: > It can't, really. But what it could do is what rlm_pap does, which is > to assume that if there's a password in the request and Auth-Type isn't > set yet, you must want to use this module (actually, rlm_pap also > requires there be a password or hash in the users databas

Re: Using freeradius integrated with Active Directory toautenticatecisco passwords

--On Saturday, February 09, 2008 12:18:54 PM + Phil Mayers <[EMAIL PROTECTED]> wrote: Note that this violates the general advice of never setting Auth-Type, explicitly; this is necessary because rlm_krb5 does not provide any authorize handling and will not set Auth-Type automatically like m

Re: Newslists

Keith Dovale - HostworX.co.za wrote: > A user logs in with shaped access, the group reply sets Configuration token > to SHAPED_NORMAL ok nowhere else is the Configuration-Token setup. > > The attrib-rewrite for unshaped kicks in and should check to see if the > Configuration-token is UNSHAPED_LOCAL

Re: Different IP Pool per proxied realm

Tony Spencer wrote: > We are using FreeRADIUS Version 1.0.1 Why? I would suggest upgrading. The newer versions have a LOT more features, and make this kind of configuration much easier. > But when the user logs in they get assigned an IP from the NAS and not from > the IP Pool. > Am I doing

Re: Freeradius2 and proxing

Vincent Magnin wrote: > Well, > > I've writen a patch for realms.c and now, I've a better behaviour: ... > Does exist a better way to use the DEFAULT realm? I think that patch is OK. The "ignore_default" and "ignore_null" configuration for the "realms" module were deleted because they were a b

Re: EAP session matching the State variable.

Sebastian Heil wrote: > Hmm, i have the same error in 2.0.1. > i did kind of a eap-tls-stress-test with a perl script based on the > rad_eap_test script. there are a lot of "login oks" in my log-file, but about > 5-10% are "login incorrect" with the same error-message as above. > > i did three

Re: Using freeradius integrated with Active Directory toautenticatecisco passwords

Jeffrey Hutzelman wrote: --On Friday, February 08, 2008 08:19:32 PM + [EMAIL PROTECTED] wrote: you MAY need to set "Auth-Type = krb5" for the required user or NAS setting depending on your config! You will almost certainly have to do something -- there is no way for the rlm_krb5 module

RE: Newslists

Alan, I appreciate you coming back to me, I apologise for my inappropriate comments yesterday, I am as frustrated to hell. I should have asked what was required first. Ok what confuses me is, A user logs in with shaped access, the group reply sets Configuration token to SHAPED_NORMAL ok nowhere

Re: EAP session matching the State variable.

Well.. some amount of time later - I have access to a 64-bit machine - cvs.freeradius.org won't let me do checkouts from the machine Something about reverse DNS, I think... - some cursing later... - freeradius builds - wpa_supplicant doesn't making EAP testing with a local client dif