How to Decrypt cipher text of md5 on freeradius?

2005-02-22 Thread Chanin Luangingkasut
List Step before inster password into MySQL database: 1. Input password. 2. Encrypt password by md5 [ md5(password) ] 3. Insert data to database and encode password by PASSWORD() on mysql again (INSERT into VALUES(, PASSWORD(md5(password))); But, it dosen't works. How I fix this case?

any check item available while doing EAP/TLS?

2005-02-22 Thread Vincent Chen
Hi, all I don't want my user get a certificate from me and have access to all of our AP. I already tried to add NAS-IP-Address,NAS-Identifier as check item but none works. No mater which AP I assign as check item for certificate, They still have access to all our access points. It is not very

RE: Is it possible to authenticate RADIUS users just on Username with no password?

2005-02-22 Thread Santiago Balaguer García
Yes, It is possible and I use it for authenticating routers and IP phones. These devices don't respond a login request with login/passwd. a solution is, if your NAT supports it, put as login = device MAC address and as PASSWORD = nothing. Obviusly, your have to declare this user=MAC in

radclient: no response from server

2005-02-22 Thread Abdul Lateef
Hi, I installed freeradius-1.0.2 on my Redhat7.3 Server. when i am trying to test using my linux root and password. the server is giving no response. radtest root 123456 127.0.0.1 3030 testing123 Re-sending Access-Request of id 174 to 127.0.0.1:1812 User-Name = root

Re: radclient: no response from server

2005-02-22 Thread Michael Mitchell
The answer is right there in front of you... radtest is sending the request to 127.0.0.1:1812 In your radtest line replace the space between the 127.0.0.1 and 3030 with a ':'. regards, Mike Abdul Lateef wrote: radtest root 123456 127.0.0.1 3030 testing123 Re-sending Access-Request of id 174 to

Re: radclient: no response from server

2005-02-22 Thread Ery Atmodjo
Hi My freeradius-1.0.1 is running. when i am trying to test using 127.0.0.1, the server response was access-reject, not no response from server. I am not sure what happened to your radius server because i am new even in linux, but i suggest you to try using server ip address other than

Re: Active directory + users files

2005-02-22 Thread Alexandre Coninx
On Tue, Feb 22, 2005, Alexandre Durand wrote: Hi, I want to connect Active directory users with freeradius and PEAP. I use samba with winbind to do this. In fact i use ntlm_auth command. But now i don't know how to configure users files to connect Active directory

Re: Undefined symbol with eaptls / freeradius 1.0.1 (debian)

2005-02-22 Thread Paul Hampson
On Tue, Feb 22, 2005 at 10:44:08AM +1100, Tom wrote: I've setup freeradius 1.0.1 on debian (sarge 2.6 kernel). I've included all the modules and set freeradius to use PEAP. When my authenticator passes the request over to the freeradius server I get (among other things): freeradius:

Re: radsqlrelay for 1.0.2

2005-02-22 Thread Nicolas Baradakis
ROY wrote: This version can be built in the 1.0.x source tree. It has been modified to fix the detail file locking issue under heavy load. Since you are running tests on radsqlrelay, I'd be grateful if I could receive some feedback from you on this version. There were a lot off

Using Free Radius with Microsoft Stored Proccedures for Authentication

2005-02-22 Thread Matt
What exactly does freeradius expect back? For instance: authenticate_query = SELECT Value,Attribute FROM ${authcheck_table} WHERE UserName = '%{User-Name}' AND ( Attribute = 'User-Password' OR Attribute = 'Password' OR Attribute = 'Crypt-Password' ) ORDER BY Attribute DESC Or if I were

Re: pre-acct processing and Proxy-To-Realm

2005-02-22 Thread Kostas Kalevras
On Tue, 22 Feb 2005, Michael Mitchell wrote: Thanks for the reply Kostas! Kostas Kalevras wrote: On Mon, 21 Feb 2005, Mitchell, Michael J wrote: Latest cvs versions of rlm_preprocess do huntgroup processing. Great! I'll take a look at the latest rlm_preprocess! I am not sure you need to run

unsuscriber please

2005-02-22 Thread Fernando Castillo Vedia
[EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

unsuscriber please

2005-02-22 Thread Fernando Castillo Vedia

Re: Grouping accounts

2005-02-22 Thread Dustin Doris
On Fri, Feb 18, 2005 at 12:32:54PM -0500, Alan DeKok wrote: From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: Re: Grouping accounts Date: Fri, 18 Feb 2005 12:32:54 -0500 Steven Wayne [EMAIL PROTECTED] wrote: joeuser logs into the system and is

Re: any check item available while doing EAP/TLS?

2005-02-22 Thread Dustin Doris
Hi, all I don't want my user get a certificate from me and have access to all of our AP. I already tried to add NAS-IP-Address,NAS-Identifier as check item but none works. No mater which AP I assign as check item for certificate, They still have access to all our access points. It is not

Customize RadPosAuth table

2005-02-22 Thread Eric Gregory
Using Freeradius 1.1 and would like to customize the radpostauth table in MYSQL, I'd like it to not record the plain text passwords on successful authentications is the most important and also I'd like to see failed logins as well. Any help is appreciated. Thanks Eric Gregory - List

Problém authenticaton EAP-LEAP (Eap-leap will not be in production but in test currently)

2005-02-22 Thread Patrice PAPOT
hello, I have a problem on Freeradius 1.0.2. I have two configuration: 1- PDA microsoft pocket PC --- AP Cisco --- Freeradius 1.0.2 2- PDA microsoft pocket PC 2003 --- AP Cisco -- Freeradius 1.0.2 The configuration one functions without problem in EAP-LEAP. An error on the configuration two

Re: Customize RadPosAuth table

2005-02-22 Thread Thor Spruyt
- Original Message - From: Eric Gregory [EMAIL PROTECTED] Using Freeradius 1.1 and would like to customize the radpostauth table in MYSQL, I'd like it to not record the plain text passwords on successful authentications is the most important and also I'd like to see failed logins

force eap-type

2005-02-22 Thread Marc Boisis
Hello world I would like to force EAP-Type according to an ldap attribute . That is to say between authorize ant authenticate. Is it possible and how ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Client Configuration

2005-02-22 Thread Jack Rodriguez
Is there a step by step configuration guide for configuring a pam.d (for a radius client). I want to use that for system login /etc/pam.d/login on Red Hat 9 (2.4). Thanks -Jack - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to reject/erase a user a day after his/her first login

2005-02-22 Thread Antonio J. Soler
Hello, We have set up a radius server to manage user access from a hotel. Users are connected via PLC or WiFi. By now, we are using freeradius 1.0.1 running on a Debian 3.0 r3, and rlm_mysql module. I'd like to know if there is some way to clean a user from the database one day after his first

Re: Grouping accounts

2005-02-22 Thread Michael Mitchell
I'm not sure that Steven ever mentioned that his user database is ldap (perhaps Steven could clarify this for us?)?? But for what is it worth we use a very similar scheme as described by Dustin below. For us however, our billing system is the authoritative database, and LDAP is only used for

VPN and Freeradius

2005-02-22 Thread Anderson Alves de Albuquerque
How can I do authetication of the users in VPN using FreeRadius. I want that freeradius make authetication. Before my users use VPN, Freeswan would need to do authentication in freeradius. Is this possible? Is FreeSwan the best to work with FreeRadius? - List

Re: Radrelay and coredumps...

2005-02-22 Thread Terry J Fike Jr
Okay, Per Alan i compiled up 1.0.2 and moved the radrelay binary. (i didn't move everything into version 1.0.2 just the 1.0.2 binary into my 1.0.0 install). Modified all the dictionary files to the way they are in 1.0.2 and it still cores. with pretty much the same output in a strings of the

Preventing roaming with multiple NAS

2005-02-22 Thread Patricio Marin
Hi, I am new to the list, and did a search before posting this question, but I couldnt find anything related to this. I have multiple NASs, all using a single FreeRadius server to validate the users. Everything is working fine, if I create a user in mysql, you can login to any of the NASs with

Re: Undefined symbol with eaptls / freeradius 1.0.1 (debian)

2005-02-22 Thread Tom
Thanks very much for your reply I appreciate your help and I've just got a couple of followup questions. Just upgrading libtool won't work, as libtool 1.5 requires a more recent version of autoconf than is used in FreeRADIUS 1.0.1. As the above post suggests, try 1.1.0 (eg. CVS head) which

Freeradius 1.0.2 on MacOS X 10.3.8 failing

2005-02-22 Thread Andreas Fink
Hello, I made a fresh install on a machine running MacOS X 10.3.8 which didn't had freeradius before. I configured this way: ./configure --with-mysql --with-large-files=yes --disable-shared after the make install, I modified /usr/local/etc/radius/clients.conf to include my Access Point in the

Re: Freeradius 1.0.2 on MacOS X 10.3.8 failing

2005-02-22 Thread Justin Guidroz
Andreas, Edit rc.radiusd to have it include the -s argument and see if the server starts. There is a patch from Andreas Wolf to allow running radiusd without the -s argument on Mac OS X, but I haven't updated it to work with 1.0.2. Justin On Wed, 23 Feb 2005 00:29:47 +0100, Andreas Fink

Re: How to reject/erase a user a day after his/her first login

2005-02-22 Thread Kostas Kalevras
On Tue, 22 Feb 2005, Antonio J. Soler wrote: Hello, We have set up a radius server to manage user access from a hotel. Users are connected via PLC or WiFi. By now, we are using freeradius 1.0.1 running on a Debian 3.0 r3, and rlm_mysql module. I'd like to know if there is some way to clean a user

Re: force eap-type

2005-02-22 Thread Kostas Kalevras
On Tue, 22 Feb 2005, Marc Boisis wrote: Hello world I would like to force EAP-Type according to an ldap attribute . That is to say between authorize ant authenticate. Is it possible and how ? I think you just need to map the EAP-Type attribute to an ldap attribute in the user entry. That is,

Re: Digest Authentication Configuration

2005-02-22 Thread Alan DeKok
M.V. Jaga Mohan [EMAIL PROTECTED] wrote: I am using Freeradius1.0.1 with SER 8.0.14. Anybody knows how toconfigure Freeradius to do digest authentication which is sent by SER. I am using Postgresql as my backend. FreeRADIUS comes configured to do digest authentication. Alan DeKok. -

Re: PEAP problem with Postgresql

2005-02-22 Thread Alan DeKok
Vincent Chen [EMAIL PROTECTED] wrote: I am testing freeradius's PEAP these days. If files moudle used, everything works well. But something wrong when switch to sql module, here is some log: Upgrade to 1.0.2, and see the safe-characters configuration item. Alan DeKok. - List

Re: ldap test

2005-02-22 Thread Alan DeKok
Marc-Henri Boisis-Delavaud [EMAIL PROTECTED] wrote: Hello I want to force my user who have Tunnel-Private-Group-ID =1 in ldap, to use EAP tls authentication I have write this in users file DEFAULT Tunnel-Private-Group-ID == 1 EAP-Type = EAP-TLS, EAP-Type belongs on the first

freeradius 1.0.2 on bsd 4.11

2005-02-22 Thread Andrew D
Hi there, Running freebsd 4.11 and compiled freeradius from the ports collection with support for rlm_perl. everything compiled alright, but everytime I start it (radiusd -X) I get the following. perl: func_xlat = xlat perl: perl_flags = (null) perl: func_start_accounting = (null) perl:

Re: Freeradius 1.0.2 on MacOS X 10.3.8 failing

2005-02-22 Thread Justin Guidroz
Also, FreeRADIUS compiles fine on Mac OS X 10.3.x without the --disabled-shared configuration option. On Tue, 22 Feb 2005 17:41:42 -0600, Justin Guidroz [EMAIL PROTECTED] wrote: Andreas, Edit rc.radiusd to have it include the -s argument and see if the server starts. There is a patch from

Re: any check item available while doing EAP/TLS?

2005-02-22 Thread Vincent Chen
Thanks for your response. I am sorry that I didn't make myself clear. For account Presario 2135AD, I first created this profile: Presario 2135AD Auth-Type := EAP, NAS-IP-Address == 10.1.2.5 Session-Timeout = 300 As we can see, the request from 10.1.2.5 and profile

freeradius+LDAP

2005-02-22 Thread anderson souza
Good morning to all!! He/she would like to know some of the friends he/she knows some referring documentation the freeradius implementation + LDAP or even same a possible road of the stones for the configuration in the debian sarge!!! at once I thank attention of all...

Radius and LDAP

2005-02-22 Thread Lou Moore
All, __ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less. http://info.mail.yahoo.com/mail_250 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius authentication using Windows via ntlm_auth and winbind d

2005-02-22 Thread Jay Ungab
Title: Message Dear All, I installed successfully freeradius-1.0.2 under Suse Linux 9.1 and one of the featuresof freeradiusis toenable the authenticationusing Windows 2003 via ntlm_auth and winbindd. The smbd, nmbd and winbindd are runningsuccessfullylocally. All our Windows domain users

Radius and LDAP

2005-02-22 Thread Lou Moore
All, I am new to radius. I want to be able to perform basic 802.1X authentication on my network. I want to authenticate against my SunOne Directory server. What is the simplest radiusd.conf file I can use? The passwords are stored in crypt format in LDAP. I do not need any loging or other

Re: force eap-type

2005-02-22 Thread Marc Boisis
Kostas Kalevras a écrit : On Tue, 22 Feb 2005, Marc Boisis wrote: Hello world I would like to force EAP-Type according to an ldap attribute . That is to say between authorize ant authenticate. Is it possible and how ? I think you just need to map the EAP-Type attribute to an ldap attribute in

MySql Authentication problems

2005-02-22 Thread James Ecker
I am using FreeRadius 1.0.2 with mySql on a Fedora Core3 machine. I am using the default encryption method. I have setup FreeRadius to successfully connect to mySql. I can successfully enter new users in through the dialup_admin web page, but when I Check Password the response I get, is NO It is

Restart Radius

2005-02-22 Thread Abdul Lateef
Hi Guys, I am in little trouble. when i modified users file. i have to restart the machine to read the files. Is there any way to restarting radius without machine restarting? i tried using radiusd but it is not reading modified files. Thank You

RE: Restart Radius

2005-02-22 Thread Mitchell, Michael J
Are you on a unix box? Sending the radiusd process a HUP signal will tell the radius server to re-read its configuration files. Or: /etc/init.d/radiusd restart Or: /etc/init.d/radiusd reload Or wherever your init scripts live... -Original Message- From: [EMAIL PROTECTED]

Re: Undefined symbol with eaptls / freeradius 1.0.1 (debian)

2005-02-22 Thread Paul Hampson
On Wed, Feb 23, 2005 at 10:24:45AM +1100, Tom wrote: Thanks very much for your reply I appreciate your help and I've just got a couple of followup questions. Just upgrading libtool won't work, as libtool 1.5 requires a more recent version of autoconf than is used in FreeRADIUS 1.0.1. As the