Re: freeradius = MS IAS passthrough

2007-05-17 Thread Ian Savoy
So, I made sure all of our settings were configured correctly in proxy.conf and in clients.conf. the way we tested, was i had the IAS server set the reply message to yes like John mentioned. This helped a great deal. What's happening, is when i use the radclient to auth DIRECTLY to the IAS

Re: freeradius = MS IAS passthrough

2007-05-17 Thread Alan DeKok
Ian Savoy wrote: What's happening, is when i use the radclient to auth DIRECTLY to the IAS server, i get an Access-Accept response. However, when i use the proxy, they are receiving an encrypted password...either that or an incorrectly encrypted password that cannot be decrypted by their

Re: freeradius = MS IAS passthrough

2007-05-16 Thread Ian Savoy
by the way, we are dealing with freeradius 1.1.3. Ian Savoy wrote: Does anyone have any specific tweaks to get MS IAS and freeradius talking? We're trying to share resources with another isp in the area - their IAS server needs to be able to auth against our freeradius server, and visa

Re: freeradius = MS IAS passthrough

2007-05-16 Thread Jory Privett
Realms Jory Privett WCCS - Original Message - From: Ian Savoy [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Wednesday, May 16, 2007 3:29 PM Subject: Re: freeradius = MS IAS passthrough by the way, we are dealing with freeradius 1.1.3

Re: freeradius = MS IAS passthrough

2007-05-16 Thread Ian Savoy
:29 PM Subject: Re: freeradius = MS IAS passthrough by the way, we are dealing with freeradius 1.1.3. Ian Savoy wrote: Does anyone have any specific tweaks to get MS IAS and freeradius talking? We're trying to share resources with another isp in the area - their IAS server needs

Re: freeradius = MS IAS passthrough

2007-05-16 Thread Jory Privett
] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Wednesday, May 16, 2007 3:37 PM Subject: Re: freeradius = MS IAS passthrough Ya, we have realms setup, however we're failing to auth against each other. Jory Privett wrote: Realms Jory Privett WCCS

Re: freeradius = MS IAS passthrough

2007-05-16 Thread Ian Savoy
- Original Message - From: Ian Savoy [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Wednesday, May 16, 2007 3:37 PM Subject: Re: freeradius = MS IAS passthrough Ya, we have realms setup, however we're failing to auth against each other

Re: freeradius = MS IAS passthrough

2007-05-16 Thread Dennis Skinner
Never say: it just doesn't work. show us. Run radiusd -X and show us what is happening when you try and tell us what you think should be happening. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See

Re: freeradius = MS IAS passthrough

2007-05-16 Thread Peter Nixon
On Wed 16 May 2007, Ian Savoy wrote: Ya, we have realms setup, however we're failing to auth against each other. Then you either have the wrong shared secret between your 2 servers, or you are testing the wrong user/password. What you are trying to do is trivial and covered by the

Re: freeradius = MS IAS passthrough

2007-05-16 Thread John Horne
On Wed, 2007-05-16 at 17:12 -0400, Ian Savoy wrote: Is there anything else? Hi, Not sure if it's still relevant but with our IAS servers the sysadmin made sure it set the reply message to yes. If you test from freeradius to the IAS server using the 'radtest' command, and run freeradius as