Re: 802.1X HOWTO (draft)

On Fri, 23 Jul 2004, Troy Davis wrote: Just from a very newbie's put of view why do you briefly touch on setting up a UNIX client and not a windows client Since this is going to be a Linux HOWTO, and since I'm only using Linux :^) If I'll get the time, I might add a Windows-supplicant

RE: Basic ?

Before I go jumping off the deep end, what OS would be the best and easiest to use for Free Radius? Fedora Core 2 FreeBSD Debian Mandrake Or ??? I'm a linux and Freeradius newbie and I'm using Freeradius for two month on a mandrake 9.2, it's not to hard to congigure and it works very

Re: freeradius 1.0.0 pre1 segmentation fault with tls

Hello ! I've been trying to make freeradius working with EAP-TLS but I have a segmentation fault. I'm using : - freeradius 1.0.0 pre1 - openssl-SNAP20040613 when I radiusd is launched with the script radiusd.sh, here is what I get : Module: Loaded eap eap: default_eap_type = tls eap:

Re: An Enterasys - Freeradius Question Again

Hi, Hi We played with the Enterasys E1 Switch and Freeradius to get 802.1x to work. Now, whenever someone wants to login on a Switchport, the Switch sends a Request to the Freeradius-Server. We tried diffrent Auth-Types (Local, EAP, CHAP) but none of them worked. When a user has

Re: An Enterasys - Freeradius Question Again

On Wednesday 09 June 2004 07:18, Zoltan A. Ori wrote: The Auth-Type is dependent on the supplicant not the switch. I take that back. The switch is using EAP except for management. Management access can be set in the users file. Hi, If you don't want to use radius auth for management

RE: segmentation fault for eap/tls

How to restrict that to one version. Seems to be I have old OPENSSL on my Linux. But I have installed latest openssl. Everything went well in configure, make, install and running too. It is working fine for EAP/MD5 too. But for EAP/TLS core dump is happening. I had the same pb and Alan is

Re: Help adding users

Frédéric EVRARD wrote: Hi group Is there a guide somewhere on how to add users on FreeRADIUS ?? Im new to linux, and radius, and need a complete HOWTO on how to add users. Here's many howto for 802.1x/EAP-TLS with WinXP FreeRADIUS, maybe you will want to use an other EAP method, but I hope

Re: EAP/TLS win2000

hi Artur, hi Frederic What do you want to say is that win2K is going to take EAP-Identity value in client certificate, before EAP-TLS challenge start ?? I don't think so, it doesn't work like that with Xsupplicant/FreeRADIUS and it's not describe like this in RFC. no. what i want to

Re: Help adding users

Hi group Is there a guide somewhere on how to add users on FreeRADIUS ?? Im new to linux, and radius, and need a complete HOWTO on how to add users. Here's many howto for 802.1x/EAP-TLS with WinXP FreeRADIUS, maybe you will want to use an other EAP method, but I hope that can help you.

Re: Help in using EAP

Hi, I am using EAP authentication protocol. When I send an access request from the NAS to the Radius Server, the server rejects the request. Please let me know how to resolve this problem. The log messages of the radius server are as follows: Log Messages: rad_recv: Access-Request packet

Re: EAP/TLS win2000

Hi Artur, hi Thx for your help Artur, but I forgot to say my authenticator is a Cisco switch 3550, then not a wireless access-point. There's something I don't understand, with PEAP or EAP-MD5, the windows 2000 supplicant answer to identity request send by the switch but with EAP-TLS, it

Re: how to change xp client using peap

I'm having problems to change the user in windows xp. I tried peap the first time with a correct user and everything was fine but now I want to do a prove with another user but I'm not prompted anymore to intro a new one and it uses the previous one all the time(and I have reconfigured the

Re: Freeradius + Mysql Issues!

Hi, I was sorry but i really do not know what u trying to say. Can expain in more detail. apprrciate you can do that. Use a usual unix login/password to authenticate on Radius, and this password is in /etc/passwd. Fred Alexander Alan DeKok [EMAIL PROTECTED] wrote: Alexander Khoo

Re: clients.conf

Hi, How should I configure the clients.conf if I would like that each nas, which want to connect to my Radius can do it. Beacuse they have dinamic ip address, so I can't set this in the clients.conf. Maybe you can use hostname and dns resover.. client 0.0.0.0{ secret= mysecret } any

Re: xp/2000 does not send the machine certificate

Hi, Sorry, I can't help you, but maybe you can help me, what answer your windows 2k send to the A.P EAP request Identity packet ? Thx Fred hi all, i'm using freeradius with EAP-TLS and windows clients ( xp/2000). with the user certificates i have no problem but with the machine certificate

Re: Help to a student on final exam paper

Hi group Im new to linux and RADIUS and have a few questions regarding configuring my radius server I have installed Cistron Radius 1.6.6 on my redhat 9.0 machine. My goal is to authenticate all users on a wireless 802.1x network, and here are the specs. Router: 10.10.0.1 Gateway(Clark

Re: Freeradius - Enterasys E1 802.1x Authentication HOWTO

Hi I'm a student in computer sciences. In our network security class we are trying to get the 802.1x (dot1x) features of an Enterasys E1 Switch running with a freeradius server. Hi, I'm using 802.1x on Enterasys switch, it works, then look :

EAP/TLS win2000

Hi all, I'm using 802.1x/EAP-TLS on FreeRADIUS, it works fine with linux Xsupplicant but not with Win2000 supplicant, when supplicant receives EAP request Identity packet, it doesn't answer anything and nothing happens...There's no logs or I don't know to find them. I've read several HOWTO but

Re: PEAP vs EAP/TLS

One doubt, basically the operation between server and AP is the same in EAP/TLS and PEAP but for the fact that in the former the user has a cert and in the latter a screen should be prompted for the user to introduce its login and passw so the RADIUS must check them in the users file? I don't

Re: Enabling EAP-MD5 authentication

Hi, How can I enable EAP-MD5 authentication in the free radius server. You have to configure .../raddb/users file with Auth-Type = EAP. Try to be more precise. Fred Regards, Barath Kumar. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List

Re: eap.cnf

usually it's called 'eap.conf' and it is in the raddb dir. I have already searched in tha dir but I find no eap.conf!! I'm using freeradius 0.9.3 does it support PEAP? Download the last CVS snapshot to have EAP config separately in eap.conf and no more in radiusd.conf. Fred thanks bfr

Re: libssl problems

Hello, I am triying to compile SNAPSHOT-20040113 and SNAPSHOT-2004507 to work with EAP-PEAP. I have installed openssl with the argument --prefix=/usr/local. Then, i try to configure freeradius: #configure --with-openssl-includes=/usr/local/include/openssl

Re: openssl

I'm newbie too and I use Mdk9.2 and freeradius snapshot 22-004- 2004, then I use slocate command to find files I need . I install all soft neededfrom /usr/local/ and I add /usr/local/bin and /usr/local/sbin to my $PATH then it works...maybe it can help you Sorry Fred but in which $PATh do

EAP-TLS

Hello all, I'm working on 802.1x with EAP-MD5 to start, it works very fine. Now I need to use EAP-TLS. Then I let default config to test and I just change default_eap_type = MD5 to default_eap_type = tls, I uncomment tls attributes in eap.conf file. When I start radiusd -X I've no radius error

Re: Vendor Specific Problem

Hello, i want to create a new dictionary to handle new attributes. First of all i create a new file called dictionary.mine containing the following lines: VENDOR Mine 4113 ATTRIBUTE VLANid 22 string Mine Why do you need this new attribute, there's ever standard

Re: EAP-TLS

Thanks Htin and Giulio for your answers, with your advices, I look in configure.log, and I see an error with openssl, I don't have openssl-devel. After install it and compil freeradius again, segmentation fault error disappear. Thx again. Fred Hello all, I'm working on 802.1x with EAP-MD5 to

Re: one issue

Hi, I run supplicant against freeradius with authentication type MD5. After that I wanted to run supplicant against freeradius for authentication type TLS. but for TLS I am getting the following error: I used the following command: # radiusd -X rlm_eap: Failed to link EAP-Type/tls:

Re: openssl

I'm using this HOWTO http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm to configure eap/tls over freeradius. I'm trying to install openssl as it's explained there but when I have to verify the sym link between some files I'm not very sure about how to do this. Should the linked files

Filter-Id attribute

Hello all, In 802.1x configuration, I need to use Vlan assignment on Enterasys switch from Freeradius server, and Enterasys doesn't accept standarts attributes like Tunnel-type etc... Then I have to use Filter-Id attribute in users file: Filter-ID = Enterasys:Version=1:policy=nameofpolicy Have

Re: Log problems

Anyone have any idea why authentication info would not be going into the radius.log file? put ../raddb/radiusd.conf parameters log_auth=yes, log_auth_badpass=yes, log_auth_goodpass=yes if you need them. This three parameters are no by default. This logs are in

Re: Open ports over firewall

Hi everybody, I'm running Freeradius on my RedHat server. Which OUTPUT ports sholud I leave open for freeradius? For accounting i leave udp 1812-13 open in INPUT and OUTPUT, I receive authentication requests but then my auth replies are blocked by firewall. Any help on this? thx Gabriele

Re: Ports mismatch between config and debug messages

Hi, Running freeradius -x, we get the following: ... Listening on authentication x.x.x.x:1812 Listening on accounting x.x.x.x:1813 Ready to process requests. rad_recv: Accounting-Request packet from host y.y.y.y:1646, id=84, length=461 ... Sending Accounting-Response of id 84 to

Re: Ports mismatch between config and debug messages

Hi, Running freeradius -x, we get the following: ... Listening on authentication x.x.x.x:1812 Listening on accounting x.x.x.x:1813 Ready to process requests. rad_recv: Accounting-Request packet from host y.y.y.y:1646, id=84, length=461 ... Sending Accounting-Response of id 84 to

Re: eap output?

hi all, i am trying to authenticate users via eap md5 for just testing purposes. i use winxp supplicant (i know that after sp1 they dont support md5). i ran the radius server in the debug mode. here is the output. rad_recv: Access-Request packet from host 193.140.193.133:1084, id=43,