autthentication error

2010-05-11 Thread shirkavand
Hi, I have configurated a freeradius server using MySql authentication. When i run radtest i get a succefull response: rad_recv: Access-Request packet from host 127.0.0.1 port 45562, id=209, length=59 User-Name = sqltest User-Password = testpwd NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 +-

Re: autthentication error

2010-05-11 Thread Alan DeKok
shirkavand wrote: As i can see the error is located here: Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP NAK [eap] NAK asked for unsupported type 25 [eap] No common EAP types found. [eap] Failed in EAP select Exactly.

Re: The client does not connect _*_*_*_

2010-05-11 Thread htt thanh
ok, I think the server is reading files on the path: /usr/local/etc/ so, I modified the file /usr/local/etc/raddb/clients.conf by adding: client ipipgw { ipaddr = 192.168.6.201 secret = testing123 shortname = c3725 nastype = cisco

Re: autthentication error

2010-05-11 Thread Alan Buxey
Hi, I have configurated a freeradius server using MySql authentication. When i run radtest i get a succefull response: built yourself? so, basic SQL works. good. however, your windows client didnt - and this error here: Found Auth-Type = EAP +- entering group authenticate {...} [eap]

Re: The client does not connect _*_*_*_

2010-05-11 Thread Alan Buxey
Hi, User-Password = -*\333\003D\215\345\\\302\036\251\320:\373ȇ note the mess ..then note this warning: WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! not sure how much more help the server can give you. you have

Re: radius not recieving username from cisco

2010-05-11 Thread Alan DeKok
Athiqur Rahman wrote: When I open ppp connection to from windows xp laptop to my as5300 it is not sending the login credentials to the FreeRadius. FeeRadius says the username attribute was not found shrug Fix the NAS so that it sends a User-Name. Consult the NAS documentation for how to

Re: Freeradius 2.1.6: \ in %{SQL-User-Name}

2010-05-11 Thread Alan Buxey
Hi, I am using my Freeradius 2.1.6 to do PEAP for Windows XP clients. The usernames are in format 'Domain_name\username' I am using postgresql and my safe-characters in the dialup.conf is set to: My radcheck table looks like: id | username | attribute | op |value 4

Re: The client does not connect _*_*_*_

2010-05-11 Thread htt thanh
Hi, I don't know why the user-password id encrypted, how can I make a cleartext secret...;(( thank in advance On 11 May 2010 14:23, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, User-Password = -*\333\003D\215\345\\\302\036\251\320:\373ȇ note the mess ..then note this warning:

Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Iain Grant
I am trying to build a radius server on a Licencesed RedHat ES 5.5 with the stock Freeradius 2.1.7 rpms. The problem is %{Stripped-User-Name} does not seem to be working properly. If I run radius -X I can see the following [mschapv2] +- entering group MS-CHAP {...} [mschap] Told to do

Re: The client does not connect _*_*_*_

2010-05-11 Thread Thibault Le Meur
Le 11/05/2010 10:09, htt thanh a écrit : Hi, I don't know why the user-password id encrypted, how can I make a cleartext secret...;(( The pb is with your client shared secret: the secret you set in /etc/raddb/clients.conf and in your NAS configuration. It seems that you haven't set the same

Re: Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Alan Buxey
Hi, The problem is %{Stripped-User-Name} does not seem to be working properly. here was a chhange to conditional expansions some time backthe output you see is just a warningif you 'man unlang' you can see how such a condition should be written.the default config that ships with

Re: framedipaddress

2010-05-11 Thread sunhualing
Then,which attribute they support? framedipaddress is the popular one,if they don't support ,you can ask which attribute(describe the user's IP address) they support and add this attribute to the radacct schema . that's ok. freeradius is easy to add new attributes 2010/5/10 Paweł Pogorzelski

Re: radiusd: segmentation fault

2010-05-11 Thread sunhualing
Nothing I can help. Maybe you can check the dynamic shared library,they may conflict with radiusd, 2010/5/7 kes-...@yandex.ru Здравствуйте, Коньков. Вы писали 6 мая 2010 г., 23:58:44: КЕ Help pls to resolve problem why radiusd segfault КЕ or give clue КЕ kes# radiusd -v КЕ radiusd:

Re: free NAS ?

2010-05-11 Thread sunhualing
any other function do you need? On Sat, May 8, 2010 at 3:46 AM, VU VAN HUNG vanhung2...@gmail.com wrote: sunhualing wrote: hostapd as a NAS, authenticator wpa-supplicant as a supplicant On Fri, May 7, 2010 at 1:31 AM, Jeff Voskamp javos...@uwaterloo.camailto: javos...@uwaterloo.ca wrote:

RE: Freeradius-Users Digest, Vol 61, Issue 37

2010-05-11 Thread Iain Grant
The problem is %{Stripped-User-Name} does not seem to be working properly. here was a chhange to conditional expansions some time backthe output you see is just a warningif you 'man unlang' you can see how such a condition should be written.the default config that ships with 2.1.8

Re: Freeradius-Users Digest, Vol 61, Issue 37

2010-05-11 Thread Alan Buxey
Hi, In fact I even cut and pasted the ntlm line from the working radius to the redhat radius server. Has someone else built a RedHat radius 2.1.7 server to point to an Windows ADS ?? yes...thats what we currently hve. you do not have a problem...the config definition will work...its just

Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Iain Grant
Solved it, I had not added my realms to the bottom of proxy.conf. Once changed everything is working. Thanks iain __ SCRI, Invergowrie, Dundee, DD2 5DA. The Scottish Crop Research Institute is a charitable company limited by guarantee.

Re: Freeradius 2.1.7 mschap2 depreciated condition

2010-05-11 Thread Alan Buxey
Hi, The problem is %{Stripped-User-Name} does not seem to be working properly. further to this, the stripped-user-name doesnt exist - which is why its not being usedif this is the case then you are not running required module that understands the realm part or do not have scri.ac.uk as a

Adding a signed certificate from a signing authority

2010-05-11 Thread Iain Grant
Apologies I seem to be hogging this today. My radius server is working fine, so now I want to add a signed certificate from a certificate authority. Are there any pointers on how to do this. I have found and carried out the steps on the wiki site around using snake oil certificates and then

RE: framedipaddress

2010-05-11 Thread Paweł Pogorzelski
Than You sunhualing for advice. I'm waiting for answer from Meru. -- Pozdrawiam/Best regards Paweł Pogorzelski e-mail: ppogorzel...@gmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Simultneous-Use + SQL + Checkrad

2010-05-11 Thread Galatóczki István
Hi All! I use Freeradius 2.0.4(deb pack) with Mysql 5.0.51. The online users check not work in the NAS with checkrad script my network. I read the list and forums but not founded solution. Question: working the checkrad script without radutmp? my config: radcheck- Simultaneous-Use: =1

Re: Adding a signed certificate from a signing authority

2010-05-11 Thread Alan Buxey
Hi, I have found and carried out the steps on the wiki site around using “snake oil” certificates and then creating your own producution certificates. But I now would like to add the externally signed certificate for added security. surejust put the relevant files into the right

RE: framedipaddress

2010-05-11 Thread Paweł Pogorzelski
Unfortunately Meru claims that the client IP address is not sent to the radius in any other attribute either. -- Pozdrawiam/Best regards Paweł Pogorzelski e-mail: ppogorzel...@gmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: framedipaddress

2010-05-11 Thread Alan DeKok
Paweł Pogorzelski wrote: Unfortunately Meru claims that the client IP address is not sent to the radius in any other attribute either. Buy a NAS that works. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to demonize 'radiusd -s'

2010-05-11 Thread Коньков Евгений
Hi, FreeRadius. Is this posible to demonize 'radiusd -s' ? -- Eugen Konkov mailto:kes-...@yandex.ru - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius-server-2.1.8

2010-05-11 Thread dorra aa
I installed on a server machine: freeradius-server-2.1.8 I wrote in the terminal: radiusd-X Now I want to test a remote access client with radtest, is what the client must be equipped with He commend freeradius-server-2.1.8 or not? what I should do in the client side

Re: freeradius-server-2.1.8

2010-05-11 Thread Alan DeKok
dorra aa wrote: I installed on a server machine: freeradius-server-2.1.8 I wrote in the terminal: radiusd-X Why would you do that? Nothing in *any* documentation says that's a good idea. Now I want to test a remote access client with radtest, is what the client must be equipped with He

RE: freeradius-server-2.1.8

2010-05-11 Thread dorra aa
this is not my idea.it's the idea of my professor. i have no idea about the radius and he wants me to work in it just in 2 weeks.I'm shearching in many forum but i don't understand because of many errorsnow i want to test with radtest name password 192.168.1.12 1812 secretshould i write it in

Re: freeradius-server-2.1.8

2010-05-11 Thread John Dennis
On 05/11/2010 04:17 PM, dorra aa wrote: this is not my idea.it's the idea of my professor. i have no idea about the radius and he wants me to work in it just in 2 weeks. You want us to do your course assignments for you? -- John Dennis jden...@redhat.com Looking to carve out IT costs?

Re: freeradius-server-2.1.8

2010-05-11 Thread Arran Cudbard-Bell
On May 11, 2010, at 1:25 PM, John Dennis wrote: On 05/11/2010 04:17 PM, dorra aa wrote: this is not my idea.it's the idea of my professor. i have no idea about the radius and he wants me to work in it just in 2 weeks. You want us to do your course assignments for you? Kids these days, tsk

Re: freeradius-server-2.1.8

2010-05-11 Thread Mike Nichols
running radius in debug mode in the background shouldn't provide anything useful tho. just a thought... On Tue, 11 May 2010 19:36:24 +, dorra aa wrote: I installed on a server machine: freeradius-server-2.1.8 I wrote in the terminal: radiusd-X Mike Nichols My Own SOHO

Re: freeradius-server-2.1.8

2010-05-11 Thread Marinko Tarlac
Maybe the professor wanted to learn him how to work with operator and radiusd -X is just a simple command :) now, lets get to work, Tell us what you want to achieve then there is a chance to see something usable on this list Mike Nichols wrote: running radius in debug mode in the

RE: freeradius-server-2.1.8

2010-05-11 Thread dorra aa
when i wrote that # radtest dorra mesh 192.168.1.65 1812 testing123 i had this error r...@pfe-laptop:/home/pfe/freeradius-server-2.1.8/raddb# radtest dorra mesh 192.168.1.65 1812 testing123 Sending Access-Request of id 224 to 192.168.1.65 port 1812 User-Name = dorra User-Password = mesh