Re: EAP-TTLS w/PAP using ntlm_auth

it is needed to force pap usage? I thought pap was supposed to always be used when no other mod took care of it (fallthrough). Regards, Bram. Ivan Kalik wrote: Use unlang to set Auth-Type PAP even if pap returns noop. Ivan Kalik Kalik Informatika ISP Dana 28/5/2008, Bram Matthys

Re: EAP-TTLS w/PAP using ntlm_auth

Thu May 29 13:05:27 2008 : Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Thu May 29 13:05:27 2008 : Debug: auth: Failed to validate the user. Thanks for your time / Regards, Bram. PS: I also tried 'if (!(Control:Auth-Type))' just

Re: EAP-TTLS w/PAP using ntlm_auth

Hi Alan, Alan DeKok wrote: Bram Matthys (Syzop) wrote: Thanks for the hint. What would be the best place and way to do this? Putting this before pap in authorize { }: update control { Auth-Type := PAP } does indeed make pap work, but breaks anything

Re: EAP-TTLS w/PAP using ntlm_auth

://www.freeradius.org/radiusd/man/unlang.html Ok, the syntax was correct, except it should have been control instead of Control.. which was the problem ;). Now everything is working fine, both pap and eap-mschapv2. Thanks all for your help! Bram. - List info/subscribe/unsubscribe? See http

EAP-TTLS w/PAP using ntlm_auth

: ++[pap] returns noop I've reverted that attempt before trying everything I mentioned earlier, though. Regards, Bram. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TTLS w/MS-CHAPv2

this configuration entry in the default eap.conf file. ... You're right, I need EAP-MSCHAPv2 for SecureW2, as it only support mschapv2 in eap. Regards, Bram. -- Bram Matthys Software developer/IT consultant[EMAIL PROTECTED] PGP key: www.vulnscan.org/pubkey.asc PGP fp

EAP-TTLS w/MS-CHAPv2

-Type = EAP] (from client localhost port 0 cli 70-6F-6C-69-73-68) Any help is very much welcomed :) Regards, Bram. -- Bram Matthys Software developer/IT consultant[EMAIL PROTECTED] PGP key: www.vulnscan.org/pubkey.asc PGP fp: 8DD4 437E 9BA8 09AA 0A8D 1811

Re: providing IP address depending NAS origin

the attribute that should be checked in the config, but this doesn't seem the right place to describe it in detail) Bram - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple Pools with ippool

Quoting Adam [EMAIL PROTECTED]: If I change my config to: DEFAULT Pool-Name := pool_1 Ascend-Client-Primary-DNS = 192.168.1.10, Ascend-Client-Secondary-DNS = 10.0.0.10, Fall-Through = yes It will hand out in IP but only from pool pool_1. How do I make it use

Re: radwho is empty

the other problem is what i am using radwho and it's empty, because the file /usr/local/var/log/radius/radutmp is empty. how i can fix that in order to run radwho. Is your NAS sending an accounting package with Acct-Status-Type set to Start? - List info/subscribe/unsubscribe? See

Accounting without authorization?

request 3 Regards, Bram - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

dictionary file - rfc compilant or not - Authen::Radius?

the author of this module (informing him about it) and he found the used syntax strange... So can anyone confirm wheter this is a fault of freeradius or one of Authen::Radius? Regards, Bram - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: dictionary file - rfc compilant or not - Authen::Radius?

this would make it easier for the ones writing modules and/or clients to connect to a Radius server... Any knows? Or would it be a better idea to re-post this at the devloppers mailinglist? Bram - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html