Re: Lotus Notes Encryption

2010-08-19 Thread Stefan Winter
Hi, But then again, when I tested it out, it only works locally with linux platforms but when I tried to test it with the wifi router and windows clients, it didn't. That's because your Windows clients use PEAP. PEAP encrypts the user's password, while Notes encrypts it in a different, and

Re: Lotus Notes Encryption

2010-08-19 Thread rrperez
Thanks for the quick response Stefan. Regarding with practicality issues, its not a problem. I want to try all the possibility for me to be able to make this work. Due to that, PEAP and Notes *will not work*. You could possibly remedy this with a windows client that speaks TTLS-PAP instead.

Freeradius + WPA2 + Windows Client

2010-08-19 Thread rrperez
I have configured a Freeradius 2 server that authenticates on ldap for wireless network connection. While testing, the radtest sends access-accept locally with linux platforms but when I try to test it using the router, it fails. The error in the debug shows: [mschapv2] WARNING: Unknown value

Re: Freeradius + WPA2 + Windows Client

2010-08-19 Thread Alan DeKok
rrperez wrote: The error in the debug shows: [mschapv2] WARNING: Unknown value specified for Auth-Type. Cannot perform requested action. You edited the default configuration and broke it. Don't do that. I've used peap and ttls as default eap type but it goes with the same error. I

Re: Lotus Notes Encryption

2010-08-19 Thread Stefan Winter
Hi, google for supplicant TTLS-PAP. There are numerous products for numerous platforms. Stefan Am 19.08.2010 08:38, schrieb rrperez: Thanks for the quick response Stefan. Regarding with practicality issues, its not a problem. I want to try all the possibility for me to be able to make

Re: Lotus Notes Encryption

2010-08-19 Thread Peter Lambrechtsen
On Thu, Aug 19, 2010 at 6:38 PM, rrperez rrpe...@apc.edu.ph wrote: Thanks for the quick response Stefan. Regarding with practicality issues, its not a problem. I want to try all the possibility for me to be able to make this work. Due to that, PEAP and Notes *will not work*. You could

Re: Freeradius + WPA2 + Windows Client

2010-08-19 Thread rrperez
Thanks for the response Alan, I just commented out the pap and uncomment the ldap in the default and like I said, it is working fine but with windows client, it fails the authentication protocol which is mschapv2. My configuration is about freeradius authenticating its users from a domino ldap

Re: Encountering error when using radius -X

2010-08-19 Thread Fabien COMBERNOUS
kartik dadwal wrote: Hi, I have ubuntu 9.10. Can you please tell me 1)Before running radius -X what all steps should be completed? 2)what should be the subdirectory structure for freeradius and where it should be formed in the directory structure? 3)which sub directory should I give the

Re: Lotus Notes Encryption

2010-08-19 Thread rrperez
Thanks for the quick response Peter, It means that your clients will send the password to the radius server in cleartext rather than PEAP encrypting them. There isn't any way to authenticate against your Notes box with anything other than a cleartext password. I somewhat understand what your

Re: Freeradius + WPA2 + Windows Client

2010-08-19 Thread Alan DeKok
rrperez wrote: I just commented out the pap and uncomment the ldap in the default and like I said, it is working fine but with windows client, it fails the authentication protocol which is mschapv2. Nonsense. The output you posted showed an mschapv2 module. There is *no* such module in the

Re: Lotus Notes Encryption

2010-08-19 Thread Peter Lambrechtsen
On Thu, Aug 19, 2010 at 7:42 PM, rrperez rrpe...@apc.edu.ph wrote: Thanks for the quick response Peter, It means that your clients will send the password to the radius server in cleartext rather than PEAP encrypting them. There isn't any way to authenticate against your Notes box with

Re: Lotus Notes Encryption

2010-08-19 Thread Stefan Winter
Hi, It will mean that you will need to change your clients to get it working (installing a different supplicant rather than the standard windows one), and that the clients will talk to the access point over SSL (TTLS) but since it's using PAP the password is sent not hashed or encrypted.

Re: Freeradius + WPA2 + Windows Client

2010-08-19 Thread rrperez
Sorry for the inconvenience Alan, I'm just a student and currently studying/exploring radius servers. Now I changed all the configuration back to default and make the some configuration to make ldap works. Here is the debug and it is quite different from the previous one: rad_recv:

Re: Lotus Notes Encryption

2010-08-19 Thread rrperez
Thanks for the quick response Peter and Stefan, Can you specifically tell me what do I need to make this TTLS-PAP? I have windows clients so do I need to download supplicant for windows? -- View this message in context: http://old.nabble.com/Lotus-Notes-Encryption-tp29449703p29479742.html

Re: Freeradius + WPA2 + Windows Client

2010-08-19 Thread Fajar A. Nugraha
On Thu, Aug 19, 2010 at 3:42 PM, rrperez rrpe...@apc.edu.ph wrote: Sorry for the inconvenience Alan, I'm just a student and currently studying/exploring radius servers. You seem to be selectively ignoring some sugesstions though. It's fine if you REALLY know what you're doing, but this does

Re: Lotus Notes Encryption

2010-08-19 Thread Alan Buxey
Hi, I have windows clients so do I need to download supplicant for windows? Open1X or SecureW2 are 2 quick options for you. the first one is free. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Runtime-Change of Reply-Message or Group-Membership

2010-08-19 Thread Kneissl Christian
Hello! I have the following situation: If a user has some special attributes which I can check for example in the authorize section (eg. user is in baduser-Table), I would need to change the reply message once for the actual dialin-session. I think changing his usergroup-memberhip for the

freeradius pap ldap

2010-08-19 Thread Walter Breno
hi, i'm newbie on freeradius and i have some problems to configure my freeradius-2.1.9. i sucessfully configured my freeradius to authenticate using a mysql database, but i can't make it authenticate using a openLDAP server, i need to make my 3com 5800G switches to authenticate on freeradius

Re: Flaky AP or borked Config? EAP-PEAP

2010-08-19 Thread Nolan King
This is the manufacturer of the broken AP http://skypilot.trilliantinc.com/ Skypilot was an indie manufacturer, recently purchased by trilliant. not sure who makes their hardware now- the tdm, one radio-many antennas approach has worked well for my muni mesh. they used to have a forum where i

Re: Flaky AP or borked Config? EAP-PEAP

2010-08-19 Thread Alan DeKok
Nolan King wrote: This is the manufacturer of the broken AP http://skypilot.trilliantinc.com/ Skypilot was an indie manufacturer, recently purchased by trilliant. not sure who makes their hardware now- the tdm, one radio-many antennas approach has worked well for my muni mesh. they used

Using unlang to control ldap module

2010-08-19 Thread John Doppke
Is there a way I can conditionally change the config items in the ldap module, so that if NAS-Port-Type = Wireless then access_attr = X -John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Lotus Notes Encryption

2010-08-19 Thread rrperez
Thanks for the response Alan, I have downloaded Open1x in my windows client, but I don't know how to configure it... -- View this message in context: http://old.nabble.com/Lotus-Notes-Encryption-tp29449703p29488293.html Sent from the FreeRadius - User mailing list archive at Nabble.com. -

Re: Freeradius + WPA2 + Windows Client

2010-08-19 Thread rrperez
Thanks for this response Fajar, It definitely make sense, now I'm trying to install Open1x, but I can't find a manual on how to configure this. Do you know some references that can help me configuring Open1x? -- View this message in context:

Supplicant for Windows (XP, Vista and W7)

2010-08-19 Thread rrperez
Hi, Does anyone knows a supplicant that might work on windows platforms such as XP, Vista and Windows 7? -- View this message in context: http://old.nabble.com/Supplicant-for-Windows-%28XP%2C-Vista-and-W7%29-tp29488428p29488428.html Sent from the FreeRadius - User mailing list archive at

Re: Supplicant for Windows (XP, Vista and W7)

2010-08-19 Thread David Mitton
Windows includes a supplicant that does a number of things. Could you be a bit more specific in what functionality you are looking for? Dave. On 8/19/2010 11:22 PM, rrperez wrote: Hi, Does anyone knows a supplicant that might work on windows platforms such as XP, Vista and Windows 7? --