Re: PAP questions.

2006-09-13 Thread James Wakefield
Keith Woodworth wrote: My users file: DEFAULT Service-Type = Framed-User, Framed-Protocol = PPP, Framed-Routing = None, Framed-IP-Netmask = 255.255.255.255, Framed-Compression = Van-Jacobsen-TCP-IP, Framed-MTU = 1500 Using it like this works. Bu

Re: PAP questions.

2006-09-13 Thread Keith Woodworth
On Sat, 9 Sep 2006, Keith Woodworth wrote: |->|-> |->|->> And while Radius seems to send an Access-Accept, the dialup user gets an |->|->> error 691 password invalid. |->|-> |->|-> Because you're not sending the same reply attributes as in the |->|->previous example. Fix that. |->|-> |->|->> Aga

Re: PAP questions.

2006-09-09 Thread Alan DeKok
Keith Woodworth <[EMAIL PROTECTED]> wrote: > Still get password rejected on client side though. At least one of your configurations worked. Look at those replies, and see how they differ from the ones that don't work. If the replies are identical, then the NAS behavior will be identical.

Re: PAP questions.

2006-09-09 Thread Keith Woodworth
|-> |->> And while Radius seems to send an Access-Accept, the dialup user gets an |->> error 691 password invalid. |-> |-> Because you're not sending the same reply attributes as in the |->previous example. Fix that. |-> |->> Again I get Access-Accept, but a 691 password error on the client side.

Re: PAP questions.

2006-09-09 Thread Keith Woodworth
On Sat, 9 Sep 2006, Alan DeKok wrote: |->Keith Woodworth <[EMAIL PROTECTED]> wrote: |->> Anyway here is the error: |->> |->> radiusd.conf: "PAP" modules aren't allowed in 'authorize' sections -- they |->> have no such method. |-> |-> That's in 1.1.3. In 2.0, that is allowed. That error was from

Re: PAP questions.

2006-09-09 Thread Alan DeKok
Keith Woodworth <[EMAIL PROTECTED]> wrote: > Anyway here is the error: > > radiusd.conf: "PAP" modules aren't allowed in 'authorize' sections -- they > have no such method. That's in 1.1.3. In 2.0, that is allowed. > Would it be advisable to upgrade at this point or wait till its official?

Re: PAP questions.

2006-09-08 Thread Phil Mayers
So I guess I missed something completely or its not possible to have a username ONLY listed in Radcheck with Crypt-Password and authenticate that user? Does the username really need to be be in both the UserGroup table and Radcheck table for a crypt-password method to work? No, it's got nothi

Re: PAP questions.

2006-09-07 Thread Keith Woodworth
On Tue, 22 Aug 2006, Alan DeKok wrote: |->Keith Woodworth <[EMAIL PROTECTED]> wrote: |->> One of the things I did try was add PAP to the authorize section, but |->> radius failed to start when I did that. |-> |-> And the error message was...? Had to put this project a side for the last 2 weeks.

Re: PAP questions.

2006-08-22 Thread Alan DeKok
Keith Woodworth <[EMAIL PROTECTED]> wrote: > One of the things I did try was add PAP to the authorize section, but > radius failed to start when I did that. And the error message was...? > Deployingradius.com did say there were very few circumstances to set > Auth-Type, but not which ones. Gues

Re: PAP questions.

2006-08-22 Thread Keith Woodworth
On Tue, 22 Aug 2006, Phil Mayers wrote: |->Keith Woodworth wrote: |->> |->> Been trying to do PAP authentication with the crypt'd password stored in |->> mysql. We, unfortunately have to do PAP. |->> |->> This has been done for the most part and works, but I had to go against |->> what deployingra

Re: PAP questions.

2006-08-22 Thread Phil Mayers
Keith Woodworth wrote: Try this again, I hope someone can answer these or at least shed some light. Been trying to do PAP authentication with the crypt'd password stored in mysql. We, unfortunately have to do PAP. This has been done for the most part and works, but I had to go against what depl

PAP questions.

2006-08-22 Thread Keith Woodworth
Try this again, I hope someone can answer these or at least shed some light. Been trying to do PAP authentication with the crypt'd password stored in mysql. We, unfortunately have to do PAP. This has been done for the most part and works, but I had to go against what deployingradius.com said w/r