Re: My PPTP+802.1X+MS-CHAP+EAP+OpenLDAP+MySQL Project.

2007-01-11 Thread Thibault Le Meur
Hi, The issue with the VPNs is that even through Client Side PPP uses MS-CHAP, FreeRadius is causing pppd to think its authenticating normal CHAP. Jan 9 03:09:00 kurama pppd[12373]: Peer User failed CHAP authentication rlm_mschap: Found LM-Password rlm_mschap: Found NT-Password rlm_mschap: No

Re: My PPTP+802.1X+MS-CHAP+EAP+OpenLDAP+MySQL Project.

2007-01-11 Thread Thibault Le Meur
Hi, The issue with the VPNs is that even through Client Side PPP uses MS-CHAP, FreeRadius is causing pppd to think its authenticating normal CHAP. Jan 9 03:09:00 kurama pppd[12373]: Peer User failed CHAP authentication rlm_mschap: Found LM-Password rlm_mschap: Found NT-Password rlm_mschap: No

Re: Testing EAP-PEAP with freeradius

2007-01-11 Thread A . L . M . Buxey
Hi, This is my config file, whats wrong? apart from being munged into a mix of single file and include files? ;-) peap { } huh? This has been sliced and diced! just look at the default eap.conf that comes with FreeRADIUS source code... you should have a default_eap_type =

Re: ldap { fail=1}

2007-01-11 Thread [EMAIL PROTECTED]
Message du 10/01/07 à 15h38 De : Alan DeKok A : [EMAIL PROTECTED], FreeRadius users mailing list Copie à : Objet : Re: ldap { fail=1} [EMAIL PROTECTED] wrote: i'm using freeradius 1.0.1 from Red Hat entreprise 4. You SHOULD upgrade: http://freeradius.org/security.html

Re: which users are connected and when ?

2007-01-11 Thread Ali Jawad
Try..dialup admin... On 1/11/07, adreas Polyxronopoulos [EMAIL PROTECTED] wrote: Hello list, I have a wlan using freeradius for authentication. I want to create a user-managment application which will help me in monitoring the wlan. The main information i would like to provide with my

Freeradius on Sun Fire platforms

2007-01-11 Thread gigrim
Could anyone advise whether Freeradius can be run on the below SUN Hardware/Software platform list. Many thanks in advance for the support you can provide, your help is much appreciated. Sun Fire V210 UltraSPARC IIIi / Solaris 10 Java ES Sun Fire V240 UltraSPARC IIIi / Solaris 10 Java

Re: Return values for rlm_exec scripts

2007-01-11 Thread Thor Spruyt
Garry Glendown wrote: Thor Spruyt wrote: Session-Timeout := `%{exec:/bin/echo 200}` I use exec_program_wait, try having a look at that. ... which doesn't return a value if I'm not mistaken ... !? It can return several Attribute-Value pairs. Read the documentation, search google and

Re: My PPTP+802.1X+MS-CHAP+EAP+OpenLDAP+MySQL Project.

2007-01-11 Thread Phil Mayers
Evan Vittitow wrote: I want to secure my Wireless Access points using 802.1X and PEAP, or EAP-TLS that are operated by my Cisco Aironet 340. I'm not interested in encrypting traffic. I have UDP Protocols like Quake 3 that are degraded You can't use EAP on any wireless point that I know of

Re: Testing EAP-PEAP with freeradius

2007-01-11 Thread Phil Mayers
Bin Chen wrote: Hi, I want to deploy the EAP-PEAP in our WLAN hotspot, we are using EAP-TLS before and it works fine with our AP. But a PKI is very inconvenient so we want to migrate to EAP-PEAP. Any changes need to be done to radiusd.conf? The client will provide the user-name and

dictionary.3gpp2 suggested patch

2007-01-11 Thread Alexander Serkin
Hi, freeradius-users. I'd suggest a small patch for dictionary.3gpp2. The corrections include some attributes described in latest 3gpp2 specifications, which are used in our environment. It corrects 3GPP2-R-P-Session-ID to be integer, and sets several attributes according to their description

Re: Freeradius on Sun Fire platforms

2007-01-11 Thread Alexander Serkin
[EMAIL PROTECTED] wrote: Could anyone advise whether Freeradius can be run on the below SUN Hardware/Software platform list. Many thanks in advance for the support you can provide, your help is much appreciated. Sun Fire V210UltraSPARC IIIi / Solaris 10 Java ES Sun Fire V240

RE: Freeradius on Sun Fire platforms

2007-01-11 Thread Shankar Ganesh C
Hi, We have run Free radius from June 2006 in the below configuration sun4u sparc SUNW,Sun-Fire-V210 / solaris 9 Rgds, Shankar -Original Message- From: [EMAIL PROTECTED] org [mailto:[EMAIL PROTECTED] eradius.org]On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 11, 2007 4:48 PM To:

Re: Authentication methods.

2007-01-11 Thread Alan DeKok
Evan Vittitow wrote: The issue is, I want a secure means of authenticating nodes to my WAP, but I don't want to degrade my traffic for things like Quake. The authentication can be encrypted, but not all the traffic. Using 802.1x authentication means that all traffic will be encrypted. This

Re: Cisco AS5300 POD Packets

2007-01-11 Thread Alan DeKok
Cory Robson wrote: I have seen a few different posts on this and am seeking clarification. Does the latest version of radclient support POD for the cisco's. Yes. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog -

Re: Cisco AS5300 POD Packets

2007-01-11 Thread Peter Nixon
On Thu 11 Jan 2007 07:23, Cory Robson wrote: I have seen a few different posts on this and am seeking clarification. Does the latest version of radclient support POD for the cisco's. I have seen a patch written in 2003 that said its been added but nothing further? Yes it does. I even went to

RE: Cisco AS5300 POD Packets

2007-01-11 Thread Cory Robson
Yes, Thanks for that found it about an hour ago. Now I just need some nice php code that can be called from dialup admin to pass a couple of strings to to disconnected users at a click : ) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Nixon

Problems with radeapclient and EAP-SIM test files

2007-01-11 Thread Ramm-Ericson, Johannes
Hi Freeradius users, Does anyone have any input on why radeapclient is core-dumping when running one of the EAP-SIM tests? Freeradius v.1.1.4 OS : Suse Enterprise Linux 10 (kernel 2.6.16.21-0.8-smp) TIA, Johannes R-E rad01:/opt/freeradius/src/freeradius-1.1.4/src/tests/eapsim-03 #

Re: Freeradius-1.1.3 + Mysql ?

2007-01-11 Thread Alan DeKok
adreas Polyxronopoulos wrote: Hi list, I have compiled freeradius-1.1.3 with out any configure option. I don't have mySql server on my pc (ubuntu 6.10) . If i would like to store accounting information in mySql , what i have to do? When i download mySql server package do i have to

RE: Restrict Password from detail file , accounting

2007-01-11 Thread Ellis, Scott 1 (N-Comptel Inc.)
Thanks. I will give it a try. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] .org] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, January 10, 2007 3:10 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, Is there

Re: Restrict Password from detail file , accounting

2007-01-11 Thread A . L . M . Buxey
Hi, Do you know what version was the first to introduce this feature? 1.1.2 Feature improvements * Allow tagged VSA's for Juniper. Closes bugs #367 and #368. * Allow Ascend abinary format to be specified as octets, (e.g. Ascend-Data-Filter = 0x010203...)

RE: Restrict Password from detail file , accounting

2007-01-11 Thread Ellis, Scott 1 (N-Comptel Inc.)
ThanksI am running 1.0.1 Scott ... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] .org] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 11, 2007 1:17 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting

Re: Restrict Password from detail file , accounting

2007-01-11 Thread Alan DeKok
Ellis, Scott 1 (N-Comptel Inc.) wrote: ThanksI am running 1.0.1 Scott ... Do you really mean that the accounting detail file has passwords? Why? I've never seen that. If you mean the equivalent file for authentication records, stripping the password is easy: $ cat detail.auth |

Auth Against AD without CHAP/PEAP

2007-01-11 Thread Tim_Crouch
Is it possible to use freeradius to authenticate against Active Directory without using CHAP or PEAP? I have found directions to do this with supplicants using peap etc. but I don't want to use supplicants. I am currently using freeradius to auth against LDAP with out a problem (for my

Re: Freeradius on Sun Fire platforms

2007-01-11 Thread Peter Nixon
Hi there We redundant SunFire X2100 with SUSE Linux Enterprise Server 10. We have thousands of users online at any particular time. We run sqlippool and postgreql based accounting and auth. (Databases are on separate machines.) Here is the output of sar on the primary server: 08:52:08 PM

Radius Server refusing to MS-CHAP

2007-01-11 Thread Evan Vittitow
This is the configuration producing the MS-CHAP issue. No matter what I do, it wants to use CHAP instead of MS-CHAP radiusd.conf prefix = /usr exec_prefix = /usr sysconfdir = /etc localstatedir = /var sbindir = /usr/sbin logdir = /var/log/radius raddbdir = /etc/raddb radacctdir =

automated response

2007-01-11 Thread Baker
I will be out on medical leave from January 12th through February 18th. If you have questions please direct them to Isaac Force. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Auth Against AD without CHAP/PEAP

2007-01-11 Thread Phil Mayers
[EMAIL PROTECTED] wrote: Is it possible to use freeradius to authenticate against Active Directory without using CHAP or PEAP? I have found directions to do this with supplicants using peap etc. but I don't want to use supplicants. I am currently using freeradius to auth against LDAP with

Re: Radius Server refusing to MS-CHAP

2007-01-11 Thread Phil Mayers
Evan Vittitow wrote: This is the configuration producing the MS-CHAP issue. No matter what I do, it wants to use CHAP instead of MS-CHAP This isn't a FreeRadius issue. This is a configuration issue of your PPP daemon, as you've been told. /etc/ppp/opions.pptpd lock nobsdcomp nodeflate

FreeRadius-package on ubuntu6.10

2007-01-11 Thread adreas Polyxronopoulos
I have noticed a problem when downloading freeradius package for ubuntu6.10. After downloading freeradius package and configuring freeradius for peap-eap/mschapv2 and running freeradius -X i got the following ouput: Starting - reading configuration files ... reread_config: reading radiusd.conf

Re: Freeradius-1.1.3 + Mysql ?

2007-01-11 Thread adreas Polyxronopoulos
Hi list, I have found the mysql-server package but i haven't found the mysql-dev package could you tell me which one specific because there are many thanks Adreas Polyxronopoulos - Original Message From: [EMAIL PROTECTED] [EMAIL PROTECTED] To: FreeRadius users mailing list

Re: FreeRadius-package on ubuntu6.10

2007-01-11 Thread Alan DeKok
adreas Polyxronopoulos wrote: I have noticed a problem when downloading freeradius package for ubuntu6.10. After downloading freeradius package and configuring freeradius for peap-eap/mschapv2 and running freeradius -X i got the following ouput: See the FAQ about Debian packages. Alan

Re: Radius Server refusing to MS-CHAP

2007-01-11 Thread Evan Vittitow
Contents: localip 192.168.102.1-101 remoteip 192.168.102.102-203 option /etc/ppp/options.pptpd - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

IPPool with MySQL

2007-01-11 Thread Umar Draz
Dear Members!! Is it possible to use ip pool with freeradius + mysql? main_pool works well with unix shadow files but i don't know how i can do with mysql. Any ideas? Regards, Umar Draz _ Dave vs. Carl: The Insignificant