RE: Ldap group troubles

2007-06-07 Thread Dourty, Brian R. (IATS)
PROTECTED] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Phil Mayers Sent: Tuesday, June 05, 2007 6:50 PM To: FreeRadius users mailing list Subject: Re: Ldap group troubles Dourty, Brian R. (IATS) wrote: > I'm having some trouble with the ldap group configuration against AD and &g

RE: Ldap group troubles

2007-06-06 Thread Dourty, Brian R. (IATS)
)(userPrincipalName=dourtyb)) rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: Setting Auth-Type = ldap rlm_ldap: user dourtyb authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module &quo

RE: Ldap group troubles

2007-06-06 Thread Dourty, Brian R. (IATS)
g] On Behalf Of Phil Mayers Sent: Tuesday, June 05, 2007 6:50 PM To: FreeRadius users mailing list Subject: Re: Ldap group troubles Dourty, Brian R. (IATS) wrote: > I'm having some trouble with the ldap group configuration against AD and > need a little help. > > > &g

Ldap group troubles

2007-06-05 Thread Dourty, Brian R. (IATS)
I'm having some trouble with the ldap group configuration against AD and need a little help. Freeradius 1.1.4 MS 2003 Active Directory radiusd.conf groupname_attribute = "cn" groupmembership_filter = "(member=%{Ldap-UserDn})" groupmembershi

RE: radiusd and oracle accounting

2007-01-22 Thread Dourty, Brian R. \(IATS\)
EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, January 22, 2007 2:28 PM To: FreeRadius users mailing list Subject: Re: radiusd and oracle accounting Dourty, Brian R. (IATS) wrote: > We have configured our radius servers to send accounting information to > an Orac

radiusd and oracle accounting

2007-01-22 Thread Dourty, Brian R. \(IATS\)
We have configured our radius servers to send accounting information to an Oracle database. It works our really well except when the oraclce database server isn't available (I.E. maintenance or cold backups). The radius process dies when it loses connectivity to the oracle server. Has anyone else n

RE: Windows Vista doing PEAP

2006-11-30 Thread Dourty, Brian R. \(IATS\)
The patch did improve things, but is still isn't perfect. If I configure my VISTA client to prompt me for my credentials the authentication works and I get connected. If I configure my VISTA client to use my windows login credentials (This is the default behavior) the Auth fails. For some reason th

RE: Windows Vista doing PEAP

2006-10-23 Thread Dourty, Brian R. \(IATS\)
Got this patch to work with 1.1.3 without seg faulting... I've sent Alan the debug output. Can download it here: http://bengal.missouri.edu/~dourtyb/freeradius/vista.patch Index: src/modules/rlm_eap/rlm_eap.c === RCS file: /source/ra

RE: Windows Vista doing PEAP

2006-10-20 Thread Dourty, Brian R. \(IATS\)
the OS is (WinXP, VISTA, they all cause it to seg > fault with DEBUG printing) > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:freeradius-users- > [EMAIL PROTECTED] > On Behalf Of Dourty, Brian R. (IATS) > Sent: Thursday, October 19, 2006 4:44 PM > T

RE: Windows Vista doing PEAP

2006-10-19 Thread Dourty, Brian R. \(IATS\)
We have also posted here about our difficulties with Windows Vista and our FR. It isn't working for us either. Brian > -Original Message- > From: freeradius-users- > [EMAIL PROTECTED] [mailto:freeradius- > [EMAIL PROTECTED] On Behalf Of > King, Michael > Sent: Thursday, October 19, 2006

AD Group based ldap auth

2006-10-10 Thread Dourty, Brian R. \(IATS\)
I'm trying to get group based authentication working using LDAP against AD. Right now I'm getting a failure related to the group search filter. What filter should I be using? groupmembership_filter = "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=top)(uniq uemember=%{Ldap-UserDn}))

RHEL4 and Oracle Instant Client

2006-10-10 Thread Dourty, Brian R. \(IATS\)
Has anyone gotten the source RPM's from RHEL4 to build with the oracle module using the Oracle instant client? It keeps giving me the following error no matter what I try: checking for oci.h... yes checking for oracle_init in -loracleclient... no configure: warning: oracle libraries not found. Us

RE: MS Vista RC1 and Freeradius 802.1x

2006-09-21 Thread Dourty, Brian R. \(IATS\)
reeradius- > [EMAIL PROTECTED] On Behalf Of > Alan DeKok > Sent: Thursday, September 21, 2006 9:54 AM > To: FreeRadius users mailing list > Subject: Re: MS Vista RC1 and Freeradius 802.1x > > "Dourty, Brian R. \(IATS\)" <[EMAIL PROTECTED]> wrote: > > We are

MS Vista RC1 and Freeradius 802.1x

2006-09-21 Thread Dourty, Brian R. \(IATS\)
We are having some difficulties getting MS Vista RC1 build (5600) to work with our Freeradius server using 802.1x. Has anyone been able to get this to work? Brian Dourty System Administrator - Team Lead IAT Services University of Missouri - Columbia 573-882-1035 - List info/subscribe/unsubscrib

Consolidating radius Servers

2006-08-04 Thread Dourty, Brian R. \(IATS\)
We currently have two load-balanced pairs of freeradius servers. One set supports our Dial-up/VPN customers and the other set supports our 802.1x wireless infrastructure. I'm wondering if it is possible to serve both sets of customers using one set of radius servers. How would we get the radius ser

RE: Freeradius on redhat ES 3.0

2004-05-03 Thread Dourty, Brian R. \(IATS\)
Our radius servers are both RHEL 3.0 AS machines. We recompiled freeradius from redhat supplied source RPMS to get oracle support. We use them to handle dialup modem pools and VPN client. We haven't had any problem with the production systems. What are you trying to use your radius server for? Bri

RE: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-05-03 Thread Dourty, Brian R. \(IATS\)
. Brian D. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Alan DeKok > Sent: Monday, May 03, 2004 1:07 PM > To: [EMAIL PROTECTED] > Subject: Re: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question > > "

RE: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-05-03 Thread Dourty, Brian R. \(IATS\)
> "Dourty, Brian R. (IATS)" <[EMAIL PROTECTED]> wrote: > > Ok, but isn't the "with_ntdomain_hack =3D yes" directive in the > > raidusd.conf file suppose to correct this behavior? > > Theoretically, yes. But when you're calling ntlm

RE: Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-04-30 Thread Dourty, Brian R. \(IATS\)
> "Dourty, Brian R. (IATS)" <[EMAIL PROTECTED]> wrote: > > 1. Keeping in mind that user1 in domain1 can auth as long > as domain1 > > isn't supplied why does supplying domain1 cause the auth to fail? > > Because the MS client does the MS-CHAP c

Freeradius + PEAP + MSCHAPV2 + NTLM_AUTH Question....

2004-04-30 Thread Dourty, Brian R. \(IATS\)
Hello all, We are in the process of testing 802.1x authentication for future deployment on campus. Our test setup includes the following: freeradius-snapshot-20040427 running on RHEL 3.0 AS Configured for PEAP with MSCHAPv2 using SAMBA's winbind/ntlm_auth Multiple AD domains (smb.conf points to a