Re: FreeRadius MAC address authorization (no authentication)

2008-08-10 Thread Ramot Lubis
I guess, Windows XP client has been able to communicate (EAP problem has been fixed) according to the following log. However, the client has not been authenticated because of username and password problem, but its OK since my purpose is to authenticate based on client MAC address rather than

Re: FreeRadius MAC address authorization (no authentication)

2008-08-10 Thread Alan DeKok
Ramot Lubis wrote: I guess, Windows XP client has been able to communicate (EAP problem has been fixed) according to the following log. However, the client has not been authenticated because of username and password problem, but its OK since my purpose is to authenticate based on client MAC

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Ramot Lubis
Yes, I aim not to install hotfix in Windows XP client. My main purpose is to check valid MAC address of every Wireless Device (with Windows XP SP2). Based on radiusd -X log in my previous email, I tried to conclude that even in Authorization phase, calling-station-id has been validated to be

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Alan DeKok
Ramot Lubis wrote: Yes, I aim not to install hotfix in Windows XP client. Good luck. My main purpose is to check valid MAC address of every Wireless Device (with Windows XP SP2). Based on radiusd -X log in my previous email, I tried to conclude that even in Authorization phase,

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread A . L . M . Buxey
Hi, Hi, I'm trying to implement FreeRadius to authenticate Wireless CLient based on MAC address only, unfortunately all my wireless client using EAP/TLS (Windows XP SP2) . I found that tutorials and doc are not leading me to the right direction. Besides, I will not burden my Windows XP SP2

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Ramot Lubis
Thanks for all advices. So, I decide to change my course. Now, I am using default radiusd.conf. I have installed hotfix for supplicant Windows XP SP2. I have also installed Certificate on supplicant based. Btw, I am using Linksys WAP4400N as my NAS access point now I still got this clueless log

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Stefan Winter
Hi, now I still got this clueless log messages. Please, help me. rlm_checkval: Item Name: Calling-Station-Id, Value: 00-21-00-0B-68-E3 rlm_checkval: Value Name: Calling-Station-Id, Value: 00-21-00-0B-68-E3 ++[checkval] returns ok rlm_pap: WARNING! No known good password found for the user.

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Alan DeKok
Ramot Lubis wrote: thanks Stefan. it's already uncommented by default. I didn't change any default value except the SQL authorization. I wonder what might be the problem? You haven't installed the OpenSSL libraries and header files. As a result, FreeRADIUS wasn't built with support for

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Ramot Lubis
Thanks Alan, it was my mistake. I have fixed the openssl trouble. Now PEAP is running. But I still have problem with authentication. I put the log here. Please, tell me what my next mistake is. rad_recv: Access-Request packet from host 10.0.0.2 port 1027, id=76, length=189 User-Name =

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Lech Karol Pawłaszek
Ramot Lubis wrote: Thanks Alan, it was my mistake. I have fixed the openssl trouble. Now PEAP is running. But I still have problem with authentication. I put the log here. Please, tell me what my next mistake is. [...] Sending Access-Challenge of id 76 to 10.0.0.2 port 1027 EAP-Message

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Yawar Hadi
hi siply go to raddb directory and explore users dictionery file... 2:see any example of user with password in that file 3:similerly add a user with password. and now try it. it will work.. On Fri, Aug 8, 2008 at 2:02 PM, Lech Karol Pawłaszek [EMAIL PROTECTED] wrote: Ramot Lubis wrote:

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Ramot Lubis
As you guess, now I am stucked in EAP problem as described in http://deployingradius.com/documents/configuration/eap-problems.html Problem: A lot of text scrolls by, the server sends an Access-Challenge, and then prints out a message saying Cleaning up request After that, nothing more

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Alan DeKok
Ramot Lubis wrote: Problem: A lot of text scrolls by, the server sends an Access-Challenge, and then prints out a message saying Cleaning up request After that, nothing more happens. Which OS are you using as a client? Are you using the default certificates that are created with the

Re: FreeRadius MAC address authorization (no authentication)

2008-08-08 Thread Ramot Lubis
Yes, I am using Windows XP as client. I have followed these steps: 1. Creating production certificate as described in http://deployingradius.com/documents/configuration/certificates.html 2. update hotfix as described in http://support.microsoft.com/kb/885453/en-us 3. Install certificate ca.der

FreeRadius MAC address authorization (no authentication)

2008-08-07 Thread Ramot Lubis
Hi, I'm trying to implement FreeRadius to authenticate Wireless CLient based on MAC address only, unfortunately all my wireless client using EAP/TLS (Windows XP SP2) . I found that tutorials and doc are not leading me to the right direction. Besides, I will not burden my Windows XP SP2 client to

AW: MAC address authorization

2005-06-11 Thread Andre Herkenrath
) Regards André Von: Vince Nguyen [mailto:[EMAIL PROTECTED] Gesendet: Samstag, 11. Juni 2005 01:16 An: freeradius-users@lists.freeradius.org Betreff: MAC address authorization Please help, I've installed Freeradius 0.9.3-1.1 to my Redhat Fedora Core 1 box

MAC address authorization

2005-06-10 Thread Vince Nguyen
Title: MAC address authorization Please help, I've installed Freeradius 0.9.3-1.1 to my Redhat Fedora Core 1 box, and would like to use it in conjunction with my Cisco AP1200 to simply allow authorized and registered MAC address to be on the network. Has someone done this and could show