Re: Installation of FreeRadius on Solaris 10

2005-06-26 Thread Jim Seymour
Jas [EMAIL PROTECTED] wrote: Hi All, I would really appriciate, if you would kindly help me out. [snip] /usr/ccs/bin/ld -G -z defs -h libltdl.so.3 -o .libs/libltdl.so.3.1.0 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -lc ld: fatal: library -lcrypto: not

Re: Installation of FreeRadius on Solaris 10

2005-06-26 Thread Jim Seymour
[EMAIL PROTECTED] wrote: Jim Seymour wrote: Jas [EMAIL PROTECTED] wrote: [snip] /usr/ccs/bin/ld -G -z defs -h libltdl.so.3 -o .libs/libltdl.so.3.1.0 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -lc ld: fatal: library -lcrypto: not found ld

RE: FreeRADIUS 1.0.3 has been released

2005-06-04 Thread Jim Seymour
Abdul Lateef [EMAIL PROTECTED] wrote: Thanx for new version of freeradius. It will be more easy if you can tell what are new features added in the new ver.? You mean like those that were listed in the announcement email? Jim - List info/subscribe/unsubscribe? See

Re: radius + peap + wifi + mac os x

2005-05-31 Thread Jim Seymour
Vittore Zen [EMAIL PROTECTED] wrote: Hi, I'm using freeradius (+mysql) in a wireless infrastructure with a dozen of linksys WAP54G access point (using AES). Authentication is PEAP with mschapv2. All go right when use Windows clients but no response using Mac Os X clients. Any ideas?

Re: time request

2005-05-31 Thread Jim Seymour
Thiago Felipe de Andrade [EMAIL PROTECTED] wrote: You'll probably get more help if you post your message to the list in straight text instead of HTML. Jim - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Please resend this message to Kim Jones'

2005-05-30 Thread Jim Seymour
Christopher Bootland [EMAIL PROTECTED] wrote: Why is Kim Jones at SimplyNet (?) harvesting addresses on this mailing list? I can't think of a valid reason why a third-party needs to know. Does anybody have any more information? Most likely what's happening is he, or whomever at his old

Re: Wireless Authentication

2005-05-29 Thread Jim Seymour
Radius [EMAIL PROTECTED] wrote: Does anyone have any links or on-line examples that show how to use FreeRadius to do 802.1x authentication? From the front page of http://www.freeradius.org, under News!: . 05 October, 2004 Setting up wireless authentication: 802.1X Port Based

Re: How to implement challenge/response authentication

2005-05-24 Thread Jim Seymour
Terry lee [EMAIL PROTECTED] wrote: You might have better luck if you turned off the HTML and posted in straight text. Jim - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS NETWORK

2005-05-11 Thread Jim Seymour
Paulo C. Panaligan [EMAIL PROTECTED] wrote: WHAT MATERIALS DO I NEED TO SETUP A RADIUS NETWORK ON LINUX? Paulo, you're not getting any useful answers because you're violating every rule in the book on how to go about asking for help. Briefly: You're asking a group of people, this mailing

Re: suggestions for freeradius restart wrapper (other than daemontool s)

2005-05-10 Thread Jim Seymour
Tariq Rashid [EMAIL PROTECTED] wrote: i know the FAQ mentions the daemontools for ensuring that the freeradiusd daemon is available in the event of an unlikely crash. It also mentions /etc/inittab. can anyone recommend another set of tools or scripts for managing the freeradius daemon

RE: Snmp trap

2005-05-05 Thread Jim Seymour
Yoram Baruchian [EMAIL PROTECTED] wrote: Hi Does the snmp_trap utility is part of the operating system? Can I download it thanks Do you suppose you could stop sending this garbage: From [EMAIL PROTECTED] Thu May 5 10:30:16 2005 Message-Id: [EMAIL PROTECTED] From: [EMAIL PROTECTED]

Re: WPA Auth w/users file

2005-05-04 Thread Jim Seymour
Nobody has any clues on how this might be accomplished? Jim [EMAIL PROTECTED] (Jim Seymour) wrote: Vladimir Vuksan [EMAIL PROTECTED] wrote: Homer Parker wrote: I have the same problem as: http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg15436.html

Re: EAp/TSL authorization problem

2005-05-03 Thread Jim Seymour
Sergey Guriev [EMAIL PROTECTED] wrote: ÷ ÓÏÏÂÝÅÎÉÉ ÏÔ 3 íÁÊ 2005 10:14 Vladimir Vuksan ÎÁÐÉÓÁÌ: Thu Apr 28 11:33:53 2005 : Debug: users: Matched entry www at line 228 Are you sure that the entry on line 228 has the correct password. I am not quite sure where the [EMAIL

Re: WPA Auth w/users file

2005-05-02 Thread Jim Seymour
Vladimir Vuksan [EMAIL PROTECTED] wrote: Homer Parker wrote: I have the same problem as: http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg15436.html Running Freeradius 1.0.1. I've made the changes listed in that thread, but.. I'm using the raddb/users

Re: AW: verify server certificate XP supplicant ?

2005-04-19 Thread Jim Seymour
[Jeopardy-style follow-ups, mis-quoting and excess text corrected...] PhonTom [EMAIL PROTECTED] wrote: [mailto:[EMAIL PROTECTED] Im Auftrag von [EMAIL PROTECTED] Zitat von Riccardo Veraldi [EMAIL PROTECTED]: Hello, I am using EAP-TLS. Windows XP, Cisco 1200 AP, freeradius.

Re: NT domain names and SQL authentication

2005-04-11 Thread Jim Seymour
Diego M. Vadell [EMAIL PROTECTED] wrote: Hi, I've been fighting my ignorance for a week now. I'm trying to setup FreeRadius with a Windows XP SP2 supplicant with mschap2 thru an Orinocco access point. I would like to use the username and password of the NT domain, but the only way I can

Re: FreeRADIUS version 1.0.2

2005-04-10 Thread Jim Seymour
Jamal Taweel [EMAIL PROTECTED] wrote: Dear All, Can anyone tell me, what are the bugs which are found in the previous versions that the new version overcomes them? [snip] Download the latest tarball (v1.0.2). Unpack it. Look in the doc subdirectory. You'll see a file named ChangeLog.

Re: Beginner question: Trying to secure a wlan

2005-04-09 Thread Jim Seymour
Tim Boneko [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, i installed freeradius 1.0.2 on Debian 3.1 (sarge) in order to protect my wlan (test for a production installation). I?m not yet sure how i want to secure the net (encryption or mac auth), MAC auth is

Re: Solaris 8 and Freeradius

2005-04-01 Thread Jim Seymour
freeradius roime [EMAIL PROTECTED] wrote: Hi everyone. I've installed Freeradius 0.9.* on solaris 8 OS and it's installed successfull. But when i tried to run it using debugginh mode, i've received this text printed at the end of the textprinted. rlm_eap: Loaded and initialized the type

CA.all Not Working? Can't Generate New Certs

2005-04-01 Thread Jim Seymour
Hi, I'd like to generate new certs, but whenever I run CA.all I get, after the last phase: ... Certificate is to be certified until Apr 1 16:15:07 2006 GMT (365 days) Sign the certificate? [y/n]:y failed to update database TXT_DB error number 2 No certificate matches private key

Re: CA.all Not Working? Can't Generate New Certs

2005-04-01 Thread Jim Seymour
Zoltan Ori [EMAIL PROTECTED] wrote: On Friday 01 April 2005 11:45, Jim Seymour wrote: No certificate matches private key That may be the problem. Indeed, it may well be. But what does that *mean*? What certificate? What private key? I have no idea what it's looking for or why

Re: CA.all Not Working? Can't Generate New Certs

2005-04-01 Thread Jim Seymour
Zoltan Ori [EMAIL PROTECTED] wrote: On Friday 01 April 2005 11:58, Jim Seymour wrote: Zoltan Ori [EMAIL PROTECTED] wrote: On Friday 01 April 2005 11:45, Jim Seymour wrote: No certificate matches private key That may be the problem. Indeed, it may well be. But what does

Re: Integrating with freeradius and postgresql.

2005-04-01 Thread Jim Seymour
Brian Gao [EMAIL PROTECTED] wrote: Just wondering if anyone has done integrating with freeradius and postgresql? IIRC, the docs talk about doing just that. Have you examined them? Jim -- Note: My mail server employs *very* aggressive anti-spam filtering. If you reply to this email and

Re: Integrating with freeradius and postgresql.

2005-04-01 Thread Jim Seymour
Brian Gao [EMAIL PROTECTED] wrote: Where I can get this IIRC? Um... *cough* IIRC == If I Recall Correctly Thanks You're welcome. Jim - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: how to authenticate only via username

2005-03-31 Thread Jim Seymour
Stefan Winter [EMAIL PROTECTED] wrote: Hi! Any suggestion, how to authenticate only by username? (any password should be valid). Any idea? Auth-Type := Accept Btw, a nit-pick: That's not authentication. It's identification, at best. And since it's not authenticated, it's not

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-31 Thread Jim Seymour
Alan DeKok [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Jim Seymour) wrote: [snip] Hmm... the reason the hints thing didn't work is that the regex function expects '\' to be escaped, too. This works for me: DEFAULTUser-Name =~ (.*)$ My-Local-User-Name = %{1} smacks

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-31 Thread Jim Seymour
Stefan Winter [EMAIL PROTECTED] wrote: [snip] Hope you haven't given up yet. In a later message you write: Nah, I'm not that easy ;). [snip] Which makes me think that both suffix and ntdomain are active in=20 rlm_realms. Try turning off suffix, because suffix operates only on names=20

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-31 Thread Jim Seymour
Alan DeKok [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Jim Seymour) wrote: [snip] Now, if possible, is there a way to persuade FreeRADIUS to try My-Local-User-Name, if available, Stripped-User-Name it it's not, and User-Name if Stripped-User-Name is not available? Sure. But you'll

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-31 Thread Jim Seymour
[EMAIL PROTECTED] (Jim Seymour) wrote: Alan DeKok [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Jim Seymour) wrote: [snip] Now, if possible, is there a way to persuade FreeRADIUS to try My-Local-User-Name, if available, Stripped-User-Name it it's not, and User-Name if Stripped

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-31 Thread Jim Seymour
Alan DeKok [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Jim Seymour) wrote: Clarification: Giving the server ADMINNB\jseymour works. Giving it just jseymour does not. Because the regex on the line above doesn't match. So, do: DEFAULT User-Name =~ blah My-Local-User

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-31 Thread Jim Seymour
Artur Hecker [EMAIL PROTECTED] wrote: would you mind writing down a small doc with your experiences? i'm sure it would be nice to know for everyone. [snip] Actually, I had planned to do just that :). First I need to find out why my MS-WinXP Pro laptop is prepending WindowsName\ to

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Stefan Winter [EMAIL PROTECTED] wrote: Hello! I've searched and searched, and tried every hint I could find, and cannot seem to make it work using the Windows login name and password. Is it possible? Make your users set a password for their login on the XP machine. That is the

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Willem Eradus [EMAIL PROTECTED] wrote: On Wed, 30 Mar 2005 06:50:37 -0500 (EST), Jim Seymour [EMAIL PROTECTED] wrote: [snip] One thing I notice is the client PC sending WINNAME\username, instead of just username, if I tell it to use the Windows login info. [At least I think so

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Michael Griego [EMAIL PROTECTED] wrote: You should be Jim Seymour wrote: Willem Eradus [EMAIL PROTECTED] wrote: # #with_ntdomain_hack = no I tried that. Made no discernable difference. Be sure you're using the with_ntdomain_hack in the mschap module configuration

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Michael Griego [EMAIL PROTECTED] wrote: Jim Seymour wrote: So clearly that output indicates a successful username match, and just as clearly, setting with_ntdomain_hack = yes in the mschap module does not strip the leading GARBAGE\ stuff. You'll have to look quite a bit further

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Michael Griego [EMAIL PROTECTED] wrote: I think I see what your problem is... You need to reenable the ntdomain realm module that is preconfigured in the server and be sure its called before your etc_smbpasswd module in your authorize section. You seem to have removed it, and, because

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Alan DeKok [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Jim Seymour) wrote: http://jimsun.linxnet.com/misc/radiusd.out-login_creds_w_hack+ntdomain_realm.txt ... modcall[authorize]: module etc_smbpasswd returns notfound for request 0 The password isn't being added because

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Alan DeKok [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Jim Seymour) wrote: a) adding ADMINNB\jseymour as a user in the smb passwd file That's not practical. ADMINNB is that specific laptops NETBIOS name. testing != deployment First, get it to work. Then, get it to work

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Michael Griego [EMAIL PROTECTED] wrote: Or you could make sure your DEFAULT realm is set up. Your current configuration should work if you have a DEFAULT realm in your proxy.conf. If it doesn't work using the default realm, change your etc_smbpasswd line to use the Stripped-User-Name,

Re: FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-30 Thread Jim Seymour
Michael Griego [EMAIL PROTECTED] wrote: Or you could make sure your DEFAULT realm is set up. Actually, a NULL realm was what I think you meant. Your current configuration should work if you have a DEFAULT realm in your proxy.conf.

FreeRADIUS + 802.1x (WPA) + WinXP + smbpasswd

2005-03-29 Thread Jim Seymour
Hi, Environment: FreeRADIUS 1.0.2 WinXP Pro (patched) I'm almost there. I've got FreeRADIUS authenticating the WinXP Pro client (Intel PRO/Wireless 2915 and NetGear FWAG114, btw) using the smbpasswd file on the server *if* I configure XP *not* to use my Windows login name and password,