Re: AW: AW: Override EAP invalid result in authentication section

2013-06-04 Thread Phil Mayers
On 04/06/13 08:55, PENZ Robert wrote: Hi Phil! do you need something additional from me? I'm not really sure what the question is. You've setup FreeRADIUS to reject certain certificates, using the verify callout config option. If you don't want to reject those certs, change the callout to

Re: Service Provisioning Using AAA (FreeRadius)

2013-06-04 Thread Russell Mike
Hi List After googling for few days still not so much clear. Therefore, i have decided to implement three *A* in three different steps. For now, i only want to use Authorize function of FR. i do not want authentication Accounting BUT authorization. Using MySQL as a backend, Trying to make

Re: Service Provisioning Using AAA (FreeRadius)

2013-06-04 Thread Michael Schwartzkopff
Am Dienstag, 4. Juni 2013, 10:45:01 schrieb Russell Mike: Hi List After googling for few days still not so much clear. Therefore, i have decided to implement three *A* in three different steps. For now, i only want to use Authorize function of FR. i do not want authentication Accounting

Re: Problems wpa2-tls eap mschapv2 ldap

2013-06-04 Thread Roberto Ortega Ramiro
Hi, the status can tag as solved. I have uncomment the line ldap in /etc/raddb/sites-enabled/inner-tunnel Authorize section. And it runs. Thank you for your help. 2013/6/3 Roberto Ortega Ramiro roberto.ort...@esj.es Hi again, i have found this response

Mac Authentication and Port Authentication

2013-06-04 Thread rajasekar bonthala
Hi All, I would like to use the free-radius server for mac-authentication and port authentication. Please let me know the configuration stuff for the same. Thanks, RajaSekhar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mac Authentication and Port Authentication

2013-06-04 Thread Alan DeKok
rajasekar bonthala wrote: I would like to use the free-radius server for mac-authentication and port authentication. Please let me know the configuration stuff for the same. Documentation for this already exists. See the Wiki, among other places. i.e. If you don't have time to read the

Re: Getting DD-WRT to work with FreeRadius and LEAP authentication

2013-06-04 Thread Jouni Malinen
On Sun, Jun 2, 2013 at 9:10 PM, Kostya kosty...@gmail.com wrote: I am trying to set up a WPA2 Enterprise protected network with FreeRadius as the radius server. I have configured everything and it was working fine. Then I realised that I need to use LEAP to replicate a specific environment to

[ANN] Version 3.0.0-beta1

2013-06-04 Thread Arran Cudbard-Bell
The majority of the potentially disruptive code changes have now been completed for 3.0 and it is at a stage where community testing would be helpful. To provide a single point to test against, the release_3_0_0_beta1 tag has been created. The tarball is available here:

RE: [ANN] Version 3.0.0-beta1

2013-06-04 Thread David Peterson
I am getting this on installation: rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /usr/local/etc/raddb/mods-enabled/eap[17]: Instantiation failed for module eap Typically it generates the fake certs on the first run, should I be running a certificate

Re: [ANN] Version 3.0.0-beta1

2013-06-04 Thread Arran Cudbard-Bell
On 4 Jun 2013, at 14:32, David Peterson dav...@wirelessconnections.net wrote: I am getting this on installation: rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /usr/local/etc/raddb/mods-enabled/eap[17]: Instantiation failed for module eap

RE: [ANN] Version 3.0.0-beta1

2013-06-04 Thread David Peterson
That did take a bit lol... ok works now thanks! David -Original Message- From: freeradius-users-bounces+davidp=wirelessconnections@lists.freeradius.org [mailto:freeradius-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of Arran Cudbard-Bell Sent:

Re: [ANN] Version 3.0.0-beta1

2013-06-04 Thread Alan DeKok
Arran Cudbard-Bell wrote: 3.0 will be released _soon_, likely within the next month. Yes, finally. There's a lot more work required before FreeRADIUS is perfect. But 3.0 is cleaner than v2.x, and has passed multiple Coverity scans. Alan DeKok. - List info/subscribe/unsubscribe? See

Removing stale expired accounts from SQL

2013-06-04 Thread Ethan Hayon
Hi, I am running into a problem where a user's account is expired (using the Expiration module), however their radreply entry still exists in mysql. This becomes a problem when the user signs up again with the same MAC address because they will be rejected since their MAC address already exists

Re: Removing stale expired accounts from SQL

2013-06-04 Thread Rôney Eduardo
2013/6/4 Ethan Hayon eha...@gmail.com: Should I be doing this with unlang? I was thinking of using unlang to delete all of the associated radreply entries in modules/expiration. Has anyone experienced this problem before, and what solution do you think is best? You can do with unlang. Put

Re: Removing stale expired accounts from SQL

2013-06-04 Thread Ethan Hayon
Hi, Thanks for the response. I only want to run the SQL query if the user's account is already expired. Wouldn't I need to put it in here? expiration { # # The Reply-Message which will be sent back in case the # account has expired. Dynamic substitution is supported # reply-message =

Re: Removing stale expired accounts from SQL

2013-06-04 Thread Alan DeKok
Ethan Hayon wrote: Hi, Thanks for the response. I only want to run the SQL query if the user's account is already expired. Wouldn't I need to put it in here? expiration { No. That is a MODULE configuration. The entries it takes are documented in that file. You can't put SQL

Re: Removing stale expired accounts from SQL

2013-06-04 Thread Rôney Eduardo
2013/6/4 Ethan Hayon eha...@gmail.com: Hi, Thanks for the response. I only want to run the SQL query if the user's account is already expired. Wouldn't I need to put it in here? No, You can adapt the instruction I gave you to delete the entries based on the attributes you want to check for

Re: Removing stale expired accounts from SQL

2013-06-04 Thread Ethan Hayon
Ah, now I understand! So in my query I would delete the entries if the current date is expiration date That makes sense! Thanks so much, Ethan On Jun 4, 2013, at 5:41 PM, Rôney Eduardo roneyeduardosan...@gmail.com wrote: 2013/6/4 Ethan Hayon eha...@gmail.com: Hi, Thanks for the

EAP-SIM Authentication

2013-06-04 Thread Kranthi K
Hi All, I am Newbie to free radius. I installed freeradius version 2.2.0. i want to configure the EAP-SIM Authentication. Can anyone tell me the steps how to implement it. Thanks Kranthi - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html