How to setup Ubuntu server as a client of FreeRadius Server

2011-05-14 Thread Raheel Itrat
Hi, I have a Linux(Ubuntu) NMS server and I want it to be authenticated Via Freeradius. So If I log into that NMS server it should send requests for authentication to FreeRadius serve. Also, can a windows XP machine be authenticated through Freeradius? I mean not the telnet/SSH login but

Authentication issues from Apple devices

2011-05-14 Thread stentofon
Hello Raheel, It might be better if you create a new topic rather then hijacking mine :) -- View this message in context: http://freeradius.1045715.n5.nabble.com/Authentication-issues-from-Apple-devices-tp4394941p4395168.html Sent from the FreeRadius - User mailing list archive at Nabble.com.

Re: Renaming during Machine Authentication

2011-05-14 Thread Phil Mayers
On 05/13/2011 11:21 PM, Mark Jones wrote: That sounds good...where exactly do I put that in the config files? Well, since you didn't explain why you wanted to rename it (for what purpose) I can't say for sure. Usually, a lot of what goes on in FreeRADIUS is done with string expansions -

Re: How to setup Ubuntu server as a client of FreeRadius Server

2011-05-14 Thread Phil Mayers
On 05/14/2011 07:37 AM, Raheel Itrat wrote: Hi, I have a Linux(Ubuntu) NMS server and I want it to be authenticated Via Please don't hijack a thread. Freeradius. So If I log into that NMS server it should send requests for You will need to read the documentation for the NMS server.

Re: Authentication issues from Apple devices

2011-05-14 Thread Phil Mayers
Found Auth-Type = CHAP +- entering group CHAP {...} [chap] login attempt by sandra with CHAP password [chap] Using clear text password sandra for user sandra authentication. [chap] Password check failed ++[chap] returns reject Nothing very dramatic here - the chap-challange is wrong, almost

Re: Authentication issues from Apple devices

2011-05-14 Thread stentofon
The users connect through a chillispot captive portal, via HTTP. HTTPS causes too many problems with certificates, and the access point is unencripted anyway, so security is not the issue. I initally thought that the hotspot clients were simply making mistakes, but i've been testing it all day

Reply-message stripped from access-reject response

2011-05-14 Thread sbcsgjmbbz
Hi, Using freeradius 1.1.3. Im trying to get freeradius to return a helpful reply-message in access-rejects to the NAS but the reply-message seems to get stripped from the access-reject packet. Ive configured the reply-message as below in /etc/raddb/sites-enabled/default post-auth { sql

Re: Reply-message stripped from access-reject response

2011-05-14 Thread Alan DeKok
sbcsgjm...@snkmail.com wrote: Using freeradius 1.1.3. Upgrade. Im trying to get freeradius to return a helpful reply-message in access-rejects to the NAS but the reply-message seems to get stripped from the access-reject packet. Ive configured the reply-message as below in

Re: Authentication issues from Apple devices

2011-05-14 Thread Phil Mayers
On 05/14/2011 10:08 AM, stentofon wrote: The users connect through a chillispot captive portal, via HTTP. HTTPS causes too many problems with certificates, and the access point is unencripted anyway, so security is not the issue. I initally thought that the hotspot clients were simply making

Re: Reply-message stripped from access-reject response

2011-05-14 Thread Phil Mayers
On 05/14/2011 11:28 AM, sbcsgjm...@snkmail.com wrote: Hi, Using freeradius 1.1.3. Im trying to get freeradius to return a helpful reply-message in access-rejects to the NAS but the reply-message seems to get stripped from the access-reject packet. Ive configured the reply-message as below in

Re: Reply-message stripped from access-reject response

2011-05-14 Thread sbcsgjmbbz
On 14/05/2011 12:55, Alan DeKok aland-at-deployingradius.com |freeradius-mailinglist| wrote: sbcsgjm...@snkmail.com wrote: Using freeradius 1.1.3. Upgrade. My apologies, I made a mistake, the version is 2.1.7 Im trying to get freeradius to return a helpful reply-message in

Re: Reply-message stripped from access-reject response

2011-05-14 Thread sbcsgjmbbz
What is between the radius server and NAS? Something must be, because it's modifying the packet. Do you have an intermediate proxy server? No, but the packets are being sent over an OpenVPN tunnel. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Compiling from source

2011-05-14 Thread John Dennis
On 05/13/2011 05:28 PM, Tim McNabb wrote: I can actually build just fine, and get FR to run and process the requests. I guess what I’m trying to do is maintain the installation structure as the HOWTO’s generally show on the interwebs, while also enabling the features that I enjoy using through

Re: Radius proxy implementation

2011-05-14 Thread d...@hotmail.com
Hello... I was able to overcome a lot of stoppers but I still need some help. SERVERfreeRadius-client the freeradius is proxying authentication messages to the SERVER, after authenticated, the client is doing accounting to freeRadius and packet counts are stored in

ldap

2011-05-14 Thread Maurice James
How do I deny access based on the ldap attribute nsAccountLock = true? http://g.bfbcs.com/175/pc_Lt%20Lotz.png Description: pc_Lt Lotz image003.jpg- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reply-message stripped from access-reject response

2011-05-14 Thread Alan DeKok
sbcsgjm...@snkmail.com wrote: Im confused, the Packet identifier is the same. Can you explain how you know this. Thanks, much appreciated! The packets are different. Go read them. Find out what is modifying the packet *after* the RADIUS server sends the reply. Look at the *rest* of the

Re: Radius proxy implementation

2011-05-14 Thread Alan DeKok
d...@hotmail.com wrote: when a certain volumen of packets is reched, I need the freeRadius to send an Authentication request to the SERVER, is that possible? Sure. Keep track of packets in a DB. I was trying to run a radclient instance on the accounting section of the freeRadius in order