Re: rlm_ldap: object not found

HI, Change the filter configuration in ldap section of radiusd.conf to the following: filter = (cn=%{Stripped-User-Name:-%{User-Name}}) -Sayantan On Wed, Apr 5, 2006 at 1:53 am, in message [EMAIL PROTECTED], Marc Delisle [EMAIL PROTECTED] wrote: Hi, thanks to those who answered me for

Re: rlm_ldap: could not start TLS

Hi, Please make sure that you have entered the DNS name of your ldap serer(eDirectory) in the ldap section of radiusd.conf. -Sayantan. On Sat, Apr 1, 2006 at 6:58 pm, in message [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: Hi, I'm trying to make freeradius 1.1.0 contact a LDAP

Re: Error -1635

Hi , Which authentication protocol are you using? If you are using PAP and want to authenticate against eDirectory there is no need to use Universal Password. However if you plan to use authentication methods like CHAP, EAP-MD5, PEAP-MSCHApv2 you will have to use Universal Password. The error

Re: PEAP Machine Auth without NTLM or LDAP

Thanks for the replies. Regards, -Sayantan On Mon, Jan 30, 2006 at 6:55 pm, in message [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: Sayantan Bhowmick wrote: HI, I am trying a similar setup with some variation. If there is no PDC, there's no domain, so there *is* no machine account

Re: PEAP Machine Auth without NTLM or LDAP

HI, I am trying a similar setup with some variation. If there is no PDC, there's no domain, so there *is* no machine account. I have setup a Samba PDC and am using Novell eDirectory as the back-end store. In this scenario is it possible to perform PEAP-MSCHAPv2 machine authentication by

PEAP-MSCHAPv2 authentication failure

Hi , I am trying to do PEAP MSCHAPv2 authentication. I am using FreeRADIUS version 1.1.0 on Suse 9.0 and WinXP as the Suplicant. When I select Automatically use my Windows Logon name and password (and domain if any) in the network properties, WinXP tries to login as domain-name\\user-name. I

Re: PEAP-MSCHAPv2 authentication failure

Thanks. That helps. It is working now. Regards, -Sayantan. On Mon, Jan 23, 2006 at 5:45 pm, in message [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: Sayantan Bhowmick wrote: Hi , I am trying to do PEAP MSCHAPv2 authentication. I am using FreeRADIUS version 1.1.0 on Suse 9.0 and WinXP

Re: LEAP

Hi , Please use the latest version of FreeRADIUS (1.1.0). This includes the the eDirectory integration and you should be able to set up LEAP authentication with it. Please refer to the following links which contain documentation on eDirectory integration with FreeRADIUS.

Re: Authentication succeeds even with incorrect shared secret.

it is the clients job to verify the server's reply. Am I correct? Thanks and Regards, -Sayantan. On Thu, Sep 1, 2005 at 7:49 pm, in message [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: Hi, Sayantan Bhowmick schrieb: I am trying to authenticate users using CHAP authentication. (snipp) users

Re: TLS/SSL to eDirectory

Hi, Please check the certificate used by the LDAP server using iManager. In case the server is using SSL CERTIFICATE DNS(by default this is what is used) you need to enter hostname of the LDAP server in the server field below and not the IP address. ldap ldap1 { server =

Authentication succeeds even with incorrect shared secret.

Hi, I am using FreeRADIUS version 1.0.2 and I am trying to authenticate users using CHAP authentication. Everything works and authentication goes through except that users are authenticated successfully( provided userid and password id correct) irrespective of what is entered for the shared

Re: Multiple Root Contexts

Hi, You could try using Autz-Type. It is documented in the file Autz-Type in the FreeRADIUS documentation. -Sayantan. Kolbjørn Barmen [EMAIL PROTECTED] 07/22/05 4:37 PM On Wed, 20 Jul 2005, Mearl Danner wrote: Might try downloading this and reading. It's very helpful.

re: Restricting Access by Group Membership

Hi, To allow access the (regardless of password) you can set Auth-Type := Accept (See FreeRADIUS FAQ 5.5). I am not sure that is what you want though, as in this case irrespective of what password a user enters he will be granted access. You can use the configuration suggested by Dusty Doris.

re: Searching Subcontexts in eDir

Hi, If you are getting a reply with ldapsearch then you should be able to authenticate as that user. One of the possible causes of the -669 error is an invalid password. So check the password and make sure you are able to log in as that user. -Sayantan [EMAIL PROTECTED] 07/20/05 3:00 AM I

Re: edir + cert problem

Hi, Make sure that the server name you specify in the LDAP module section matches with the CN in the certificate used by the eDirectory LDAP server. e.g if your LDAP server is using SSL CERT DNS, write the hostname as the server name. If you are using SSL CERT IP, write the IP address of the

Re: eDirectory Issues

Hi, Comments inlined. On Tue, 2005-07-12 at 11:15 -0700, [EMAIL PROTECTED] wrote: I appologize in advance, but I am new to FreeRADIUS and RADIUS in general. Here is my setup: - Server with FreeRADIUS 1.0.4 --with-edir on FreeBSD 4.11 - Server with NetWare 6.5.4 Here is what I am

Re: Freeradius and eDirectory

Hi, FreeRADIUS is trying to do SYSTEM authentication. For SYSTEM authentication to work you need to have a Unix user with the same userid found in the request(in this case jmuser). So let me know which authentication type you want to use. If you want to use LDAP to authenticate your user one

Re: eDirectory backend with FreeRadius

Hi, To be able to read Universal Password from eDirectory you will HAVE TO have a secure connection between FreeRADIUS and eDirectory. That willtake care of the rlm_ldap: Error reading Universal Password.Return Code = 80 problem. So you have to setup up the TLS certificates properly in

Re: Authenticate to eDirectory

Hi, The documentation in: http://www.novell.com/documentation/edir_radius/index.html gives a list of dependencies for the freeRADIUS rpm. If you install these rpms(through yast) you should be able to install the freeradius rpm at:

Proxy EAP-TTLS inner auth type

Hi, I was tryin to figure out if it is possible to proxy only the inner auth type of EAP-TTLS. The only information I could find on this is: http://lists.cistron.nl/pipermail/freeradius-users/2005-March/042098.html This talks about PEAP. Is the same possible for EAP-TTLS? Also i could not

Re: Proxy EAP-TTLS inner auth type

Thanks for your help Alan. I will try this setup. -Sayantan [EMAIL PROTECTED] 06/02/05 11:12 PM Sayantan Bhowmick [EMAIL PROTECTED] wrote: This talks about PEAP. Is the same possible for EAP-TTLS? Yes. Also i could not find any information about the attribute

Re: Authenticate to eDirectory

Hi, One possible reason could be that the user you are building the radius server as does not have the appropriate file system permissions to create files within the /usr/local directory. Try running make install as root user. You can also get the FreeRADIUS RPMs for SLES 8 or SLES 9

Re: Authenticate to eDirectory

Hi, This will work with eDirectory 8.7.1 onwards with eDirectory running on any eDirectory supported platform. -Sayantan [EMAIL PROTECTED] 06/02/05 7:16 PM Does this only work with versions of eDirectory running on Linux or will it work with eDirectory on Netware 6.5 Daniel D. Hesse

Re: Authenticate to eDirectory

Hi, FreeRADIUS 1.0.2 has been integrated with eDirectory to support wireless authentication. See (http://www.novell.com/documentation/edir_radius/index.html) You can also use FreeRADIUS 0.9.3. That supports LDAP authentication to eDirectory. In this case you could try EAP-TTLS + PAP.

Re: Wireless Authentication

Hi, Try http://tldp.org/HOWTO/html_single/8021X-HOWTO/ . -Sayantan [EMAIL PROTECTED] 05/29/05 10:32 PM Does anyone have any links or on-line examples that show how to use FreeRadius to do 802.1x authentication? Thanks Bob Ross - List info/subscribe/unsubscribe? See

Re: token card strong authentication

Hi I am currently doing some research into how I can make FreeRADIUS support other token card methods. Novell eDirectory already provides

Re: WinXP 802.1X/Radius/eDir (LDAP)

Hi, FreeRADIUS is trying to do LDAP authentication and not PEAP authentication. This is probably because you have not configured the peap module. Please read eap.conf on how to configure the peap module. Rest of the comments inline. On Wed, 2005-05-18 at 16:49 -0500, Matt McFarlane wrote:

Re: (no subject)

HI Can you run the server in debug mode and post the messages that you get. -Sayantan.[EMAIL PROTECTED] 04/19/05 5:52 pm HiI have a very strange problem.I authenticate a user agains a Novell 6 Server which is not theproblem.But I need some

Re: Using Disallow anonymous simple bind with FreeRadius

Hi, I did a bit more research on this and here is what happens. When ldap module is configured with start_tls = yes it calls ldap_start_tls_s() function. With Disallow anonymous simple bind this call fails and as such the error rlm_ldap: could not start TLS Inappropriate authentication is

Re: Using Disallow anonymous simple bind with FreeRadius

Hi, The Disallow anonymous simple bind option Prevents users from logging in to the LDAP server without specifying a username and password. In case of FreeRADIUS the ldap module does not perform an anonymous bind so turning on this option should not create any problems. Could you post

Re: With-edir in 1.02 / Novell eDirectory

Hi, From: Dennis Comeaux [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: Re: With-edir in 1.02 / Novell eDirectory Reply-To: freeradius-users@lists.freeradius.org Believe it or not, I have found the information. The i-Manager plug in is the file radius_npm.tar.gz.

Re: freeRadius on SLES 9.0 - installation issues

I am trying to install/compile freeRADIUS 1.0.1 version on SUSE Ent 9.0. without success. This is what I get when I do ./configure make . ... .. In file included from x99_rlm.c:54: x99.h:26:42: openssl/des.h: No such file or directory In file included from x99_rlm.c:54: x99.h:146: error:

RE: RE: Fwd: Re: Wireless authentication via LDAP and PEAP

] [mailto:[EMAIL PROTECTED] On Behalf Of Sayantan Bhowmick Sent: Monday, 13 September 2004 7:30 PM To: [EMAIL PROTECTED] Subject: Re: RE: Fwd: Re: Wireless authentication via LDAP and PEAP CHAP. No EAP or MSCHAP yet. Novell Radius which was bundled with NMAS / Border Manager does have support

Re: Fwd: Re: Wireless authentication via LDAP and PEAP

Hi, Novell is working towards making FreeRADIUS work with eDirectory. This will allow eDirectory users to authenticate via FreeRADIUS. regards Sayantan Hmm... We can do that already. Just use EAP-TTLS/PAP and have freeradius authenticate via an LDAP bind rather than a password compare. It

Re: RE: Fwd: Re: Wireless authentication via LDAP and PEAP

. Sayantan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Friday, 10 September 2004 10:39 PM To: [EMAIL PROTECTED] Subject: Re: Fwd: Re: Wireless authentication via LDAP and PEAP Sayantan Bhowmick [EMAIL PROTECTED] wrote: Novell is working

Fwd: Re: Wireless authentication via LDAP and PEAP

Hi, Novell is working towards making FreeRADIUS work with eDirectory. This will allow eDirectory users to authenticate via FreeRADIUS. regards Sayantan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

how to specify MSCHAP users passwrod is stored in LDAP

hiplease someone tell me how someone can specify that MSCHAP password are stored in a LDAP directory.thankssayantan bhowmick

how to specify that users passwords are stored in LDAP

the file name.thanks sayantan bhowmick