adding wimax services

2008-07-28 Thread Tamanna Afroze
I want to add wimax services in the freeradius server. I need help in this regard. Help me for starting adding services. -- Tamanna Afroze [EMAIL PROTECTED] [EMAIL PROTECTED] Member, Research and Development Group Commlink Infotech Ltd. - List info/subscribe/unsubscribe? See

Re: adding wimax services

2008-07-28 Thread Alan DeKok
Tamanna Afroze wrote: I want to add wimax services in the freeradius server. I need help in this regard. FreeRADIUS does not currently support WiMAX. We expect that it will have full support for WiMAX by the end of the year. Alan DeKok. - List info/subscribe/unsubscribe? See

clients.conf - identifying a client - sql/ldap

2008-07-28 Thread Johan Meiring
Hi, I have the following setup. Various clients (chillispot) behind broadband (read: dynamic IP) connections. Basically I am selling AAA services. I would like to authotize a nas to use my services in the first place by using the NAS-Identifier and the radius secret. Both the NAS SQL table and

Possible bug in unlang?

2008-07-28 Thread Phil Mayers
We've recently moved our servers to FreeRadius 2, and we've been having reports of some problems with our wireless service. I investigated, and it seems the problem is the following stanza from the inner-tunnel config, which I just copied over from the default configs: post-auth {

Re: Device authentication and User+Device authentication

2008-07-28 Thread Cristian Novac
CURRENT CONDITIONS: I'm currently using FreeRadius server in a system where the server is authenticating to the client using a server certificate. For now, the client is authenticating through username and password. The method used is EAP-TTLS. --- THE TARGET is the client

freeradius crashing issue - malloc failures?

2008-07-28 Thread Ryan Pugatch
Hi everyone,  I seem to be having a problem with FreeRADIUS crashing.  This time, it crashed on Saturday.  I noticed it was down this morning and was able to bring it back up.  This time difference allowed me to go through the log and see what happened when it crashed on Saturday.  Here's the

Invalid EAP Type with Catalyst 2960G IOS 12.2

2008-07-28 Thread nf-vale
Hi all, I'm having a little trouble configuring a Cisco Switch - Catalyst 2960G IOS 12.2 to work properly with EAP-PEAP clients. I've tested the same radius configuration (freeradius 2.0.2) with an HP Procurve 2626 Swicth and all worked just fine. Windows XP clients can authenticate with PEAP

RE: groupmembership and vlan assignment

2008-07-28 Thread Matt Ashfield
Nobody replied to my original post, and I got to thinking, would I be able to use wildcards in my users file to achieve this when looking for which Ldap-Group the user has been placed in? i.e. DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Huntgroup-Name == UNBFWSS, unbldap-Ldap-Group =~

Re: Invalid EAP Type with Catalyst 2960G IOS 12.2

2008-07-28 Thread Alan DeKok
nf-vale wrote: The same clients connected to the Cisco Swicth that it's authenticating in the same freeradius server can not authenticate because freeradius is trying EAP-TLS instead of EAP-PEAP: RADIUS doesn't work that way. FreeRADIUS *offers* an EAP type when the client starts

Re: freeradius crashing issue - malloc failures?

2008-07-28 Thread Alan DeKok
Ryan Pugatch wrote: I seem to be having a problem with FreeRADIUS crashing. This time, it crashed on Saturday. I noticed it was down this morning and was able to bring it back up. This time difference allowed me to go through the log and see what happened when it crashed on Saturday.

Re: groupmembership and vlan assignment

2008-07-28 Thread Alan DeKok
Matt Ashfield wrote: DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Huntgroup-Name == UNBFWSS, unbldap-Ldap-Group =~ “.*staff1”, Autz-Type := Ldap1, Auth-Type := Ldap1 The LDAP Group checking does *equality* checking, not regular expression checking. Sorry. Alan DeKok. - List

Re: Invalid EAP Type with Catalyst 2960G IOS 12.2

2008-07-28 Thread nf-vale
The comments you refer are these ones? ... # This module is the *Microsoft* implementation of MS-CHAPv2 # in EAP. There is another (incompatible) implementation # of MS-CHAPv2 in EAP by Cisco, which FreeRADIUS does not # currently support. mschapv2 { } ... But I also tried with TTLS using

Re: Invalid EAP Type with Catalyst 2960G IOS 12.2

2008-07-28 Thread Alan DeKok
nf-vale wrote: The comments you refer are these ones? No. See the comments on access-challenge. Honestly... eap.conf isn't that big. Reading all of it shouldn't be that hard. But I also tried with TTLS using secureW2 supplicant and the log was similar. If that's the case, my guess

Re: Re: freeradius crashing issue - malloc failures?

2008-07-28 Thread Ryan Pugatch
- Original Message - From: Alan DeKok Sent: 07/28/08 02:21 pm To: FreeRadius users mailing list Subject: Re: freeradius crashing issue - malloc failures? Ryan Pugatch wrote: I seem to be having a problem with FreeRADIUS crashing. This time, it crashed on Saturday. I noticed it

Re: Re: freeradius crashing issue - malloc failures?

2008-07-28 Thread Ryan Pugatch
Sat Jul 26 09:13:15 2008 : Error: rlm_eap: SSL error error:140A1041:SSL routines:SSL_BYTES_TO_CIPHER_LIST:malloc failure Your system is running out of memory. This is bad. If you're not using 2.0.5, upgrade to 2.0.5. Alan DeKok.  Alan, Thanks for the response.  From what I can tell,

Re: Re: Re: freeradius crashing issue - malloc failures?

2008-07-28 Thread Ryan Pugatch
 Sorry for the duped messages.. looks like my webmail client freaked out. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius crashing issue - malloc failures?

2008-07-28 Thread John Dennis
Ryan Pugatch wrote: That being said, I'm running 1.1.7, so I suspect I'm due for an upgrade, anyway. I'm curious as to why Red Hat's repositories still only have version 1.1.3, though. Fedora (F-9) is current with the 2.0.5 release (in the testing repo). When you say Red Hat's repositories

Re: Invalid EAP Type with Catalyst 2960G IOS 12.2

2008-07-28 Thread nf-vale
As always you were absolutely right :) The freeradius server was not properly communicating with the Cisco switch. Now both PEAP and TTLS work alright. Seg, 2008-07-28 às 21:25 +0200, Alan DeKok escreveu: nf-vale wrote: The comments you refer are these ones? No. See the comments on