Re: adding eap-tls/peap/ttls support to freeradius problem

2009-11-19 Thread Tomas Pelka
On 11/17/2009 11:25 PM, Alan Buxey wrote: hi, its not a peap/ttls/eap problem - its a problem with linking to your SQL libraries. i guess you want to use postgresql? have you got the psqgl devel libraries etc installed? and 2.0.4 is very very old now alan - List info/subscribe/unsubscribe?

RE: Expanding run-time variables and checking access_attr for allow

2009-11-19 Thread Nicolás Velázquez
Hi Ivan, The second question. If I put, ONLY FOR CHECK, the base_filter = (uniquemember=cn=nicolas.velazq...@uam.es,cn=users,dc=uam,dc=es) the LDAP replies with No Such Object. But the radius authorization sends ok. The misconfiguration of LDAP is not the question here. The

Re: Freeradius-Users Digest, Vol 55, Issue 87

2009-11-19 Thread Gilbert Lo
Thank you for your message. I am away until Nov 19th. I will respond to your message on my return . For urgent matters, please contact helpd...@stgeorges.bc.ca . Cheers, Gilbert Lo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: chap authentication problem

2009-11-19 Thread Alan DeKok
shivashankar wrote: users file entry moto Auth-Type := CHAP, Cleartext-Password := shiva Delete the 'Auth-Type := CHAP' text. It is not needed. Reply-Message = Hello shiva , %u and what about Auth-Type := MS-CHAP. The server will figure it out. You do NOT need

Re: chap authentication problem

2009-11-19 Thread shiva shankar
Hi Alan thax for u r reply 2009/11/19 Alan DeKok al...@deployingradius.com shivashankar wrote: users file entry moto Auth-Type := CHAP, Cleartext-Password := shiva Delete the 'Auth-Type := CHAP' text. It is not needed. Reply-Message = Hello shiva , %u and

module invoking problem

2009-11-19 Thread shivashankar
hi , i am using freeradius 2.1.6 in solaris 10. i created one module like rlm_moto (this module comunictes with java file in jboss server)and configured in (sites-available/ ) default file in Authentication section case one: Authentication{ moto } like.. while sending

Re: how to configure realm in freeradius

2009-11-19 Thread tnt
sample configurations for realm in freeradius 2.1.6 See proxy.conf. Ivan Kalik - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pptp + perl + freeradius???

2009-11-19 Thread tnt
The documents i mentioned above was about pptp installation not freeradius itself. Sure i read docs about freeradius also. Even your main README file.!! If you did read it, why did you do this: There were some other virtual servers running on that freeradius server, Just removed them for my

RE: Expanding run-time variables and checking access_attr for allow

2009-11-19 Thread tnt
If I put, ONLY FOR CHECK, the base_filter = (uniquemember=cn=nicolas.velazq...@uam.es,cn=users,dc=uam,dc=es) the LDAP replies with No Such Object. But the radius authorization sends ok. The misconfiguration of LDAP is not the question here. The question here is: documentation says if

Re: module invoking problem

2009-11-19 Thread tnt
hi , i am using freeradius 2.1.6 in solaris 10. i created one module like rlm_moto (this module comunictes with java file in jboss server)and configured in (sites-available/ ) default file in Authentication section case one: Authentication{ moto } like..

Re: EAP + TLS + Unix passwords

2009-11-19 Thread John Dennis
On 11/19/2009 01:43 PM, Andy Theuninck wrote: I'm trying to set up freeradius to handle WPA authentication on my network. I've managed to get the AP radius servers talking to one another and the SSL certificates loaded and configured, but I can't figure out how to get the username passwords

Re: pptp + perl + freeradius???

2009-11-19 Thread Oguzhan Kayhan
The documents i mentioned above was about pptp installation not freeradius itself. Sure i read docs about freeradius also. Even your main README file.!! If you did read it, why did you do this: There were some other virtual servers running on that freeradius server, Just removed them for

Re: EAP + TLS + Unix passwords

2009-11-19 Thread tnt
Ideally, I'm looking for an pointers what I'm doing wrong 1.1.3 is not latest available for CentoOS: http://wiki.freeradius.org/Red_Hat_FAQ OR an indication that what I'm trying to pull off is impossible. You are using EAP-TTLS/MS-CHAP with system (crypted) passwords. It's impossible:

Re: pptp + perl + freeradius???

2009-11-19 Thread tnt
The documents i mentioned above was about pptp installation not freeradius itself. Sure i read docs about freeradius also. Even your main README file.!! If you did read it, why did you do this: There were some other virtual servers running on that freeradius server, Just removed them for

Re: EAP + TLS + Unix passwords

2009-11-19 Thread Bjørn Mork
Andy Theuninck gohan...@gmail.com writes: I'm trying to set up freeradius to handle WPA authentication on my network. I've managed to get the AP radius servers talking to one another and the SSL certificates loaded and configured, but I can't figure out how to get the username passwords

Re: EAP + TLS + Unix passwords

2009-11-19 Thread Andy Theuninck
1.1.3 is not latest available for CentoOS: http://wiki.freeradius.org/Red_Hat_FAQ Understood. I meant it was the latest version the package manager would grab for me. You are using EAP-TTLS/MS-CHAP with system (crypted) passwords. It's impossible:

Re: EAP + TLS + Unix passwords

2009-11-19 Thread tnt
1.1.3 is not latest available for CentoOS: http://wiki.freeradius.org/Red_Hat_FAQ Understood. I meant it was the latest version the package manager would grab for me. You are using EAP-TTLS/MS-CHAP with system (crypted) passwords. It's impossible:

RE: EAP + TLS + Unix passwords

2009-11-19 Thread Alan Buxey
Hi, In the meantime, I managed to make a new mess. I accidentally ran radiusd without the -X option and couldn't figure out how to properly stop it so I just killed the process. Now when I run radiusd -X, it claims to be listening on 1812 and 1813, but nmap says it isn't and I can't get a telnet

RE: EAP + TLS + Unix passwords

2009-11-19 Thread Alan Buxey
Hi, Apologies if previous email appeared in nasty HTML format :-| Alan No virus found in this outgoing message. Checked by AVG - www.avg.com Version: 9.0.707 / Virus Database: 270.14.73/2513 - Release Date: 11/19/09 07:51:00 - List info/subscribe/unsubscribe? See

Re: EAP + TLS + Unix passwords

2009-11-19 Thread Andy Theuninck
Nmap? Why scan ports when you can simply eg 'netstat -an | grep 1812' Lack of thinking on my part? No offense taken; my way was definitely roundabout. Anyhow, after killall restart, this is kind of odd: # netstat -anp | grep 1812 udp0 0 0.0.0.0:18120.0.0.0:*

Re: EAP + TLS + Unix passwords

2009-11-19 Thread Alan DeKok
Andy Theuninck wrote: It looks like radius is opening UDP 1812 (and 1813) but not the corresponding TCP ports anymore and that's why I suddenly can't connect to it - unless I'm misreading the services file and radiusd uses strictly UDP. RADIUS uses only UDP. At least, until my IETF RFC

Re: EAP + TLS + Unix passwords

2009-11-19 Thread Andy Theuninck
 RADIUS uses only UDP. Good to know. Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP + TLS + Unix passwords

2009-11-19 Thread Andy Theuninck
Apologies if it's bad form to reply to myself. radtest didn't have any connection problems, so I just rebooted the AP and that seemed to take care of it. I realized I had a perfectly serviceable smbpassword file mirroring /etc/shaddow and that seems to work just fine with MS-CHAP. Now, my setup

need help authenticating against AD

2009-11-19 Thread Michael Phillips
Hello All, I need some help authenticating against AD. I have followed directions online as best as I can, but things still aren't working as expected. I'm ultimately hoping to have our VPN users and admins logging into Cisco network equipment authenticate against AD through our FreeRADIUS 2

Re: need help authenticating against AD

2009-11-19 Thread Paul Ryszka
Hi, It doesn't llok like you are using ad authentication Are you trying to set up ntlm_auth ? Here is a good description : http://deployingradius.com/documents/configuration/active_directory.html Regards Paul On Thu, 2009-11-19 at 21:37 +, Michael Phillips wrote: Hello All, I need some

Re: EAP + TLS + Unix passwords

2009-11-19 Thread tnt
I realized I had a perfectly serviceable smbpassword file mirroring /etc/shaddow and that seems to work just fine with MS-CHAP. Now, my setup still doesn't *work*, but the debug output from radius sure looks like it's accepting the username password and sending back an OK. So I think I have

Dropping conflicting packet from client xxxxxx:14991 - ID: 126 due to unfinished request 13945

2009-11-19 Thread GeorgePing
Hi, All, My first time posting here. Correct me if the content or category is wrong. I am using freeradius-1.1.8 as well as 1.1.4, each time I got log message at /usr/local/var/log/radius/radius.log Dropping conflicting packet from client x:14991 - ID: 126 due to unfinished request

Re: need help authenticating against AD

2009-11-19 Thread tnt
I need some help authenticating against AD. I have followed directions online as best as I can, but things still aren't working as expected. These: http://deployingradius.com/documents/configuration/active_directory.html I'm ultimately hoping to have our VPN users and admins logging into

Re: EAP + TLS + Unix passwords

2009-11-19 Thread Andy Theuninck
Well, you are using 1.1.3. It's known not to work with Vista, XP SP3 and probably more supplicants. You should upgrade to current version (follow RedHat FAQ). Good to know. I'll have to look into that next. Sending Access-Accept of id 0 to 192.168.1.253 port 2048       MS-MPPE-Recv-Key =

Re: Dropping conflicting packet from client xxxxxx:14991 - ID: 126 due to unfinished request 13945

2009-11-19 Thread tnt
Hi, All, My first time posting here. Correct me if the content or category is wrong. I am using freeradius-1.1.8 as well as 1.1.4, each time I got log message at /usr/local/var/log/radius/radius.log Dropping conflicting packet from client x:14991 - ID: 126 due to unfinished

Re: CUI

2009-11-19 Thread Humberto Cardoza
Hi All I am a new user with Freeradius, now i have it configured with Mysql but, the problem that i have is that the cui table it is not pupulated with information of the active sessions. i get configured the sql/mysql/cui.conf and all the stuff that i found that is necessary, but it simply

Re: CUI

2009-11-19 Thread tnt
I am a new user with Freeradius, now i have it configured with Mysql but, the problem that i have is that the cui table it is not pupulated with information of the active sessions. i get configured the sql/mysql/cui.conf and all the stuff that i found that is necessary, but it simply doesn't

Understanding the freeRADIUS source

2009-11-19 Thread INACIO ALVES
I would like to study the source code of the freeRADIUS because I'm intend to pursue a master's in security. Then I need know where I begin to understand the source code. Best regards! Inácio Alves Bacharel em Matemática(UFC)/Técnico em Conectividade(IFCE)

Re: Accessing a second AV Pair

2009-11-19 Thread Robert White
Ah ha! Thanks for that. I've managed to access my second AVPair by using []. Now, because it's a Quintum, much like a cisco, the value is Quintum-AVPair = h323-incoming-conf-id=34623031 35363261 3031 rather than the preferred Quintum-AVPair = 34623031 35363261 3031 . I

Re: module invoking problem

2009-11-19 Thread shiva shankar
Hi Ivan Kalik, even this is also not working sites-available/default authenticate { Auth-Type moto{ moto } } in rlm_moto module it is not firing (entering) moto_authenticate{ #logic to hit java program with is resides in Jboss server } server showing like this