Re: Testing failure during setup

2013-05-27 Thread Muhammad Nadeem
it seems like you are using EAP authenication, if you are a new bee to freeradius, i will suggest you to do PAP authentication first, because it is easier and state forword. EAP is a complex techniqe to authenticate the users. you can find simple tutorials on PAP authentication of freeradius.

Re: Testing failure during setup

2013-05-27 Thread A . L . M . Buxey
Hi, I have the added each machine as a client of the other for testing in clients.conf they both have the shared secret aaabbb incorrect shared secret someone. double check your proxy.conf on each system. the retry etc is likely to be because the first challenge failed due to the

Re: CHAP only configuration

2013-05-27 Thread Fajar A. Nugraha
On Mon, May 27, 2013 at 4:48 PM, Navodit Bhardwaj navodit.bhard...@gmail.com wrote: Hi Can someone guide me how to set CHAP only authentication. Why? I am using following entry in my users.conf usernameAuth-Type := Local, Password := password

Re: CHAP only configuration

2013-05-27 Thread A . L . M . Buxey
Hi, Can someone guide me how to set CHAP only authentication. I am using following entry in my users.conf usernameAuth-Type := Local, Password := password Fall-Through = Yes thats wrong. username Cleartext-Password := password as per the

Re: CHAP only configuration

2013-05-27 Thread Navodit Bhardwaj
[authorize]: module preprocess returns ok for request 0 radius_xlat: '../var/log/radius/radacct/127.0.0.1/auth-detail-20130527.log' rlm_detail: ../var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d.lo g expands to ../var/log/radius/radacct/127.0.0.1/auth-detail-20130527.log modcall

Re: CHAP only configuration

2013-05-27 Thread Bjørn Mork
Navodit Bhardwaj navodit.bhard...@gmail.com writes: Can someone help me with detail steps for configuring CHAP This is covered by wiki.freeradius.org/guide/Basic-configuration-HOWTO Bjørn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CHAP only configuration

2013-05-27 Thread Fajar A. Nugraha
On Mon, May 27, 2013 at 5:59 PM, Navodit Bhardwaj navodit.bhard...@gmail.com wrote: Thanks Fajar I tried with the suggestions and using RadiusTest client from Radutils. debug output is given below. Pls suggest what is wrong here? Did you read the wiki link? -- Fajar - List

Re: CHAP only configuration

2013-05-27 Thread Alan DeKok
Navodit Bhardwaj wrote: debug output is given below. Pls suggest what is wrong here? You're running version 1.x. You should upgrade to v2.2.0. And it helps to read the debug output. You edited the users file. It does this: users: Matched entry DEFAULT at line 170 So... what's on

Re: Testing failure during setup

2013-05-27 Thread Alan DeKok
Elizabeth Fife wrote: I am ready for an earbending likely from Alan but for the record I have read the debug and done as much searching as my brain can handle before this post You'll not that I get cranky when people *don't* follow instructions. You have followed them. So clearly you're a

Re: SSH PAM authentication before local authentication

2013-05-27 Thread Alan DeKok
Roberto Carna wrote: But now, suppose the freeradius server is offline, how can I tell the Linux server that if Freeradius is offline it has to authenticate in local mode (local PAM). In this way, I have to have a special user in my Linux server to access it through SSH in case freeradius is

Override EAP invalid result in authentication section

2013-05-27 Thread PENZ Robert
Hi! I want to configure Freeradius (freeradius-2.1.12-4.el6_3) to authenticate failed EAP-TLS requests (from authorized MACs) to a remediation VLAN and not reject them to the guest VLAN. My config looks like this: authorize { # we don't know the MAC reject it to the guest

Re: Override EAP invalid result in authentication section

2013-05-27 Thread Alan DeKok
PENZ Robert wrote: I want to configure Freeradius (freeradius-2.1.12-4.el6_3) to authenticate failed EAP-TLS requests (from authorized MACs) to a remediation VLAN and not reject them to the guest VLAN. My config looks like this: That will work only for wired authentication, and sometimes

help

2013-05-27 Thread Giovanni Perna
I send an access request( to port 1812), the server send the response (same sent port) but radclient log: radclient: received response to request we did not send. (id=20 socket 3) after 3 retry: radclient: no response from server for ID 20 socket 3 Access-REQUEST sent:

Re: help

2013-05-27 Thread Alan DeKok
Giovanni Perna wrote: Can someone help me? Post the full debug log as suggested in the FAQ, README, man page, web pages, and daily on this list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Testing failure during setup

2013-05-27 Thread Elizabeth Fife
Both servers were installed from apt-get which presently gives you freeradius version 2.1.12 for ubuntu 13.04 servers I used apt-get -y install freeradius freeradius-common freeradius-mysql freeradius-utils freeradius-ldap libfreeradius2 (and apt-get -y install mysql-client mysql-server apt-get

Freeradius: change user passwords through pam_radius

2013-05-27 Thread Roberto Carna
Dear, I have a Linux box authenticating SSH users against Freeradius. It works OK. When the users go into the Linux box via SSH, I need them to change their own radius passwords. For this reason, I edited the /etc/pam.d/passwd file as follow: passwordsufficient

Fwd: Freeradius: change user passwords through pam_radius

2013-05-27 Thread Roberto Carna
Dear, I have a Linux box authenticating SSH users against Freeradius. It works OK. When the users go into the Linux box via SSH, I need them to change their own radius passwords. For this reason, I edited the /etc/pam.d/passwd file as follow: password sufficient pam_radius_auth.so @include

RE: Testing failure during setup

2013-05-27 Thread Elizabeth Fife
I have not edited or altered proxy.conf It currently has the following format with only active lines shown (I removed commented lines for ease of viewing.) # Proxy server configuration proxy server { default_fallback = no } home_server localhost { type = auth ipaddr = 127.0.0.1

Re: Freeradius: change user passwords through pam_radius

2013-05-27 Thread Arran Cudbard-Bell
On 27 May 2013, at 15:26, Roberto Carna robertocarn...@gmail.com wrote: Dear, I have a Linux box authenticating SSH users against Freeradius. It works OK. When the users go into the Linux box via SSH, I need them to change their own radius passwords. For this reason, I edited the

Re: Freeradius: change user passwords through pam_radius

2013-05-27 Thread Arran Cudbard-Bell
On 27 May 2013, at 18:03, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 27 May 2013, at 15:26, Roberto Carna robertocarn...@gmail.com wrote: Dear, I have a Linux box authenticating SSH users against Freeradius. It works OK. When the users go into the Linux box via SSH, I need

rlm_sql_oracle:libclntsh.so.11.1: cannot open shared object file

2013-05-27 Thread Okis Chuang
Hi guys, I'm now trying to build another FreeRADIUS 2.2.0 with rlm_sql_oracle which using Oracle instantclient 11.2.0.3.0 and backend Oracle 11g. And the OS version is Linux x86_64 (including CentOS 6.2 RHEL Server 5 Tikanga). I've tried many times following step by step on google.

Re: rlm_sql_oracle:libclntsh.so.11.1: cannot open shared object file

2013-05-27 Thread Iliya Peregoudov
On 28.05.2013 7:00, Okis Chuang wrote: Could not link driver rlm_sql_oracle: libclntsh.so.11.1: cannot open shared object file: No such file or directory Make sure it (and all its dependent libraries!) are in the search path of your system's ld. Directory /usr/lib/oracle/11.2/client64/lib is