Radius Squid authentication REJECT

2013-04-11 Thread Iftakhul Anwar
Hi All, I have successfully configure freeradius with mysql. i can radtest using command : sudo radtest alice password 192.168.2.3 1812 testing123 Sending Access-Request of id 187 to 192.168.2.3 port 1812 User-Name = alice User-Password = password NAS-IP-Address = 127.0.1.1

Re: Radius Squid authentication REJECT

2013-04-11 Thread Matthias Nagel
Hello, did you do what the warning says and double checked the shared secret? As far as I see the squid_rad_auth.conf does not use quotation marks () to delimit the shared secret. Hence, perhaps you have trailing white spaces or something like that at the end of the line. Delete the line

Re: Radius Squid authentication REJECT

2013-04-11 Thread Iftakhul Anwar
Hi Matthias, I don't use on my squid_rad_auth.conf.No space on my scret. This is my squid_rad_auth.conf server 192.168.2.3 secret testing123 On my radcheck, i also using Cleartext-Password on my racheck table Any another clue ? Thanks On Thu, Apr 11, 2013 at 3:59 PM, Matthias Nagel

Re: Radius Squid authentication REJECT

2013-04-11 Thread Matthias Nagel
Hello, Am Donnerstag 11 April 2013, 16:07:08 schrieb Iftakhul Anwar: Hi Matthias, I don't use on my squid_rad_auth.conf I know, that is the reason why I asked you to check for non-printable characters AFTER your shared secret. No space on my scret. And what is between the last

Re: Radius Squid authentication REJECT

2013-04-11 Thread Iftakhul Anwar
I just use enter after my shared secret. Any suggestions ? On Thu, Apr 11, 2013 at 4:17 PM, Matthias Nagel matthias.h.na...@gmail.comwrote: Hello, Am Donnerstag 11 April 2013, 16:07:08 schrieb Iftakhul Anwar: Hi Matthias, I don't use on my squid_rad_auth.conf I know, that is the

Re: Radius Squid authentication REJECT

2013-04-11 Thread Matthias Nagel
Hello, perhaps it is an encoding problem between the browser and squid. You should check what kind of encoding squid expects the browser to use and what encoding the browser actually uses. But this is not a radius problem, hence I cannot help you on that problem. Anyway, somewhere on the link

Re: Radius Squid authentication REJECT

2013-04-11 Thread Adam Bishop
On 11 Apr 2013, at 10:35, Iftakhul Anwar an...@meruvian.org wrote: I just use enter after my shared secret. Any suggestions ? There are three possibilities * The shared secret is wrong in the squid radius file * The shared secret is wrong in the freeradius clients file * Squid is broken

Need both Local (MySQL database) and Active directory authentications.

2013-04-11 Thread ffgch2
Hi all, I have set up Freeradius (v.2.1.10) to do password authentication from MySQL database and it works fine but now I need to make some users be able to authenticate against Active directory accounts. I’ve setup winbind to authenticate windows accounts and it works but as a result freeradius

Re: Radius Squid authentication REJECT

2013-04-11 Thread Iftakhul Anwar
Hi Adam, I'm sorry my previous attachment too large, This attachment log of radiusd -X output when i try to login using user = alice with passwrod=password Thanks On Thu, Apr 11, 2013 at 8:02 PM, Iftakhul Anwar an...@meruvian.org wrote: Hi Adam, This attachment log of radiusd -X output

Re: Radwho doesn't show full name

2013-04-11 Thread mkeram
Hello, Could you please check and confirm whether it works for you in freeradius 2? Best regards Marek Dnia 5 kwietnia 2013 0:47 mkeram lt;mke...@o2.plgt; napisał(a): Hello, I have installed Debian Squeeze 6.0 with freeradius 2.1.10 + accel-ppp (PPPoE). Everything is working fine, but radwho and

Re: Radius Squid authentication REJECT

2013-04-11 Thread Alan DeKok
Iftakhul Anwar wrote: This attachment log of radiusd -X output when i try to login using user = alice with passwrod=password You need to read it, and the responses to your messages. You've been told what's wrong, and how to fix it. Stop thinking you understand it, and read the responses.

Re: Need both Local (MySQL database) and Active directory authentications.

2013-04-11 Thread Alan DeKok
ffgch2 wrote: I have set up Freeradius (v.2.1.10) Upgrade to v2.2.0. to do password authentication from MySQL database and it works fine but now I need to make some users be able to authenticate against Active directory accounts. I’ve setup winbind to authenticate windows accounts and it

Re: compile with ldap support

2013-04-11 Thread John Dennis
On 04/10/2013 10:24 PM, Alan DeKok wrote: Chris Taylor wrote: How do I check that I have them installed I have the openldap rpm installed. This is really a question for your OS vendor. How about man rpm? Or google? If you're working on a Fedora/RHEL/CentOS etc. type system then

Re: Radius Squid authentication REJECT

2013-04-11 Thread A . L . M . Buxey
Hi, look: WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! there. incorrect shared secret...as already said several times in this thread...OR the squid code is broken. if this is working fine, then because its PAP you will see the

Re: Radius Squid authentication REJECT

2013-04-11 Thread Iftakhul Anwar
I'm sorry i really newbie. Actually my shared password is default using testing123.This is my configuration on my squid_rad_auth.conf squid_rad_auth.conf - server 192.168.2.3 secret testing123 and this is my configuration on squid.conf # TAG: auth_param

Question on certificates before deep dive into EAP-TLS

2013-04-11 Thread Mathieu Simon
G'day As a (hopefully) answer-able question to those experienced with EAP-TLS that I've been twisting my brain: Usually I've seen example for EAP-TLS setups that used a server-side certificate issued from the same CA as the one it should allow EAP-TLS clients who present their certificate to FR.

Re: Radius Squid authentication REJECT

2013-04-11 Thread A . L . M . Buxey
Hi, Actually my shared password is default using testing123.This is my configuration on my squid_rad_auth.conf as previously discussed, you are not sending full output of radiusd -X and so we are having to guess. we cannot guess your problems away at least send us your clients.conf from

Re: Radius Squid authentication REJECT

2013-04-11 Thread A . L . M . Buxey
Hi, Hi, previously i've attached my log as attachment :) no, you havent :-( all you have attached is the stuff that you felt you wanted to send. without sending the FULL output of radiusd -X FROM THE START we cannot see where you have gone wrong. HOW can we help if you dont give us the

Re: Radius Squid authentication REJECT

2013-04-11 Thread Iftakhul Anwar
Hi, I'm sorry, This is response log from radiusd -X when i try long using usr:alice password: password Cleaning up request 3 ID 4 with timestamp +116 Ready to process requests. rad_recv: Access-Request packet from host 192.168.2.3 port 55467, id=4, length=63 User-Name = alice User-Password =

Re: Radius Squid authentication REJECT

2013-04-11 Thread A . L . M . Buxey
Hi, Hi, I'm sorry, This is response log from radiusd -X when i try long using usr:alice one more time. please do not send us what you feel like sending us. please just simply send us the output of radiusd -X FROM THE VERY START right up to where is says 'Ready to process requests

Re: Radius Squid authentication REJECT

2013-04-11 Thread Alan DeKok
Iftakhul Anwar wrote: This is response log from radiusd -X when i try long using usr:alice password: password No, it's not. You need to follow instructions. If you ask questions and ignore the answers, that's rude. Either follow instructions, or stop posting the same questions. If

freeRadius 2.1.10 PEAP/MSCHAPv2 w/ Active Directory

2013-04-11 Thread trevor_marquis
Hello all, I'm new to freeRadius and am using freeRadius version 2.1.10 for some lab testing. I've got freeradius extracting users and passwords from an Active Directory database. I'm using PEAP/MSCHAPv2. All configs have been working until about a week or so ago. All of a sudden, my

Re: freeRadius 2.1.10 PEAP/MSCHAPv2 w/ Active Directory

2013-04-11 Thread Alan DeKok
trevor_marq...@selinc.com wrote: Hello all, I'm new to freeRadius and am using freeRadius version 2.1.10 Upgrade to 2.2.0. It has a number of issues fixed. for some lab testing. I've got freeradius extracting users and passwords from an Active Directory database. I'm using

Re: Question on certificates before deep dive into EAP-TLS

2013-04-11 Thread Alan DeKok
Mathieu Simon wrote: Usually I've seen example for EAP-TLS setups that used a server-side certificate issued from the same CA as the one it should allow EAP-TLS clients who present their certificate to FR. Yes. Am I guessing correctly that CA_file can contain a different list of CA(s)

Performing an additional check on the credentials

2013-04-11 Thread Romeo Mihalcea
I successfully managed to deploy a freeradius server and created a python script which does an additional check on the user (incoming request). I checked the internet (resources for freeradius are pretty horrible) and only found a thread which explains some basics about adding a python script to

Re: Performing an additional check on the credentials

2013-04-11 Thread Alan DeKok
Romeo Mihalcea wrote: I successfully managed to deploy a freeradius server and created a python script which does an additional check on the user (incoming request). I checked the internet (resources for freeradius are pretty horrible) Well... the server comes with a lot of documentation.

Re: Radius Squid authentication REJECT

2013-04-11 Thread Iftakhul Anwar
Hi All Thanks i've successfull configure squid using radius authentification. Actually i need install squid from source with parameter bellow when compile that source ( http://wiki.squid-cache.org/ConfigExamples/Authenticate/Radius) *--enable-basic-auth-helpers=squid_radius_auth* Previously i

Re: Question on certificates before deep dive into EAP-TLS

2013-04-11 Thread Mathieu Simon
Hi Am 11.04.2013 20:08, schrieb Alan DeKok: snip! The real-life example would be that people could use PEAP-MSCHAPv2 for credential-based logins (server certificate being signed by a trusted external CA) While that works, it's not recommended. It means that the client will trust *any*