Re: Login to Cisco devices through freeradius

2009-03-20 Thread Alan DeKok
Bruno Noronha wrote: I issued chmod 777 * in every directory related to freeradius. Don't do that. Ever. The server comes with a default configuration that WORKS. The only reason that it doesn't have permission to read those files is because YOU changed the configuration so that the

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Bruno Noronha
Sorry but what you said doesn't make any sense to me. The default config didn't work. How can you explain the same alarms even after changing the permissions to everyone? The message containing permission denied remains..It's strange, unless I have forgotten to change permission of a directory. I

Re: Login to Cisco devices through freeradius

2009-03-20 Thread tnt
Sorry but what you said doesn't make any sense to me. The default config didn't work. How can you explain the same alarms even after changing the permissions to everyone? The message containing permission denied remains..It's strange, unless I have forgotten to change permission of a directory. I

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Bruno Noronha
I don't think so.I'm using SUSE 11.0, is there any problem with that? 2009/3/20 t...@kalik.net Sorry but what you said doesn't make any sense to me. The default config didn't work. How can you explain the same alarms even after changing the permissions to everyone? The message containing

Re: Login to Cisco devices through freeradius

2009-03-20 Thread sollunga
Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- View this message in context: http://www.nabble.com/Login-to-Cisco-devices-through-freeradius-tp22610096p22619667.html Sent from the FreeRadius - User mailing list archive at Nabble.com

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Bruno Noronha
in context: http://www.nabble.com/Login-to-Cisco-devices-through-freeradius-tp22610096p22619667.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http

Re: Login to Cisco devices through freeradius

2009-03-20 Thread A . L . M . Buxey
Hi, There is nothing related to eap to comment out in these files... Should I create a certificate? Is it compulsory? hang on - do you actually HAVE any EAP cert/CA files that you are referencing in eap.conf? read eap.conf - see what files it is trying to read (cert, CA , pkcs12, random,

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Alan DeKok
Bruno Noronha wrote: Sorry but what you said doesn't make any sense to me. The default config didn't work. shrug Then something on *your* system is preventing it from working. How can you explain the same alarms even after changing the permissions to everyone? I don't. It's *your*

RE: Login to Cisco devices through freeradius

2009-03-20 Thread Leighton Man
There is nothing related to eap to comment out in these files... Should I create a certificate? Is it compulsory? Hi, I've just struggled through all this so it's nice to try and help. Always take note of the FIRST error message in the debug. The

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Bruno Noronha
Dawg, I have all default installation files. I read eap.conf and it seems to be okay, I either changed any file, including adding new users! Everything remains the same... I know that chmod 777 is not recommended. I did it just to make sure that what I have isn't a permission issue. Here is the

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Alan DeKok
Bruno Noronha wrote: Reading this tutorial, http://wiki.freeradius.org/Cisco, it seems to be so simple! Is there any possibility of OS incompatibity with freeRADIUS? No. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Bruno Noronha
Leighton, tks for help me. I agree with you, the messages are a little bit confusing for me too. That's what I thought, problems wich permission. That's why I did chmod 777, even knowing that it's not recommended. After doing this, the issue persist...I'm using the newest available version of

Re: Login to Cisco devices through freeradius

2009-03-20 Thread A . L . M . Buxey
Hi, RADIUS:/etc/raddb/certs # ls -l total 104 -rwxrwxrwx 1 root root4210 Mar 17 10:49 01.pem -rwxrwxrwx 1 root root4441 Nov 19 14:20 Makefile -rwxrwxrwx 1 root root5343 Nov 19 14:20 README -rwxrwxrwx 1 root radiusd 462 Nov 19 14:20 bootstrap -rwxrwxrwx 1 root radiusd 1288 Nov

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Alan DeKok
Bruno Noronha wrote: Leighton, tks for help me. I agree with you, the messages are a little bit confusing for me too. That's what I thought, problems wich permission. That's why I did chmod 777, even knowing that it's not recommended. After doing this, the issue persist...I'm using the newest

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Bruno Noronha
Thanks man, this commands solved my problem!! Bruno 2009/3/20 a.l.m.bu...@lboro.ac.uk Hi, RADIUS:/etc/raddb/certs # ls -l total 104 -rwxrwxrwx 1 root root4210 Mar 17 10:49 01.pem -rwxrwxrwx 1 root root4441 Nov 19 14:20 Makefile -rwxrwxrwx 1 root root5343 Nov 19 14:20

Re: Login to Cisco devices through freeradius

2009-03-20 Thread Andrew Hood
a.l.m.bu...@lboro.ac.uk wrote: chown -R radiusd:radiusd /etc/raddb chmod -R 755 /etc/raddb/certs Yuck - marking data files executable. I'd start with: find /etc/raddb/certs -type d -exec chmod 755 {} \; find /etc/raddb/certs \! -type d -exec chmod 644 {} \; and fix any program file that

Login to Cisco devices through freeradius

2009-03-19 Thread Bruno Noronha
Buddies, I don't know if I can issue this question here, but I need your help to implement RADIUS solution... I think that my objective is quite simple in comparison with RADIUS most variables purposes. I must login to my network devices through RADIUS server,

Re: Login to Cisco devices through freeradius

2009-03-19 Thread tnt
After installing freeradius, I couldn't start it. Checking radius.log I saw the following errors: Wed Mar 18 15:31:28 2009 : Error: rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied Wed Mar 18 15:31:28 2009 : Error: rlm_eap_tls: Error reading Trusted root CA

Re: Login to Cisco devices through freeradius

2009-03-19 Thread Bruno Noronha
I issued chmod 777 * in every directory related to freeradius. There is no freeradius user in users command output! No success until now... tks! Bruno 2009/3/19 t...@kalik.net After installing freeradius, I couldn't start it. Checking radius.log I saw the following errors: Wed