RE: RE: Help with chap

2013-05-23 Thread Franks Andy (RLZ) IT Systems Engineer
=sath.nhs...@lists.freeradius.org] On Behalf Of Matthias Nagel Sent: 21 May 2013 23:23 To: freeradius-users@lists.freeradius.org Subject: AW: RE: Help with chap Hello, actually this behaviour is totally correct. The switch tries to authenticate a client, when the switch learns the clients MAC

RE: Help with chap

2013-05-21 Thread Franks Andy (RLZ) IT Systems Engineer
DeKok Sent: 21 May 2013 00:21 To: FreeRadius users mailing list Subject: Re: Help with chap Franks Andy (RLZ) IT Systems Engineer wrote: Thanks for the help. Anecdotally, before I get into serious discovery, I've been running the freeradius process in extra debugging mode -xx. I'd read

Re: Help with chap

2013-05-21 Thread Phil Mayers
On 05/21/2013 07:55 AM, Franks Andy (RLZ) IT Systems Engineer wrote: Can I just use the authorize section to set the password to be the same as the username, i.e. the mac address, after checking some basics like whether the user exists in ldap and perhaps the useraccountcontrol value, then in

RE: Help with chap

2013-05-21 Thread Franks Andy (RLZ) IT Systems Engineer
] On Behalf Of Phil Mayers Sent: 21 May 2013 08:06 To: freeradius-users@lists.freeradius.org Subject: Re: Help with chap On 05/21/2013 07:55 AM, Franks Andy (RLZ) IT Systems Engineer wrote: Can I just use the authorize section to set the password to be the same as the username, i.e. the mac address

RE: Help with chap

2013-05-21 Thread Franks Andy (RLZ) IT Systems Engineer
- From: freeradius-users-bounces+andy.franks=sath.nhs...@lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Franks Andy (RLZ) IT Systems Engineer Sent: 21 May 2013 22:27 To: FreeRadius users mailing list Subject: RE: Help with chap

AW: RE: Help with chap

2013-05-21 Thread Matthias Nagel
-bounces+andy.franks=sath.nhs...@lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Franks Andy (RLZ) IT Systems Engineer Sent: 21 May 2013 22:27 To: FreeRadius users mailing list Subject: RE: Help with chap Thanks Phil. I'll keep

Re: Help with chap

2013-05-20 Thread Alan DeKok
Franks Andy (RLZ) IT Systems Engineer wrote: Thanks Alan, It takes literary a second or so for a single client auth, but problems arise with multiple clients. I'll reset a card on the switch and capture the logs and see what's happening. Nothing as far as I remember pointed towards the

RE: Help with chap

2013-05-20 Thread Franks Andy (RLZ) IT Systems Engineer
- From: freeradius-users-bounces+andy.franks=sath.nhs...@lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Alan DeKok Sent: 20 May 2013 14:01 To: FreeRadius users mailing list Subject: Re: Help with chap Franks Andy (RLZ) IT Systems

Re: Help with chap

2013-05-20 Thread Alan DeKok
Franks Andy (RLZ) IT Systems Engineer wrote: Thanks for the help. Anecdotally, before I get into serious discovery, I've been running the freeradius process in extra debugging mode -xx. I'd read somewhere that -X makes it run single threaded, but along those lines of thinking I wondered if

Re: Help with chap

2013-05-18 Thread Alan DeKok
Franks Andy (RLZ) IT Systems Engineer wrote: ... It worked brilliantly in testing, but come production, when i reboot the switch or clear the authentication on the ports it can take up to ten minutes for 10-15 clients to authenticate, That's bad. 10-15 clients should be done in a second or

Re: Help with chap

2013-05-18 Thread Matthias Nagel
Hello, I've recently got into mac based auth on a procurve 5406. [...] [...] when i reboot the switch or clear the authentication on the ports it can take up to ten minutes for 10-15 clients to authenticate, simply because the nas (i guess) gets overwhelmed and consequently I see loads of

RE: Help with chap

2013-05-18 Thread Franks Andy (RLZ) IT Systems Engineer
@lists.freeradiu s.org] On Behalf Of Alan DeKok Sent: 18 May 2013 13:37 To: FreeRadius users mailing list Subject: Re: Help with chap Franks Andy (RLZ) IT Systems Engineer wrote: ... It worked brilliantly in testing, but come production, when i reboot the switch or clear the authentication