Re: Help needed configuring MAB on FreeRADIUS and Cisco switch

2012-07-13 Thread Alan Buxey
Hi, The very last line of startup output will say Ready to process requests If you get NOTHING else then the server is not getting any packets through to it...which is either something simple such as the built in firewall of cents (edit the firewall using your favourite method to allow UDP 1

Re: Help needed configuring MAB on FreeRADIUS and Cisco switch

2012-07-13 Thread Kaya Saman
On Fri, Jul 13, 2012 at 5:35 PM, Alan Buxey wrote: > radiusd -X > > > ...will print all output to the terminal it wad run in. That will show you > the workings > > alan > Yep, I did suggest this previously that I used this. It doesn't show anything at all apart from claiming that RADIUS

Re: Help needed configuring MAB on FreeRADIUS and Cisco switch

2012-07-13 Thread Alan Buxey
radiusd -X ...will print all output to the terminal it wad run in. That will show you the workings alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Help needed configuring MAB on FreeRADIUS and Cisco switch

2012-07-13 Thread Kaya Saman
ed Jul 11 11:01:47 2012 : Info: Exiting normally. I have even tried running radiusd -sX and radiusd -X which did not print ANY debug output whatsoever :-( Can anybody help me in getting started trying to figure out the problem? Regards, Kaya switch-confg Description: Binary data - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Debug/Freeradius help

2012-07-09 Thread alan buxey
Hi, > I'm setting up freeradius for the first time and I am having an issue with > the "radtest testing password localhost 0 testing123" I am getting > "radclient: no response from server for ID 2 socket 3" I have ran the > freeradius debugging output and below are the 2 highlighted errors it sho

Debug/Freeradius help

2012-07-09 Thread Justin Huckabay
Hello, I'm setting up freeradius for the first time and I am having an issue with the "radtest testing password localhost 0 testing123" I am getting "radclient: no response from server for ID 2 socket 3" I have ran the freeradius debugging output and below are the 2 highlighted errors it shows a

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread alan buxey
Hi, > For some reason, it is working now, I did only tiny changes though. well..you made changes... obviously they were beneficial > - the differences between the WiKi > https://confluence.terena.org/display/H2eduroam/How+to+deploy+eduroam+on-site+or+on+campus > and the cookbook > http://www.edu

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread Olivier Nicole
t;> (www.eduroam.org), as I understood that some subscribers have done the >> configuration successfully, I come here to get help. >> >> I have been running my FreeRADIUS server with out problem for several >> years, identifying to an openLdap backend. >> >> I man

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-28 Thread alan buxey
u will be told about by your federation operator.and for you to add those remote RADIUS servers as clients (clients.conf or NAS table in SQL) so that requests for you can be sent to you. you might want to also look at the eduroam confluence WIKI for help/advice/pointers https://confluence.ter

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-27 Thread Scott Armitage
On 28 Jun 2012, at 02:54, Olivier Nicole wrote: > Hi, > > I am struggling to configure my FreeRADIUS server for eduroam > (www.eduroam.org), as I understood that some subscribers have done the > configuration successfully, I come here to get help. > > I have been running

Re: Help needed to configure FreeRADIUS for eduroam

2012-06-27 Thread Stefan Winter
Hi, > I am struggling to configure my FreeRADIUS server for eduroam > (www.eduroam.org), as I understood that some subscribers have done the > configuration successfully, I come here to get help. > > I have been running my FreeRADIUS server with out problem for several > years,

Help needed to configure FreeRADIUS for eduroam

2012-06-27 Thread Olivier Nicole
Hi, I am struggling to configure my FreeRADIUS server for eduroam (www.eduroam.org), as I understood that some subscribers have done the configuration successfully, I come here to get help. I have been running my FreeRADIUS server with out problem for several years, identifying to an openLdap

help

2012-06-14 Thread Diego Quevedo
help - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius openldap config help please

2012-06-08 Thread Steven Pokrandt
ldif I created from the opnldap.schema provided in freeradius, I converted with slaptest. I've deleted the lines at the end of the file as described in the conversion HOWTO's. Any help getting a good ldif file to import would be a great help.. I feel I'm very close!! here is

RE: help on proxy

2012-06-01 Thread Diego Quevedo
yes, that was the idea. It will be too much of a long story to explain why I needed it to behave that way :) > Date: Thu, 31 May 2012 19:50:33 +0100 > From: a.l.m.bu...@lboro.ac.uk > To: freeradius-users@lists.freeradius.org > Subject: Re: help on proxy > > Hi, > > &

Re: help on proxy

2012-05-31 Thread alan buxey
Hi, > 1. If the server sends access-accept, then proxy the message back to the > client (like it is being done at the moment) > 2. If the server sends access-reject, then do not proxy, just drop the > packet. eerr, why? that is horribly broken and will cause lots of issues with clients - maki

Re: help on proxy

2012-05-31 Thread Alan DeKok
Diego Quevedo wrote: > What I need to do now, is the following: > > 1. If the server sends access-accept, then proxy the message back to the > client (like it is being done at the moment) > 2. If the server sends access-reject, then do not proxy, just drop the > packet. > > Is that possible?

help on proxy

2012-05-31 Thread Diego Quevedo
Hello... I am currently using freeRadius to proxy messages between a client and server as follows: radius client --freeRadius--radius server The client normally send access_request messages which are proxyed to the server. The server can either respond with access-accep

RE: Help about debug mode and python

2012-05-23 Thread Vladimir KOLLA
adius users mailing list Subject: Re: Help about debug mode and python Phil Mayers wrote: > http://bugs.python.org/issue4434 > > Warning: reading that bug will make you either sad or angry. Probably both. > "Use the static library, closing NOTABUG". Sigh. > > I believe

Re: Help about debug mode and python

2012-05-15 Thread Alan DeKok
Phil Mayers wrote: > http://bugs.python.org/issue4434 > > Warning: reading that bug will make you either sad or angry. Probably both. > "Use the static library, closing NOTABUG". Sigh. > > I believe it's fixed in Python 2.7. > > In my code, I worked around it by dlopen()ing libpython, as per

Re: Help about debug mode and python

2012-05-15 Thread Phil Mayers
On 05/15/2012 10:12 PM, Alan DeKok wrote: I'm not sure why you need to preload the python library. It should be loaded automatically when you load the rlm_python library. It's more tricky, I'm afraid , due to some python idiocy :o( Basically, python modules (compiled as a .so) are not the

Re: Help about debug mode and python

2012-05-15 Thread Alan DeKok
Vladimir KOLLA wrote: > Thank you for your presentation at OSSIR today. You're welcome. It was nice to get to Paris for a while. > As said, I've a technical question about the debug mode and Python. > We are using python with "LD_PRELOAD=/usr/lib/python2.6.so.1" in > /etc/init.d/freeradius fi

Help about debug mode and python

2012-05-15 Thread Vladimir KOLLA
Hi, Thank you for your presentation at OSSIR today. As said, I've a technical question about the debug mode and Python. We are using python with "LD_PRELOAD=/usr/lib/python2.6.so.1" in /etc/init.d/freeradius file But when we start FreeRadius in debug mode, it seems that the parameter is bypasse

Re: Help: PAP with Sha1

2012-04-20 Thread Alan DeKok
vishal_nitr wrote: >This is what I am looking for. What is the place where RADIUS does > decrypt operation. You were told to NOT ask programming questions on this list. ... >>I tried changing few things in lib/radius.c to SHA1 but with no >>success. You clearly want to do pro

Re: Help: PAP with Sha1

2012-04-20 Thread alan buxey
Hi, >Although the AVP User-Password is shown here in clear text, it was not >transmitted to the server in clear text. FreeRADIUS uses the shared secret >to encrypt and decrypt the value of the User-Password AVP. correct. it was encrypted using the shared-secret , the RFCs give full d

Re: Help: PAP with Sha1

2012-04-20 Thread vishal_nitr
12 16:50:14 To: "vishal_n...@rediffmail.com" <vishal_n...@rediffmail.com>, FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Help: PAP with Sha1 Hi, >        I tried changing few things in lib/radius.c to SHA1 but with no >    success.

Re: Help: PAP with Sha1

2012-04-20 Thread alan buxey
Hi, >Thanks for the mail Alan. I don't agree with your comment that it is *not* >RADIUS if we choose SHA1 over MD5. RADIUS supports SHA1 hashed >user-password attribute. Following link confirms it. are you talking about changing user passwords (as i first assumed) or are you talking a

Re: Help: PAP with Sha1

2012-04-20 Thread vishal_nitr
alwar,  Bangalore-35. 09900055647. From: Alan DeKok <al...@deployingradius.com> Sent: Fri, 20 Apr 2012 17:07:45 To: vishal_n...@rediffmail.com, FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Help: PAP with Sha1 vishal_nitr wrote: >     I am usin

Re: Help: PAP with Sha1

2012-04-20 Thread Alan DeKok
alan buxey wrote: > regarding using SHA1 - easy, just ensure that your passwords are stored as > SHA1 > objects - the docs say how to do this No. He's changing the *source code* to encrypt the User-Name password via SHA1, instead of MD5. This isn't supported, and will never be supported.

Re: Help: PAP with Sha1

2012-04-20 Thread Alan DeKok
g RADIUS, your coding questions don't belong there. We can't help you change RADIUS. I suggest debugging the program yourself. Standard C skills will help here. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help: PAP with Sha1

2012-04-20 Thread alan buxey
Hi, >    I tried changing few things in lib/radius.c to SHA1 but with no >success. please post full putput form radiusd -X regarding using SHA1 - easy, just ensure that your passwords are stored as SHA1 objects - the docs say how to do this alan - List info/subscribe/unsubscribe? See h

Re: Help: PAP with Sha1

2012-04-20 Thread Phil Mayers
On 20/04/12 11:09, vishal_nitr wrote: With SHA1 from client: User-Name = "vishal" Calling-Station-Id = "00-23-68-0F-1A-E6" NAS-Port = 0 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 Service-Type = Framed-User NAS-IP-Address = 127.0.0.1 NAS-Identifier = "ap7131-0F1AE6" NAS-Port-Id = "0" User-

need info on EAP-SIM,help

2012-04-20 Thread doomyu
, jack -- View this message in context: http://freeradius.1045715.n5.nabble.com/need-info-on-EAP-SIM-help-tp5653902p5653902.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-19 Thread Rathod Subhashchandra
Hi Iliya, It is working now. Thanks for your help. Thanks ! Rathod. -Original Message- From: freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org [mailto:freeradius-users-bounces+rathod=tataelxsi.co...@lists.freeradius.org ] On Behalf Of Iliya Peregoudov Sent: Thursday

RE: Any body here?Please help me to test my server.

2012-03-17 Thread ZhenJoey
gt; Subject: Re: Any body here?Please help me to test my server. > From: l...@fajar.net > To: freeradius-users@lists.freeradius.org > > 2012/3/17 ZhenJoey : > > Hello every body: > > I just set up a freeradius server right now, > > Please help me to test it by run > &

Re: Any body here?Please help me to test my server.

2012-03-17 Thread Fajar A. Nugraha
2012/3/17 ZhenJoey : > Hello every body: > I just set up a freeradius server right now, > Please help me to test it by run > $radtest snan4love 123456 119.127.12.6 1812 12345678 > I will be waiting here. > > BTW,i do a test my self via a NAS not radtest, it doesnt work. And

Any body here?Please help me to test my server.

2012-03-16 Thread ZhenJoey
Hello every body: I just set up a freeradius server right now, Please help me to test it by run $radtest snan4love 123456 119.127.12.6 1812 12345678 I will be waiting here. BTW,i do a test my self via a NAS not radtest, it doesnt work. is there something like TimeOut in NAS when it try to

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
To: 'FreeRadius users mailing list' Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Run freeradius in debug mode (-X). Look for eap module debug messages. Look for wimax module debug messages. Try to understand. Rathod Subhashchandra wrote: > Dear Iliya, >

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread David Peterson
-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of Alan DeKok Sent: Thursday, March 15, 2012 7:49 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed Rathod Subhashchandra wrote

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Alan DeKok
Rathod Subhashchandra wrote: > Rlm_wimax module was not building. I enabled and now it is building. > As per your suggestion, I have added "wimax" in file > raddb/sites-enabled/default > Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me > in this?

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Iliya Peregoudov
suggestion, I have added "wimax" in file raddb/sites-enabled/default Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me in this? Thanks ! Rathod. -Original Message- From: Iliya Peregoudov [mailto:iperegu...@cboss.ru] Sent: Thursday, March 15, 2012 11:41 A

RE: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Rathod Subhashchandra
Dear Iliya, Thanks for your valuable suggestion. Rlm_wimax module was not building. I enabled and now it is building. As per your suggestion, I have added "wimax" in file raddb/sites-enabled/default Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me in thi

Re[2]: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-15 Thread Толик Шавловский
-Original Message- > From: Fajar A. Nugraha [mailto:l...@fajar.net] > Sent: Thursday, March 15, 2012 11:00 AM > To: rat...@tataelxsi.co.in; FreeRadius users mailing list > Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed > > On Thu, Mar 15, 20

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-14 Thread Iliya Peregoudov
There is no WiMAX-MSK attribute in Access-Accept. You need to call rlm_wimax module from post-auth section of default virtual server: # raddb/sites-enabled/default post-auth { ... wimax ... } This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and MS-MPPE-Recv-Key. Rathod Su

Re: Help - ASN-GW throwing error - Validation of attributes failed

2012-03-14 Thread Fajar A. Nugraha
On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra wrote: > Wireshark logs @ ASN-GW > > > > > > I could not attach wireshark pcap logs due to size constraint. I have took > print screen of only ACCESS-ACCEPT message copied to MS word. While that information might be interesting for ASN supp

Re: Help with proxy settings please

2012-01-12 Thread Alan Buxey
Hi, > [suffix] Looking up realm "gcu.ac.uk" for User-Name =3D "radldapu...@gcu.ac= > .uk" > [suffix] Found realm "GCU.AC.UK" okay, the server has gcu.ac.uk in proxy.conf - so the realm module knows to deal with it... > [suffix] Preparing to proxy authentication request to realm "GCU.AC.UK" okay

Re: Help with proxy settings please

2012-01-12 Thread Alan Buxey
hi, this wasnt proxying an authentication request - it wasdealing with it direct (and failing when doing the auth) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help with proxy settings please

2012-01-12 Thread Phil Mayers
On 01/12/2012 04:08 PM, lmgo5991 wrote: Hi Phil, Thanks for you quick response. Just to clarify what we have succeeded in t= o date: 1. Install Samba done 2. Join Samba to the domain done 3. Start winbind done 4. Configure FreeRADIUS to use ntlm_auth to check MSCHAP against the A

Re: Help with proxy settings please

2012-01-12 Thread lmgo5991
00 Proxy-State =3D 0x313933 Waking up in 3.9 seconds. Cleaning up request 0 ID 193 with timestamp +14 Marking home server 10.1.1.78 port 1812 as zombie (it looks like it is dead= ). Ready to process requests. We are trying to locate where we would reference our internal AD within eit= her proxy.conf and/or clients.conf. or should ntlm do this automatically...= .. Ps we are not trying to use ldap sorry for the mis leading test user id :). Thanks -- View this message in context: http://freeradius.1045715.n5.nabble.com/Help-with-proxy-settings-please-tp5139910p5140289.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help with proxy settings please

2012-01-12 Thread Phil Mayers
On 01/12/2012 01:23 PM, lmgo5991 wrote: Hi, Could someone please shed some light on the where we are going wrong. We have followed the documentation provided however it is unclear where to reference our internal ad servers. Your subject line is a bit confusing. You say "proxy settings" but I s

Help with proxy settings please

2012-01-12 Thread lmgo5991
eturning reject (again.) [peap] *** This means you need to read the PREVIOUS messages in the debug output [peap] *** to find out the reason why the user was rejected. [peap] *** Look for "reject" or "fail". Those earlier messages will tell you. [peap] *** what went wrong, a

Re: Need basic help with accouting

2012-01-04 Thread Cosmin Neagu
Yes you are right...did some searching on accounting and this is what i want next. Thanks for clarification. Cosmin Neagu On 01/04/2012 03:08 PM, Fajar A. Nugraha wrote: On Wed, Jan 4, 2012 at 7:52 PM, Cosmin Neagu wrote: I found how to do what i needed to do From what i discovered by de

Re: Need basic help with accouting

2012-01-04 Thread Fajar A. Nugraha
On Wed, Jan 4, 2012 at 7:52 PM, Cosmin Neagu wrote: > I found how to do what i needed to do > From what i discovered by default it does not do any accounting regarding > user logins. > I have to set in radiusd.conf in log section: > auth = yes > By default was set to "no" That's not accounting (a

Re: Need basic help with accouting

2012-01-04 Thread Cosmin Neagu
I found how to do what i needed to do From what i discovered by default it does not do any accounting regarding user logins. I have to set in radiusd.conf in log section: auth = yes By default was set to "no" On 01/03/2012 04:52 PM, Alan DeKok wrote: Cosmin Neagu wrote: I already learned how

Re: Need basic help with accouting

2012-01-03 Thread Alan DeKok
Cosmin Neagu wrote: > I already learned how to use authentication, but i'm unable to figure > out from details in configurations files how to do some accounting - > basic stuff like when a user logs in or out for start. > > Can anyone point me to some documentation on how to do basic accounting >

Need basic help with accouting

2012-01-03 Thread Cosmin Neagu
Hello radius users, I need some basic info/redirection to start using accounting with freeradius. I already learned how to use authentication, but i'm unable to figure out from details in configurations files how to do some accounting - basic stuff like when a user logs in or out for start.

Re: I need your help!!!!

2011-12-17 Thread Alan Buxey
Hi, > Hi Fajar and friends. > What I need is that one you see that a user is authenticated and can not be > another person (identity theft) use the same user to authenticate to another > machine. What I do is, when this happens, the authentication attempt is > rejected for second time, or only t

Re: I need your help!!!!

2011-12-17 Thread Guillermo William Llanes Suárez
thereby be online only from a customer, not both at the same time. Let me explain better?. Thank you all. - Mensaje original - De: "Guillermo William Llanes Suárez" Para: "FreeRadius users mailing list" Enviados: Sábado, 17 de Diciembre 2011 8:35:08 Asunto: Re: I need

Re: I need your help!!!!

2011-12-17 Thread Guillermo William Llanes Suárez
:35:33 Asunto: Re: I need your help 2011/12/17 Guillermo William Llanes Suárez : > Hello Friends: > I am writing to give me ideas on how to apply the following policy in > freeradius: > - I need a user is only registered at the same time just one time, so when > the user is r

Re: I need your help!!!!

2011-12-16 Thread Fajar A. Nugraha
2011/12/17 Guillermo William Llanes Suárez : > Hello Friends: > I am writing to give me ideas on how to apply the following policy in > freeradius: > - I need a user is only registered at the same time just one time, so when > the user is registered with that other users can not register. That d

I need your help!!!!

2011-12-16 Thread Guillermo William Llanes Suárez
Hello Friends: I am writing to give me ideas on how to apply the following policy in freeradius: - I need a user is only registered at the same time just one time, so when the user is registered with that other users can not register. I hope I miss understand. Thank you very much. Fin a la inj

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan Buxey
you can create a new RADIUS cert whenever you want. Just ensure its signed by same CA and has same details such as CN . If you want to change CA then client config changes will be needed (likewise for CN changes) ...that assumes the clients were configured properly/securely. If its just a client

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Victor Guk
29.11.2011 19:54, freeradius-users-requ...@lists.freeradius.org пишет: options: client has wrong certificate client has wrong date/time set on it certificate has expired alan The time is set correctly. Certificate has expired. Can I renew it without breaking. Or to create a new one? - List i

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan Buxey
Hi, > what's wrong? Help! > > Tue Nov 29 17:14:00 2011 : Auth: Login incorrect: [host/dbu14/ Auth-Type = EAP>] (from client private-network port 123 cli > 00-0E-A6-B4-43-99) > Tue Nov 29 17:16:02 2011 : Error: --> verify error:num=10:certificate > has expired >

Re: HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Alan DeKok
Victor Guk wrote: > what's wrong? Help! > ... > Tue Nov 29 17:16:02 2011 : Error: TLS Alert write:fatal:certificate expired What does that line say? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

HELP!!! Error: rlm_eap: SSL error

2011-11-29 Thread Victor Guk
what's wrong? Help! Tue Nov 29 17:14:00 2011 : Auth: Login incorrect: [host/dbu14/Auth-Type = EAP>] (from client private-network port 123 cli 00-0E-A6-B4-43-99) Tue Nov 29 17:16:02 2011 : Error: --> verify error:num=10:certificate has expired Tue Nov 29 17:16:02 2011 : Error

Re: please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-22 Thread Alan DeKok
Harshavardhan Ch wrote: > Hello sir, >while activating the free radius server with eap > authentication via vmware virtual machine i got error like "Failed > binding to authentication address 192.168.1.102 port 1812" >and i attched the output file. Stop posting

RE:please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-21 Thread Duong Manh Truong
list submissions to >freeradius-users@lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit >http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to >

Re: please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-21 Thread Fajar A. Nugraha
port. Running "netstat -anup | grep 181" should help. -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE:please help me :Failed binding to authentication address 192.168.1.102 port 1812

2011-11-21 Thread Harshavardhan Ch
Hello sir, while activating the free radius server with eap authentication via vmware virtual machine i got error like "Failed binding to authentication address 192.168.1.102 port 1812" and i attched the output file. output file.odt Description: application/vnd.oas

Re: Help: FreeRadius Users with multiple passwords

2011-11-20 Thread Fajar A. Nugraha
On Mon, Nov 21, 2011 at 8:52 AM, Duong Manh Truong wrote: > What i did is that: With each user (Uid) , i created multiple "userpassword > attribute" values, > > then, while authenticating, OpenLDAP will compare the input password with > all the created password values --one by one > If the input m

RE: Help: FreeRadius Users with multiple passwords

2011-11-20 Thread Duong Manh Truong
What i did is that: With each user (Uid) , i created multiple "userpassword attribute" values, then, while authenticating, OpenLDAP will compare the input password with all the created password values --one by one If the input matched any one of the created pass => Access - Accept I also know th

Re: Help: FreeRadius Users with multiple passwords

2011-11-18 Thread John Dennis
On 11/18/2011 06:20 AM, Duong Manh Truong wrote: Hi, Thanks for your reply :) I have a better news that: By using OpenLDAP for FR Authen & Authorization => I can configure multiple passwords for each user (Uid) and use 1 of those passwords for successfully Authentication! Although it is done ma

Re: Help: FreeRadius Users with multiple passwords

2011-11-18 Thread Fajar A. Nugraha
On Fri, Nov 18, 2011 at 6:20 PM, Duong Manh Truong wrote: > Hi, > Thanks for your reply :) > I have a better news that: By using OpenLDAP for FR Authen & Authorization > => I can configure multiple passwords for each user (Uid) > and use 1 of those passwords for successfully Authentication! you m

Re: Help: FreeRadius Users with multiple passwords

2011-11-18 Thread Duong Manh Truong
r ! If anyone have experienced this, please give some advices ! Example: How to do it automatically or How to create a pool of passwords then use the pool for multiple users :) Regards! Message: 3 Date: Tue, 15 Nov 2011 16:09:29 +0700 From: "Fajar A. Nugraha" Subject: Re: Help: Free

Re: mysql module help

2011-11-15 Thread Ski Mountain
6:57 PM Subject: Re: mysql module help On Wed, Nov 16, 2011 at 5:44 AM, Ski Mountain wrote: > Yes I have already edited the > freeradius/sites-available/default Did you edit the right file? If you did, "sql" would show up on the debug log. The correct file (based on your debug o

Re: mysql module help

2011-11-15 Thread Fajar A. Nugraha
On Wed, Nov 16, 2011 at 5:44 AM, Ski Mountain wrote: > Yes I have already edited the > freeradius/sites-available/default Did you edit the right file? If you did, "sql" would show up on the debug log. The correct file (based on your debug output) should be /etc/raddb/sites-available/default, and

Re: mysql module help

2011-11-15 Thread Ski Mountain
ubject: Re: mysql module help Ski Mountain wrote: > I am trying to get freeradius working with mysql on a new system.  I > even copied the configuration files from a working system, but I am > still having trouble getting the mysql module to load.  Yes I have >    $INCLUDE sql.c

Re: mysql module help

2011-11-15 Thread Alan DeKok
Ski Mountain wrote: > I am trying to get freeradius working with mysql on a new system. I > even copied the configuration files from a working system, but I am > still having trouble getting the mysql module to load. Yes I have > $INCLUDE sql.conf > uncommitted from radius.conf Read raddb

Re: Help: FreeRadius Users with multiple passwords

2011-11-15 Thread Fajar A. Nugraha
On Tue, Nov 15, 2011 at 4:00 PM, Duong Manh Truong wrote: > Hi all, > I have encounter with an issue and can not find the solution after several > days of thinking :( > I set up FreeRadius & Mysql successfully, testing with some account ok, > but my real case: Lot of my users have more than 1 pass

Help: FreeRadius Users with multiple passwords

2011-11-15 Thread Duong Manh Truong
h the password "abc123" or the password "123abc" is both ok Please help me: How can i set it up? - I try to insert serveral records with the same "username" and difference "value" - password- in the "radcheck" table but at one time, the server acc

mysql module help

2011-11-14 Thread Ski Mountain
I am trying to get freeradius working with mysql on a new system.  I even copied the configuration files from a working system, but I am still having trouble getting the mysql module to load.  Yes I have      $INCLUDE sql.conf uncommitted from radius.conf Thanks [root@server ~]# /usr/sbin/rad

Re: Need help with Freeradius and 802.1X

2011-11-02 Thread Alan DeKok
johnboy68 wrote: > I have ntlm_auth working. I can auth my AD users with this command: > > radtest -t mschap aduser aspassword localhost 0 testing123 > > And it works. Good! > My problem is when I configure one of my Cisco switches to do 802.1x and > authenticate with Freeradius my Windows (

Re: Need help with Freeradius and 802.1X

2011-11-02 Thread Alan Buxey
Hi, > I have ntlm_auth working. I can auth my AD users with this command: > > radtest -t mschap aduser aspassword localhost 0 testing123 > > And it works. > > My problem is when I configure one of my Cisco switches to do 802.1x and > authenticate with Freeradius my Windows (Windows 7 and Vist

Re: Need help with Freeradius and 802.1X

2011-11-02 Thread johnboy68
ut that kind of information out in a public forum. Any thoughts? -- View this message in context: http://freeradius.1045715.n5.nabble.com/Need-help-with-Freeradius-and-802-1X-tp4865617p4958157.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubs

Re: Fwd: Need help on "ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user"

2011-10-25 Thread Alan Buxey
Hi, >OS: Mac OSX 10.6.8 >FreeRADIUS version:�2.1.12 >Steps taken: okay. so you downloaded the software, extracted it, then built it... great. did you note what happened when you 'make install' ? >Starting�-�reading�configuration�files�...� >including�configuration�file�/usr

Re: Fwd: Need help on "ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user"

2011-10-25 Thread Alan DeKok
Stephen Kwok wrote: > I am a newbie to FreeRADIUS and I have run into a problem during the > setup. I have spent some time on researching for an answer online, but > I got no luck. I have described the problem as below. Could anyone > please let me know what went wrong? Thank you so much in adva

Fwd: Need help on "ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user"

2011-10-25 Thread Stephen Kwok
Hi, I am a newbie to FreeRADIUS and I have run into a problem during the setup. I have spent some time on researching for an answer online, but I got no luck. I have described the problem as below. Could anyone please let me know what went wrong? Thank you so much in advance. Stephen OS: Mac

Re: Need help with Freeradius and 802.1X

2011-10-03 Thread Alan DeKok
johnboy68 wrote: > Users with Vista machines and the 802.1X supplicant configured > Windows Server 2008 with Active Directory > Other network connected devices and 'unknown' computers > 100% Cisco LAN/WAN > > Here is what I want to do: > > Dynamic VLAN assignment based on 802.1X with Freeradius a

Need help with Freeradius and 802.1X

2011-10-03 Thread johnboy68
uch experience with Freeradius but I feel this is something that would be a "normal" 802.1X configuration. Any help on how to configure this environment would be greatly appreciated. Thanks, John -- View this message in context: http://freeradius.1045715.n5.nabble.com/Need-help-with

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Arran Cudbard-Bell
if(!control:NT-Password && !control:Cleartext-Password){ update control { Reject-Reason := 'AttributeMissing' } } oops... - Arran Cudbard-Bell a.cudba...@freeradius.org Betelwiki, Betelwiki, Betelwiki http://wiki.freeradius.org/ ! - List info/subscribe/uns

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Arran Cudbard-Bell
> 1) How do other people - specifically organizations with a help desk > large enough that they're distinctly separate from anyone with enough > privs to tail a log file - handle user support of authentication failures? In a former life I worked at a largish UK university. Whilst

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Jason Antman
Thanks for the quick reply! Alan Buxey wrote: > hi, > > firstly, deployment tool - such as CloudPath xpressconnect or sux1 to ensure > that the user is doing the least amount possible to mess things up (also > ensures > that all the right things such as validate server, RADIUS name etc are all >

Re: Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Alan Buxey
hi, firstly, deployment tool - such as CloudPath xpressconnect or sux1 to ensure that the user is doing the least amount possible to mess things up (also ensures that all the right things such as validate server, RADIUS name etc are all properly defined). secondly, capture the output of the logf

Help desk support of authn/authz failures? Logging detailed messages to SQL?

2011-09-27 Thread Jason Antman
We've rolled out FreeRADIUS as the authentication and authorization server for our University-wide WLAN with 30,000+ users. Our help desk (general IT, not wireless-specific) support staff is made up of student workers, with full-time second-level support and us sysadmins/wireless engineer

Re: Need help to store user details

2011-09-20 Thread Fajar A. Nugraha
On Tue, Sep 20, 2011 at 1:47 PM, Rajkumar balaji wrote: > Purpose is After the authentication i need to retrieve the group details > associated with this user and according to them I need to Authorize the > user. > > Store it in FreeRADIUS (text file also fine) ( and I want to retrieve it > using

Re: Need help to store user details

2011-09-20 Thread Fred
o "XYZ" group and "PQR" group. > > > Thanks > > Regards > Rajkumar Balaji > > -- > View this message in context: > http://freeradius.1045715.n5.nabble.com/Need-help-to-store-user-details-tp4821498p4821498.html > Sent from the FreeRadius - User mai

Authorization help

2011-09-20 Thread Rajkumar balaji
Hi All, Thanks for helped me to Authenticate with FreeRADIUS. Now I am able to authenticate successfully. Please help me to resole with the following issue, How to get authorize with FreeRADIUS? Where to store the user group details and his permissions? (which file i have to store it) Thanks

Re: Need help to store user details

2011-09-19 Thread Rajkumar balaji
implement this. Thanks Regards Rajkumar Balaji -- View this message in context: http://freeradius.1045715.n5.nabble.com/Need-help-to-store-user-details-tp4821498p4821565.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http

Re: Need help to store user details

2011-09-19 Thread Fajar A. Nugraha
On Tue, Sep 20, 2011 at 1:07 PM, Rajkumar balaji wrote: > Hi All, > > I just want to store user details like, The user name is "ABC"  and the user > belongs to "XYZ" group and "PQR" group. > LDAP/files/SQL/whatever? e.g. https://github.com/alandekok/freeradius-server/blob/v2.1.x/doc/rlm_sql --

<    1   2   3   4   5   6   7   8   9   10   >