Checking Reply Attributes (How?)

2004-07-25 Thread PedroRibeiro \(B\)
What syntax should I use to verify if there is some attribute is already in the reply list ? Is there any specific syntax to check attributes of type octets ? Examples of what I wanted to do ... This way MS-MPPE-Recv-Key isn't found because he is in the reply list, not in the check list ...

Re[2]: Passing internal attributes between modules

2004-07-24 Thread PedroRibeiro \(B\)
to the request list ? Thanks. Friday, July 23, 2004, 9:37:36 PM, you wrote: AD PedroRibeiro (B) [EMAIL PROTECTED] wrote: Is there any way of passing values in internal attributes between modules while processing the authorization (set an attribute when process the users file to be used in sql

Passing internal attributes between modules

2004-07-23 Thread PedroRibeiro \(B\)
Is there any way of passing values in internal attributes between modules while processing the authorization (set an attribute when process the users file to be used in sql authorization) ? TIA. -- Best regards, PedroRibeiro mailto:[EMAIL PROTECTED] - List

EAP Inner/Outer attributes matching! (REPOST) - Avoid identity spoofing in EAP authentications!!!

2004-07-22 Thread PedroRibeiro \(B\)
Sorry for the repost but this problems are forcing-me to leave our FreeRADIUS open to stealing of identity privileges ... PB I'm trying to instruct our freeradius to check some inconsistences PB between inner and outer parameters involved in EAP-TTLS and EAP-PEAP PB authentication of wireless

Re[2]: EAP Inner/Outer attributes matching! (REPOST) - Avoid identity spoofing in EAP authentications!!!

2004-07-22 Thread PedroRibeiro \(B\)
Let-me try to explain better my problem ... Here goes two message lists I've seen authenticating users: ### EAP-TTLS (SecureW2 V2.1.0) with PAP rad_recv: Access-Request packet from host 10.2.64.101:21645, id=35, length=214 Sending Access-Challenge of id 35 to

EAP Inner/Outer attributes checking

2004-07-20 Thread PedroRibeiro \(B\)
I'm trying to instruct our freeradius to check some inconsistences between inner and outer parameters involved in EAP-TTLS and EAP-PEAP authentication of wireless users. If the return attributes are based in outer identity the system can be fooled by using a valid inner identity and obtaining