Users accounts file - was: Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-04-09 Thread James McOrmond
(rlm_ldap: User not found): [radiustester] (from client localhost port 0) Wed Apr 9 16:07:22 2008 : Auth: Login incorrect (rlm_ldap: User not found): [radiustester] (from client moodie port 29 cli 001302038917) Alan DeKok wrote: James McOrmond wrote: What about the other auth types? ms

Re: Auth-Test accounts in users file

2008-03-26 Thread James McOrmond
Alan DeKok wrote: James McOrmond wrote: Is it possible/appropriate to have some test accounts in the users file, along with an Auth-Type set to which auth type this account can be used for? Yes. But don't set Auth-Type. Please. you seem to have a real issue

Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-03-25 Thread James McOrmond
Alan DeKok wrote: James McOrmond wrote: As per previous emails, since i'm using samba/ldap i'm able to pull the nt/lmpassword fields directly out of the ldap. Should this method negate the use of the ntlm_auth method? Yes. See ldap.attrmap. The LDAP module uses this to map

Auth-Test accounts in users file

2008-03-25 Thread James McOrmond
Is it possible/appropriate to have some test accounts in the users file, along with an Auth-Type set to which auth type this account can be used for? We're testing a client that we're building (based on wpa_supplicant on linux), so would like to confirm the different auth methods are

Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-03-24 Thread James McOrmond
Stefan Winter wrote: Hi, I'm trying to emulate the edunet network wireless roaming network, which primarily uses (in this order): what exactly is edunet? The only wireless roaming network in the educational sector I know of is * eduroam *. Are you speaking of that or something

Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-03-24 Thread James McOrmond
Alan DeKok wrote: James McOrmond wrote: With that, and a few configuration options (like making sure the host was connected to the domain and ntlm_auth functioned as required), i've managed to get PEAP and EAP-MSCHAPv2 working fine to the ntdomain. The guides for *that* are online

EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-03-19 Thread James McOrmond
Okey, i've searched and searched for a hint, hopefully this isn't one of those RTFM messages, and hopefully I didn't read an invalid FM ;-) I'm trying to emulate the edunet network wireless roaming network, which primarily uses (in this order): EAP-TTLS PEAP EAP-MSCHAPv2 My Access point

Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-03-19 Thread James McOrmond
Alan DeKok wrote: James McOrmond wrote: This is a Samba NT domain, not AD. I do not have access to the plain text password through Samba or LDAP. Samba is a lot friendlier about passwords than AD is. Of course it is.. G I probably should have mentioned samba in the original

Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

2008-03-19 Thread James McOrmond
With that, and a few configuration options (like making sure the host was connected to the domain and ntlm_auth functioned as required), i've managed to get PEAP and EAP-MSCHAPv2 working fine to the ntdomain. EAP-TTLS works fine with an account in the users file that has a clear text