Re: Freeradius with Oracle

2009-02-23 Thread kenshin
Well I am new to this, I found a package in Ubuntu for it so the installation was ok but there is one thing I went to the site I want a normal configuration. I am trying to test that the radius is working after the installation. Then I want to add a perl script that will handle my Authblock I

RE: FreeRADIUS EAP-TLS and SSL certificate chains

2009-02-23 Thread Meyers, Dan
Dan, It's unclear to me exactly: a. what you're expecting to happen b. what is happening We have exactly the same setup - verisign root-intermediate-our cert. What happens with an XP client on our WPA EAP-PEAP network is exactly the same as documented here:

Re: Secure FreeRADIUS LDAP

2009-02-23 Thread tnt
Does freeradius support SHA hashed passwords (on ldap backend)? Yes. This is documented in doc/rlm_ldap included with the server. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius with Oracle

2009-02-23 Thread tnt
Well I am new to this, I found a package in Ubuntu for it so the installation was ok but there is one thing I went to the site I want a normal configuration. I am trying to test that the radius is working after the installation. Then I want to add a perl script that will handle my Authblock I

Re: User-Id and Calling-Station-Id matching

2009-02-23 Thread tech . subscriptions
Sorry, I am newbie and have been using GUI RADIUS Server all through. You have given *no* details about how or why or where this is coming from but I'm guessing from your single example you are looking for: /etc/freeradius/users DEFAULT Calling-Station-Id !~ [0-9]+%{User-Id}$,

Re: User-Id and Calling-Station-Id matching

2009-02-23 Thread tnt
I presume this expression would do the magic for me. But if for SQL authentication how do I enforce that from the SQL tables? Put Calling-Station-Id, expression and =~ as operator for that user in radcheck. But regex is not working well in 2.1.3. Better wait a few days for 2.1.4. Ivan Kalik

trigger an Access Challenge

2009-02-23 Thread Ronny Voigt
Hello! I want to test a radius client with the freeradius server. Access Requests and Replies works fine, but although I searched this mailing list and several websites I still have no idea how to trigger an Access Challenge. It would be very nice, if somebody could tell me how I have to

Re: Freeradius with Oracle

2009-02-23 Thread kenshin
Well it gives me this at first Search results You searched for perl There is no page titled perl. You can create this page. Then I see A Perl Article and then Page text matches. tnt-4 wrote: Well I am new to this, I found a package in Ubuntu for it so the installation was ok but there is

Re: Freeradius with Oracle

2009-02-23 Thread tnt
Did you bother reading that perl article? Ivan Kalik Kalik Informatika ISP Dana 23/2/2009, kenshin eternalbl...@gmail.com piše: Well it gives me this at first Search results You searched for perl There is no page titled perl. You can create this page. Then I see A Perl Article and then

Re: Freeradius with Oracle

2009-02-23 Thread kenshin
yes i did but didnt get it, but I will do it again. I will try to understand it as much as I can. tnt-4 wrote: Did you bother reading that perl article? Ivan Kalik Kalik Informatika ISP Dana 23/2/2009, kenshin eternalbl...@gmail.com piše: Well it gives me this at first Search

RE: Free Radius problem with sending large certificate chains, using EAP-TLS

2009-02-23 Thread Smith, Brian (ESEA ISA)
Hi Alexander, Thanks for your reply and yes, I expect you are right about some clients not supporting large certificates. Thanks for your help! Regards, Brian Smith Ph. 602-436-6691 Honeywell -Original Message- From:

RE: Free Radius problem with sending large certificate chains, usingEAP-TLS

2009-02-23 Thread Smith, Brian (ESEA ISA)
Hi Alan, Thanks for the great reply. It makes perfect sense to me. Just be clear, FreeRadius will support a certificate/chain length up to the TLS record limit of 16384 bytes (minus some overhead). And, you don't know of anyone that has every tried to test beyond this, which tells me in

Authenticating machine accounts off smbpasswd using the passwd module.

2009-02-23 Thread Josh Hiner
I am trying to setup machine authentication via peapv0. I have authentication working if I use a regular username and password stored in /etc/samba/smbpasswd. When I check the authenticate as computer box in the windows XP supplicant and run radiusd in debug mode, windows sends the machine

Re: trigger an Access Challenge

2009-02-23 Thread tnt
I want to test a radius client with the freeradius server. Access Requests and Replies works fine, but although I searched this mailing list and several websites I still have no idea how to trigger an Access Challenge. It would be very nice, if somebody could tell me how I have to configure

Re: Freeradius with Oracle

2009-02-23 Thread tnt
yes i did but didnt get it, but I will do it again. I will try to understand it as much as I can. Hm, so you have trouble following simple instructions with ready-made examples. Yet you are planning a perl application accessing data via stored procedures in Oracle. Well, good luck with that.

Question about authenticating CHAP clients using an external program - A different case

2009-02-23 Thread Ali Majdzadeh
Hello All, I am using freeradius-1.1.7. In order to authenticate users using an external program, I have created an instance of the rlm_exec module which contains the properties of the external program. In the radiusd.conf, I have called the instance in the authentication section. Now, as I want

Re: Question about authenticating CHAP clients using an external program- A different case

2009-02-23 Thread tnt
I am using freeradius-1.1.7. In order to authenticate users using an external program, I have created an instance of the rlm_exec module which contains the properties of the external program. In the radiusd.conf, I have called the instance in the authentication section. Now, as I want to

Re: Freeradius with Oracle

2009-02-23 Thread kenshin
Well I am trying for sure I will have troubles because I am totally new to this. Well, thanks for the guide ^^ tnt-4 wrote: yes i did but didnt get it, but I will do it again. I will try to understand it as much as I can. Hm, so you have trouble following simple instructions with

Two factor authentication to both LDAP directory and SecurID

2009-02-23 Thread Greg Vickers
Hi all, Firstly, this relates to a question asked for our project by Amy Hawke: http://lists.freeradius.org/mailman/htdig/freeradius-users/2009-January/msg00617.html Since the above conversation, I've had an email discussion with Alan DeKok and clarified a few things - it seems that what we

Re: Free Radius problem with sending large certificate chains, usingEAP-TLS

2009-02-23 Thread Alan DeKok
Smith, Brian (ESEA ISA) wrote: Hi Alan, Thanks for the great reply. It makes perfect sense to me. Just be clear, FreeRadius will support a certificate/chain length up to the TLS record limit of 16384 bytes (minus some overhead). And, you don't know of anyone that has every tried to test