Re: EAP-TLS problem

Hello Muhammad, On 18.02.2013 07:17, Muhammad Nadeem wrote: Now I want to practically test EAP-TLS with freeradius on REDHAT 5. I have configured eap.confg to use EAP-TLS. But i don't know , how to send requests to freeradius server, so that he can authenticate the user using TLS (with digital

Re: Different BaseDN for User/Group Objects in rlm_ldap

the existing ldap module and rename it to ldap2, also rename it in the module itself, otherwise FR tries to instantiate the ldap module twice), adjust there the new basedn and call it where you want in authorize section. Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http

Re: Different BaseDN for User/Group Objects in rlm_ldap

On Wednesday 09 January 2013 10:48:16 Rudolph Bott wrote: Am 2013-01-09 10:27, schrieb Tobias Hachmer: On Wednesday 09 January 2013 09:29:48 Rudolph Bott wrote: Is there is possibility to set a different basedn for group lookups OR another feasable solution (e.g. modify the filter

Re: Recommendations for a GUI front end for FreeRadius

for dialupadmin or daloradius (http://www.daloradius.com/) Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

Hello list, are there any here who have suggestions for me? Kind regards, Tobias Hachmer Am 20.07.2012 11:35, schrieb Tobias Hachmer: Hello list, I know it isn't an directly FR issue but I hope that anybody on this list have had the questions I have now. Is there a RADIUS Client

Re: RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

Thanks Alan for your respone! Am 01.08.2012 18:04, schrieb Alan DeKok: Tobias Hachmer wrote: Is there a RADIUS Client or a captive portal/ hotspot software which supports changing password via mschapv2? Likely not. This requires someone to implement it. Only commercial providers have

RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

for me. Maybe on this list is anyone who has done this before or have experience with this. Thanks in advance, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

status server: IPv6 support?

socket for status server? echo Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 67, FreeRADIUS-Stats-Server-IP-Address = 192.168.1.14, FreeRADIUS-Stats-Server-Port = 1812 | radclient [::1]:18120 status adminsecret did not work. Regards, Tobias Hachmer - List info/subscribe

How LDAP Authentication works

with the credentials from access-request packet. So, is the identity really needed for authentication or is my understanding here wrong? Please point me to the right... Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How LDAP Authentication works

search in dc=1632labor,dc=local, with filter (sAMAccountName=a160admin-hachmer) [ldap3] ldap_release_conn: Release Id: 0 [ldap3] user DN: CN=Tobias Hachmer,OU=1632User,DC=1632labor,DC=local [ldap3] (re)connect to ldaps://radiustestwdc3.1632labor.local, authentication 1 [ldap3] setting TLS

FR on RHEL

, which channel is meant? Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FR on RHEL

, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Online Users

somehow, as if I clear the connection from my NAS, it seems to do the job You have to configure the CoA virtual server or just send Packet of Disconnects, see here: http://wiki.freeradius.org/Disconnect-Messages . Maybe you have to adjust your web frontend to support this. Regards, Tobias Hachmer

Re: mySQL user wifi authentication error on freeradius

anyone tell me what i'm doing wrong? Thanks First, send the whole radiusd -X output. The relevant sql output is missing in your snippet. Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mySQL user wifi authentication error on freeradius

, then start an authentication test with radtest, radclient or your real nas with the user you defined in sql. Afterwards post the whole debug output. Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mySQL user wifi authentication error on freeradius

On 08.05.2012 16:09, xadow20 wrote: Hi! tanks for reply. Here is the debug. Please stop posting your posts three times!! Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: multiple ldap servers

it's not the authentication of the user in radius request which fails but the bind user so the ldap module wasn't able to check the user credentials! Please reread the ldap documentation if this is unclear... Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http

Re: multiple ldap servers

On 05.05.2012 10:36, Tobias Hachmer wrote: As I tried to explain before it's not the authentication of the user in radius request which fails but the bind user so the ldap module wasn't able to check the user credentials! Please reread the ldap documentation if this is unclear... Sorry, I have

Re: multiple ldap servers

Hi Jeff, On 04.05.2012 14:30, jeff donovan wrote: how can i search and alternate LDAP server for user credentials ? If the first LDAP search fails try the next server in line. Just mention only this ldap server in authenticate section: authenticate { Auth-Type LDAP { ldap1 # the ldap

Re: multiple ldap servers

correctly or send the whole radiusd -X debug output. Best regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: inexplicable Nas Not Found

, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ldap redundant-load-balance issue

Am 19.04.2012 13:44, schrieb Alan DeKok: Tobias Hachmer wrote: During FreeRADIUS performance test as described in /usr/share/doc/freeradius/performance-testing.gz I noticed that FR does for the ldap-group query above (Ldap-Group == cn=radius.users,ou=Groups,dc=test,dc=local) no load-balancing

RE: ldap redundant-load-balance issue

to the format you have mentioned. I will test it tomorrow. Thanks for this idea! Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Auth-Type Fall-Through ldap timeouts

earlier my ldap servers are available and if not skip Auth-Type LDAP or setting Auth-Type to PAP? Question 3: Are there any other opportunities to do Auth-Type PAP if Auth-Type LDAP fails? Thanks in advance, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: Auth-Type Fall-Through ldap timeouts

Am 18.04.2012 12:33, schrieb Phil Mayers: On 18/04/12 09:40, Tobias Hachmer wrote: I'm using a sql database for authorization and ldap for authentication. For fail-over reasons I want to authenticate against user-password information stored in my sql database if my ldap servers

Re: Auth-Type Fall-Through ldap timeouts

Am 18.04.2012 14:32, schrieb Alan DeKok: Tobias Hachmer wrote: Simply as a fallback, in case there is a maintanance on the network where the ldap servers are conected to. In this case we need to log on to our switches though. Hi, I want my network to keep working when I take my network

Re: Auth-Type Fall-Through ldap timeouts

Am 18.04.2012 14:36, schrieb Phil Mayers: On 18/04/12 13:16, Tobias Hachmer wrote: Ok, I configure the same users, these are about 10-15 users, which are stored in Active Directory, in the sql database. The sql database schould be used for authentication only if the ldap servers

Re: Configuring Freeradius with LDAP

://wiki.freeradius.org/search?q=ldap Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: optimize questions for unlang code

Am 06.04.2012 18:16, schrieb Brian Julin: Tobias Hachmer wrote: Q3: Is there a smarter way to reject an AD user immediately when he wants to logon to a telnet device? You could use Auth-Type subsections, but with LDAP the control flow can be a bit confusing (the statements in the block outside

optimize questions for unlang code

: Are the positions of the unlang code in the authorize section correct? Thanks in advance for any help and hints. Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

ntlm_auth ldap authorize questions

. Cleaning up request 1 ID 98 with timestamp +32 Ready to process requests. Thanks in advance for pointing me to the right direction. Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: ntlm_auth ldap authorize questions (solved)

what I've done and now it is working like a charme. Regards, Tobias Hachmer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html