Thanks Alan, I'll investigate all of that further.
Cheers all,
Andi
-Original Message-
From: freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org
[mailto:freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org]
On Behalf Of alan buxey
Sent: 09 October 20
> I guess there’s something here to show what’s wrong? Is there any log
> created by make and make install?
They log what they're doing to standard out. The intention is for you to
read it.
Fair enough, the output on screen was scrolling far too fast to read, I
should probably have
To: freeradius-users@lists.freeradius.org
Subject: Re: Upgrade to 2.2.0
On 09/10/12 15:23, Morris, Andi wrote:
>
> Firstly running ./configure failed because my server (CentOS 5.5)
> didn’t have a C compiler installed. I installed GCC via yum, and on we go.
>
> Now the configure.log tells
I've just updated my freeradius servers from 2.1.7 to 2.1.12 via yum update and
it worked like a charm, I'd always been a little nervous to do this until now.
This has given me the confidence to look into upgrading the servers from the
source files to get up to 2.2.0.
Reading the README and th
us.org
[freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org] on
behalf of Phil Mayers [p.may...@imperial.ac.uk]
Sent: 24 July 2012 17:13
To: freeradius-users@lists.freeradius.org
Subject: Re: Certificate validation checkbox - windows 7 wired
On 24/07/12 16:47, Morris, Andi
Hi all,
I'm getting an odd problem where even when my clients are configured not to
validate the server certificate (test environment at the mo) on their wired
connections they are failing to authenticate on one freeradius server but
getting access-accept on another.
Debug output shows the f
Thanks, but this is connected with a wire.
I've since found a complete version of eap.conf on the freeradiusd wiki which
has helped with all the extra variables required. My server was preconfigured
and lots of the extra options had been removed. Still not completely working,
but I'm a little
OK thanks. I'm still not sure why I'm getting rejected despite not having the
validate server box ticked on my windows client though.
Cheers,
Andi
-Original Message-
From: freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org
[mailto:freeradius-users-bounces+amorris=ca
Cheers all,
Alan, the log I sent was taken from a putty log, so it's likely had some
windows tampering. The linux files have only been edited in vi.
The information given by Prateek has helped me sort out the pem file issue, but
I'm still getting rejected clients with the certificate compatibil
+amorris=cardiffmet.ac...@lists.freeradius.org
[mailto:freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org]
On Behalf Of Fajar A. Nugraha
Sent: 08 June 2012 10:10
To: FreeRadius users mailing list
Subject: Re: another shared secret problem
On Thu, Jun 7, 2012 at 7:36 PM, Morris
[mailto:freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org]
On Behalf Of Morris, Andi
Sent: 24 April 2012 14:03
To: FreeRadius users mailing list
Subject: RE: falling back to local auth and not ads
Thanks Alan,
I've looked further into the documentation of the pre-build package, and a
Thanks Alan,
I've looked further into the documentation of the pre-build package, and as far
as I can tell that entry is required, so that non-EAP requests still get
accepted, but the device gets put into the captive-portal. I will seek further
clarification on this through them directly.
Than
radius.org
[mailto:freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: 24 April 2012 12:41
To: FreeRadius users mailing list
Subject: Re: falling back to local auth and not ads
Morris, Andi wrote:
> Great website! I've been through all the steps on
Re: falling back to local auth and not ads
On Tue, Apr 24, 2012 at 09:24:42AM +, Morris, Andi wrote:
> My freeradius server seems to be falling back to local authentication
> rather than piping it out to our ADS server. If I create a local user
> on the radius box authentication is suc
orris=cardiffmet.ac...@lists.freeradius.org]
On Behalf Of Morris, Andi
Sent: 03 April 2012 16:46
To: FreeRadius users mailing list
Subject: RE: Windows 7 prompting several times
Apologies for keeping this going on the freeradius list when it is nothing to
do with it, but has anyone seen this behavio
Apologies for keeping this going on the freeradius list when it is nothing to
do with it, but has anyone seen this behaviour on anything but a Windows
supplicant? I'm trying to debug whether it's a supplicant or NAS issue.
As Alan has said, this is not a freeradius issue. I see the same sympto
Hi Ricardo,
Sorry it was a brief answer but I'm also unsure of where to turn next with
this, especially as you are seeing the same issue with different network
hardware.
Cheers,
Andi
-Original Message-
From: freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org
[mailto
This ties in with what I was saying, that the NAS (switch/access point) is
asking the supplicant for the password several times, before finally receiving
the user's entry and sending it onto the radius to be accepted or denied,
whichever the case may be.
I still think the problem is supplicant/
Hi Ricardo,
I will be very interested in your findings should you resolve this. I stopped
looking down the freeradius route for this particular problem as I found it was
also happening on a network that we authenticate using Microsoft IAS, but still
using Cisco hardware, therefore ruling out fr
Hi Ricardo,
I am still yet to find a solution, however I have sent logs to Microsoft as
they requested and they suggested that the problem was with the Cisco switch
asking for the credentials several times, rather than it being the Windows
supplicant, or freeradius being the problem.
Are you us
Cheers Alan, I'll investigate that. I don't know why accounting wouldn't be
turned on as I didn't set this server up initially.
Andi
-Original Message-
From: freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org
[mailto:freeradius-users-bounces+amorris=cardiffmet.ac...
I'm trying to trace an access attempt that occurred today so that I can
categorically say to a user that you were successfully connected to our
network, or not, whatever the case maybe. However I'm struggling to create a
chain of events by going through the logs.
I can see by grepping the logs
On Mon, Mar 05, 2012 at 05:36:24PM +, Phil Mayers wrote:
> On 05/03/12 16:16, Morris, Andi wrote:
> >Does anyone else get a problem with Windows 7 clients prompting for
> >the radius credentials 2 or 3 times before finally accepting them? No
> >errors are shown on the radiu
d of contact at Microsoft to open a bug, so I believe you
are stuck with those issues :S
On 12-03-05 11:16 AM, Morris, Andi wrote:
> Hi all,
>
> Apologies for being slightly off topic.
>
> Does anyone else get a problem with Windows 7 clients prompting for
> the radius credentials
Hi all,
Apologies for being slightly off topic.
Does anyone else get a problem with Windows 7 clients prompting for the radius
credentials 2 or 3 times before finally accepting them? No errors are shown on
the radius side, and I've read that this is a problem with the operating
system, but wond
diffmet.ac...@lists.freeradius.org
[mailto:freeradius-users-bounces+amorris=cardiffmet.ac...@lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: 17 February 2012 16:11
To: FreeRadius users mailing list
Subject: Re: WISPr-Redirection-URL with Cisco 3550 switch
Morris, Andi wrote:
> I would like to have t
Hi all,
I would like to have the ability to redirect a user's start page when they are
first authenticated via radius if possible, or at least each time the user's
computer is turned on. I do want them to be able to access other sites, it is
just the homepage I'd like to intercept, so it is not
Retry attribute
On 02/16/2012 09:35 AM, Morris, Andi wrote:
> Hi all,
>
> I'm trying to configure my freeradius server to prompt the user to
> retype their credentials if they mistype the username or password so
> that they can be authenticated via dot1x.
Does your NAS suppor
Hi all,
I'm trying to configure my freeradius server to prompt the user to retype their
credentials if they mistype the username or password so that they can be
authenticated via dot1x.
I've checked my virtual server post-auth and found:
post-auth {
exec
packetfence
Post-
29 matches
Mail list logo
