Re: FreeRADIUS with LDAP backend (PAP works but CHAP or any other modules does not work), help please

2009-10-04 Thread Peter Lambrechtsen
You're password needs to be readable in cleartext by FR for anything other than PAP to work. That way FR can hash/encrypt the password out of LDAP on the server side and compare against the hash it gets passed from the client. On Sun, Oct 4, 2009 at 6:07 PM, Ryaz Khan rk...@ezesolve.com wrote:

Re: Freeradius as a proxy converting EAP to non EAP radius Request

2009-10-04 Thread Alan DeKok
Jacques FOUCHER wrote: You will find configure, make and make install results later in this message. I was thinking ... Is using virual machines (VMWare Workstation 6.0.2) could be the problem ? I don't see why. The server isn't using the existing proxy socket on port 1814, and the OS

WiMAX HA access-request problem

2009-10-04 Thread Webb Allen
Hi All, I am using the FreeRADIUS 2.1.7 for WiMAX authentication.Everything is fine in WiMAX authetication phase 1. FreeRADIUS send the Access-Accept message to ASN-GW with some required attributes as below. Sending Access-Accept of id 23 to 192.168.10.10 port 6001 MS-MPPE-Recv-Key =

Re: Freeradius as a proxy converting EAP to non EAP radius Request

2009-10-04 Thread Jacques FOUCHER
Did you see that friends ! Sending Access-Accept of id 70 to 192.168.0.250 port 32769 User-Name = t...@jacques.net For that, I installed Fedora Core 9 and freeradius with come with : radiusd: FreeRADIUS Version 2.1.6, for host i386-redhat-linux-gnu, built on Jun 4 2009 at 11:27:13

only unix group teachers logging to freeradius should have switched-of ipcop-url-filter

2009-10-04 Thread Eimo Enninga
Hello, I´m not a whole newbie in linux but really a newbie in freeradius and have to solve a little problem in the configuration of our school-net: We use the following freeradius users - file: ~~ DEFAULT Auth-Type = System, Login-Time := Wk0600-2000 Idle-Timeout =

Client requesting group membership check

2009-10-04 Thread Bob Franklin
Hello, We have a RADIUS server with a SQL backend running fine, authenticating 802.1X users to our Eduroam service. We'd like to re-use the user database for purposes other than Eduroam. We've got support for this in the SQL backend by it returning the status of different services as being

Re: FreeRADIUS with LDAP backend (PAP works but CHAP or any other modules does not work), help please

2009-10-04 Thread Ivan Kalik
I am glad to say that I was able to setup FreeRADIUS ver. 2.1.7 with LDAP (slapd) authentication after a continuous research of a whole week. I can authenticate user via LDAP but it only works for PAP, radtest tool works, NTRadPing works but only when using PAP (un-checking CHAP). If you have

Re: WiMAX HA access-request problem

2009-10-04 Thread Ivan Kalik
Sending Access-Accept of id 23 to 192.168.10.10 port 6001 MS-MPPE-Recv-Key = 0xdd32bb1bf83d56f4493782d3244f5d501011ffce043c3f5d70fb2f8ec22675c7 MS-MPPE-Send-Key = 0xd131eacf354482cec6a997bd7b25e7660f96c85f0290572af781fbe6f79e31fa EAP-Message = 0x03080004

Re: Overriding proxy response

2009-10-04 Thread Eric
Hi All, Any pointers on how to start hacking the source? What I need to do is look for MS-CHAP-Error 648 (which means the password needs to be changed) and then add a different IP address and filter + DNS server information in order for the end-user to be redirected to a webserver. I can't

Custom Logging

2009-10-04 Thread Nasser Heidari
Dear Folks, I have added some additional radcheck options using checkval module. For example I have several NAS Servers, and I've defined which user from which NAS allowed to login. Now I want to know is it possible to configure Freeradius in a way, that when it rejects a user, it prints a custom

Re: Custom Logging

2009-10-04 Thread Ivan Kalik
I have added some additional radcheck options using checkval module. For example I have several NAS Servers, and I've defined which user from which NAS allowed to login. Now I want to know is it possible to configure Freeradius in a way, that when it rejects a user, it prints a custom error