Re: reauth-problem with WPA2-tls

2010-06-03 Thread Alexander Clouter
Andreas Hartmann andihartm...@01019freenet.de wrote: If fast_reauth in wpa_supplicant is disabled, the reauthentication works fine, but the connection between the AP and the supplicant ist interrupted for about 20 seconds - much to long :-). Do you have any idea how to solve this problem?

Re: expired user accounts between two dates

2010-06-03 Thread Ana Gallardo
Hello again, eventually the solution for me is: -- MYSQL mysql select * from radcheck where username = prueba; +-+--+++-+ | id | username | attribute | op | value | +-+--+++-+ | 228 |

Re: reauth-problem with WPA2-tls

2010-06-03 Thread Bjørn Mork
Andreas Hartmann andihartm...@01019freenet.de writes: Yes, you're right - I meant option eap - tls - cache - enable is switched _on_ and fast_reauth is on too on the supplicant. My wrong :-(. You can see it at this log entry at the initial login: Wed Jun 2 20:29:14 2010 : Info: [tls] Adding

Re: reauth-problem with WPA2-tls

2010-06-03 Thread Alexander Clouter
Bjørn Mork bj...@mork.no wrote: Andreas Hartmann andihartm...@01019freenet.de writes: Yes, you're right - I meant option eap - tls - cache - enable is switched _on_ and fast_reauth is on too on the supplicant. My wrong :-(. You can see it at this log entry at the initial login: Wed Jun 2

Re: service startup problem on CentOS 5.5 freeradius 2.1.9

2010-06-03 Thread Fred MAISON
Hello, The failure to start daemon using service radiusd start has the following cause : * The problem does not occurs with default config. When /etc/init.d/radiusd is launched by init or using service command, it seems environment does not have $ENV{HOSTNAME} initialized. (CentOS 5.4, CentOS

Re: reauth-problem with WPA2-tls

2010-06-03 Thread Bjørn Mork
Alexander Clouter a...@digriz.org.uk writes: The 'No information to cache' means you do not have anything useful (for example 'User-Name') in the reply packet. Makes sense. In the post-auth of my inner-eap virtual server I have added: post-auth { ... # needed for TTLS cache

Re: reauth-problem with WPA2-tls

2010-06-03 Thread Bjørn Mork
Bjørn Mork bj...@mork.no writes: Alexander Clouter a...@digriz.org.uk writes: The 'No information to cache' means you do not have anything useful (for example 'User-Name') in the reply packet. Makes sense. In the post-auth of my inner-eap virtual server I have added: post-auth {

Re: reauth-problem with WPA2-tls

2010-06-03 Thread Alexander Clouter
Bjørn Mork bj...@mork.no wrote: The 'No information to cache' means you do not have anything useful (for example 'User-Name') in the reply packet. Makes sense. In the post-auth of my inner-eap virtual server I have added: post-auth { ... # needed for TTLS cache update

radtest and IPv6 support

2010-06-03 Thread Panagiotis Georgopoulos
Hello all, I am trying to use radtest to test my freeradius configuration over IPv6. I have configured IPv6 on my freeradius server and a client machine from which I am firing radtest. However when I issue radtest bob hello 2001:db95::100 100 testing123 on my client I get a

Re: Fwd: SSL issues

2010-06-03 Thread martin.von.witt...@iserv.eu
You should install the root CA *first*. See http://deployingradius.com/documents/configuration/eap.html I'm currently trying to set the network up manually, but I'm not getting this to work either atm. I'll attach the full debug log from the initial attempt below. The Windows 7

username and attributes

2010-06-03 Thread rosect190
I have two users (u1 and u2) and want to use PEAP to auth them. For each user, I will return an attribute. For example, attr1 for u1 and attr2 for u2. An interesting thing is that, when my out-tunnel user name is anonymous, I do not see any attribute be returned although the auth is

Re: reauth-problem with WPA2-tls

2010-06-03 Thread Andreas Hartmann
Alexander Clouter schrieb: Bjørn Mork bj...@mork.no wrote: Andreas Hartmann andihartm...@01019freenet.de writes: Yes, you're right - I meant option eap - tls - cache - enable is switched _on_ and fast_reauth is on too on the supplicant. My wrong :-(. You can see it at this log entry at the

HOW TO USE OPT + MYSQL?

2010-06-03 Thread miaowang
OTP can do mysql were used for user authentication, for example, some users use the OTP authentication, some users in the user authentication using MYSQL? OTP also use the time to authorize it? Is how to attribute it to his return? I used the login authentication CISCO, thank you 2010-06-04

little sql help required

2010-06-03 Thread Strong, Mark
All, I've read the SQL_HOWTO, and have it working, however I'm trying to understand this bit in the example. group { sql1 { fail = 1 notfound = return noop = 2 ok = return updated = 3 reject = return userlock = 4 invalid = 5 handled = 6

i was puzzled now

2010-06-03 Thread Spacelee
Q1.what's the difference between radgroupcheck and radgroupreply? Q2. if i want to add a group which users in that group can have the limitation: it will expirate in 2 days? how to set the attribute... sorry for asking so silly questionsand thanks for you reply... -- Spacelee - List

RE: i was puzzled now

2010-06-03 Thread Tim Sylvester
Q1.what's the difference between radgroupcheck and radgroupreply? radgroupcheck is similar to radcheck. These tables are “checked” to authorize/authenticate a user. radgroupreply is similar to radreply. These tables have the attributes that are sent back to the NAS in the reply packet.

Re: i was puzzled now

2010-06-03 Thread Spacelee
i add an expiration to the group, but it seems i can only make a definite expiration what i want is all users registers to this group have the ability user1 registers at 2010-1-1, and expiration time is 2010-1-2 user2 registers at 2010-1-2, and expiration time is 2010-1-3 i know i can add