How to access 3GPP2 Attributes in rlm module

2011-12-28 Thread Ratnesh Sinha
Hi, Pl. let me know how to access for example 3GPP2 attribute in the module. Regards, Ratnesh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem with mysql-user

2011-12-28 Thread Koenraad Lelong
Hi, I'm new to freeradius, I'm trying to setup freeradius to authenticate wifi-users using mysql. I'm running freeradius 2.1.12 from Fajar A. Nugraha (see post on 20 Dec 2011 11:16:27) on ubuntu 10.04. I'm using the daloradius-gui to create users. When I try via wifi using a user in the

Re: Problem with mysql-user

2011-12-28 Thread Fajar A. Nugraha
On Wed, Dec 28, 2011 at 7:22 PM, Koenraad Lelong radiu...@de-brouwerij.be wrote: When I try via wifi using a user in the users-file, that user is accepted, a user in the mysql database is rejected. When I try the mysql-user with radtest, the user is authenticated : # radtest mtester1

ppp and eap-tls

2011-12-28 Thread Frank
Hi, I'm using freeradius for EAP-TLS authentication with my WPA NAS, with MS-CHAPv2 for ppp auth (in a L2TP/IPSEC VPN) and for a while for EAP-TLS for ppp auth (about half a year ago). However, without me consciously changing anything in my setup (running Debian Squeeze, connecting clients

Re: eap/tls questions with freeradius

2011-12-28 Thread Phil Mayers
On 12/26/2011 02:44 PM, vazoumana fofana wrote: sorry, i ve got persistents problems : - i filter client certificate under authenticate section (under eap) with : Auth-Type eap { if ( %{TLS-Client-Cert-Subject} =~ /OU=x/ ) { reject } }. Firstly, it s' written on default file : /Please do

Re: How to access 3GPP2 Attributes in rlm module

2011-12-28 Thread Alan DeKok
Ratnesh Sinha wrote: Pl. let me know how to access for example 3GPP2 attribute in the module. What does that mean? Learn how to ask *good* questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ppp and eap-tls

2011-12-28 Thread Alan DeKok
Frank wrote: I now get the following error in my radius log on an auth attempt: Error: TLS Alert write:fatal:decrypt error Error: TLS_accept: failed in SSLv3 read certificate verify B Error: rlm_eap: SSL error error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not

Re: GUID based Authentication on FreeRadius

2011-12-28 Thread Alan DeKok
McSparin, Joe wrote: Anyone know if this is possible. I have found information on MAC Based Authentication but nothing on GUID. What does that mean? The GUID isn't sent in a RADIUS packet. So doing GUID authentication makes no sense. Alan DeKok. - List info/subscribe/unsubscribe? See

RE: ppp and eap-tls

2011-12-28 Thread Frank
Hi, -Original Message- From: Alan DeKok [mailto:al...@deployingradius.com] Sent: Wednesday, December 28, 2011 15:40 To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Subject: Re: ppp and eap-tls Alan wrote: I now get the following error in my

RE: GUID based Authentication on FreeRadius

2011-12-28 Thread McSparin, Joe
Well that answers that then. My goal is, I have users that will connect wirelessly using their NT domain username and password on the hospitals wireless devices. I also however have doctors that will bring in their own laptops and connect. When they connect with their laptops though I do not

Re: Logging User Accounts

2011-12-28 Thread Alan Buxey
Yes, look at the linelog module alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: GUID based Authentication on FreeRadius

2011-12-28 Thread Alan DeKok
McSparin, Joe wrote: My goal is, I have users that will connect wirelessly using their NT domain username and password on the hospitals wireless devices. I also however have doctors that will bring in their own laptops and connect. When they connect with their laptops though I do not want

Re: ppp and eap-tls

2011-12-28 Thread Alan DeKok
Frank wrote: This statement is confusing! I'm using freeradius for EAP-TLS auth and set up the client for WPA2 enterprise with EAP-TLS. If this is not using certificates for authentication, then what is it using? sigh WPA != WPA2 enterprise You're confused because you're confusing two

Re: GUID based Authentication on FreeRadius

2011-12-28 Thread Rudolph Bott
We have two different SSIDs - one with EAP-TLS for company-owned mobile devices (which will automatically receive a machine certificate to validate that) and a second one with PEAP and local users stored in a radius userfile. Both SSIDs correspond to separate VLANs on the wireless controllers

RE: GUID based Authentication on FreeRadius

2011-12-28 Thread McSparin, Joe
rlm_passwd looks like the way to go... Thanks. Joseph R. McSparin Network Administrator Hill Country Memorial Hospital 830 990 6638 phone 830 990 6623 fax jmcspa...@hillcountrymemorial.org -Original Message- From: freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freerad

Re: Problem with mysql-user

2011-12-28 Thread Koenraad Lelong
On 28-12-11 14:12, Fajar A. Nugraha wrote: On Wed, Dec 28, 2011 at 7:22 PM, Koenraad Lelong radiu...@de-brouwerij.be wrote: ... /etc/freeradius/sites-enabled/inner-tunnel see that config file? ... sql module is not configure on authorize section in that file. Fix it. Thanks, That