Microsoft Outlook has changed first letter :(
log {
destination = files
file = /app_log/radius/radius.log
auth = yes
auth_badpass = yes
auth_goodpass = yes
}
When i use parameter -x, everythink works correct ( i see auth log message ):
WARNING:
Hi
I did google alot and still did not manage to find an answer, so I ask
here, hope someone can help on this,
my freeradius is running as a proxy, and I want to add a exec command when
authentication is successful.
so I add exec in the post-proxy { ,
but how to filter by the authentication
that means I want to differentiate the Access-Accept or Access-Reject
in the post-proxy section,
On Wed, Jun 19, 2013 at 2:27 PM, Bill Yuan byc...@gmail.com wrote:
Hi
I did google alot and still did not manage to find an answer, so I ask
here, hope someone can help on this,
my
On 19 Jun 2013, at 08:14, Bill Yuan byc...@gmail.com wrote:
that means I want to differentiate the Access-Accept or Access-Reject
in the post-proxy section,
In 3.0.0.
Post-Proxy-Type Access-Reject {
}
Just like you would in Post-Auth.
Honestly can't remember if it's supported in
but the latest release version is 2.2.0,
Can someone help to explain how to filter it on 2.2.0
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
When i use parameter -x, everythink works correct ( i see auth log message ):
that'll be because with -x or -X the service runs as root. without those
arguments it
will run as th user configured in the radiusd.conf - please ensure that
user/group
is able to write into that location
alan
Hi,
I never run radiusd as root user ( for both cases ).
The user/group is able to write, because i see general log message
Wed Jun 19 08:18:49 2013 : Info: Loaded virtual server default
Wed Jun 19 08:18:49 2013 : Info: Loaded virtual server default
Wed Jun 19 08:18:49 2013 : Info: Ready to
Hi,
Hi,
I never run radiusd as root user ( for both cases ).
yes you do - when you are running in '-x' mode
The user/group is able to write, because i see general log message
Wed Jun 19 08:18:49 2013 : Info: Loaded virtual server default
Wed Jun 19 08:18:49 2013 : Info: Loaded virtual
Hi,
Hmm, sorry but if i am logged in as none root user ( for example as radiusd
user ). Its not important if i will run
[path]/sbin/radiusd -d [config file]
or
[path]/sbin/radiusd -x -d [config file]
from command line ( both service will be run under radiusd environment, not
root ).
On 19.06.2013 14:11, Marco Streich wrote:
Hi all
We have deployed FreeRADIUS on OS X before, but our configuration was rather
ugly. What we would do is authenticate users locally, having the machine
attached to our OpenDirectory server directly using the Connect Network
Account Server
Hi,
I have managed to setup a simple test using eapol_test as per
http://www.openlogic.com/wazi/bid/188089/Authenticating-Wi-Fi-Users-with-FreeRADIUS
thats a rather old...and random URL. why not look at official docs?
and it all works as described except that I have to use ca.pem
Hi,
I will make it short and easy.
You can't do LDAP authentication with 802.1x. EAP needs the password of
the user in cleartext. if it's not in your ldap, you're screwed.
..EAP-TTLS/PAP ? ;-)
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 19/06/13 13:11, Marco Streich wrote:
When I run radtest from my laptop, the authentication is successful:
radtest does not send eap. Download the wpa_supplicant sources and
compile eapol_test to test EAP.
WARNING: No known good password was found in LDAP. Are you sure that the
user
On 19/06/13 13:28, adrian.p.sm...@bt.com wrote:
What I really need to do is proxy the inner message to another Radius
server which will do the authentication but I cannot get this to work.
Whatever I try, I always see an EAP-Message avp heading off to the
remote server. I have looked at the
On Wed, Jun 19, 2013 at 02:49:21PM +0200, Olivier Beytrison wrote:
On 19.06.2013 14:11, Marco Streich wrote:
We have deployed FreeRADIUS on OS X before, but our
configuration was rather ugly. What we would do is
authenticate users locally, having the machine attached to our
OpenDirectory
On 19 Jun 2013, at 13:50, Martin Kraus lists...@wujiman.net wrote:
On Wed, Jun 19, 2013 at 04:10:49PM +0800, Bill Yuan wrote:
but the latest release version is 2.2.0,
Can someone help to explain how to filter it on 2.2.0
I've got on debian freeradius 2.1.12 this in post-auth config, so I
What I really need to do is proxy the inner message to another Radius
server which will do the authentication but I cannot get this to work.
Whatever I try, I always see an EAP-Message avp heading off to the
remote server. I have looked at the proxy-inner-tunnel virtual server
but am
Hi,
Some other comments -
Upgrade from 2.1.12 to 2.2.x, as there are security issues pre
2.2.x.
Save yourself some round trip packets by setting default_eap_type
= ttls in eap.conf
Save yourself some LDAP lookups by removing ldap from the outer.
..and save some more hits to LDAP by
On 19.06.2013 16:02, a.l.m.bu...@lboro.ac.uk wrote:
Hi,
Some other comments -
Upgrade from 2.1.12 to 2.2.x, as there are security issues pre
2.2.x.
Save yourself some round trip packets by setting default_eap_type
= ttls in eap.conf
Save yourself some LDAP lookups by removing ldap from
Hi,
This *is* proxying the inner tunnel; the inner tunnel auth is also EAP, and
you're sending it to the remote server.
Thanks, this is NOT what I want to do. I want to send the inner message, not
the tunnel and do PAP on the remote server.
okay. so you need to start by terminating the
On 19/06/13 14:54, adrian.p.sm...@bt.com wrote:
What I really need to do is proxy the inner message to another
Radius server which will do the authentication but I cannot get
this to work. Whatever I try, I always see an EAP-Message avp
heading off to the remote server. I have looked at the
On 19/06/13 15:32, Olivier Beytrison wrote:
On 19.06.2013 16:02, a.l.m.bu...@lboro.ac.uk wrote:
Hi,
Some other comments -
Upgrade from 2.1.12 to 2.2.x, as there are security issues pre
2.2.x.
Save yourself some round trip packets by setting default_eap_type
= ttls in eap.conf
Save yourself
Hi,
He he he... if I recall correctly I came up with something like:
yes, thats the one. quoted as 'most evil unlang ever' if I recall
have used it on many occasions...does the job well
...as the EAP module was updated to return ok on identity/mschap
responses. Yet another reason to upgrade!
Hi, IIlya
Thanx for your advice
it works
On Thu, Jun 13, 2013 at 2:47 PM, Iliya Peregoudov iperegu...@cboss.ruwrote:
On 11.06.2013 12:27, raptor raptor wrote:
1.
when i change users entry, i get notification that access-accept has
succesfull
but unfortunately, when i restart the system
Hi,
i have tried with one client and it's success to authenticate and access
internet in wlan
could this test we use multiple clients?
i just try one client and success but when i use another client and it fails
is it correct if i add other client in users and simtriplets.dat?
ex:
you missed to install rlm_sim_files
1. go to /src/modules/rlm_sim_files and sudo make
2. copy rlm_sim_files to library
cp ./.libs/rlm_sim_files-2.2.0.so /usr/lib/freeradius
3. create link to usr/lib/freeradius/rlm_sim_files-2.2.0.so
sudo ln -s
26 matches
Mail list logo
