Activation of LDAP module

2010-08-31 Thread Fernando Calvelo Vazquez
Hi guys: I'm trying to activate ldap authentication part at config files. But when I uncomment next lines: Auth-Type LDAP { ldap } I get next error when service starts up Module: Checking authenticate {...} for more modules to load

Adding Attributes in Access-Accept

2010-08-31 Thread Chidanand Gangur
Hi All, I have a set up where in user is Proxyed to home server for authentication, things are working fine. In the response Access-Accept I see the following: rad_recv: Access-Accept packet from host 192.168.7.40 port 1812, id=195, length=68 Proxy-State = 0x3530 Framed-Protocol = PPP

Re: Activation of LDAP module

2010-08-31 Thread Peter Lambrechtsen
Looks like you need to recompile openldap as symbol is missing from the shared library. Then recompile freeradius against that newer version of openldap On Tue, Aug 31, 2010 at 6:52 PM, Fernando Calvelo Vazquez fernando.calv...@esrf.fr wrote: Hi guys: I'm trying to activate ldap

Re: Simultaneous-Use

2010-08-31 Thread Student University
its worked after changing the NAS type to other instead of cisco , On Mon, Aug 30, 2010 at 11:19 PM, ziko emobux...@yahoo.com wrote: Go to /etc/raddb/sql/mysql/dialup.conf file and find Simultaneous Use Checking Queries and there uncomment needed lines. then add simultaneous-use attribute

Re: rlm_perl error

2010-08-31 Thread Bjørn Mork
JUND, Aurélien aurelien.j...@sfr.com writes: example.pl: sub authorize { if ($RAD_REQUEST{'Service-Type'} = Framed-User){ This isn't a perl boolean expression... $RAD_CHECK{'Cleartext-Password'} = 1; $RAD_REPLY{'Callback-Number'} = Number; return

EAP-TTLS with mschapv2 inner authentication issue

2010-08-31 Thread matteo
Hello all, I'm trying to use Freeradius 21.1.9 EAP-TTLS with MSCHAPv2 as inner authentication against an OpenLDAP server with crypt password encryption scheme. the following is my eap.conf relevant part eap { default_eap_type = ttls ttls {

Re: EAP-TTLS with mschapv2 inner authentication issue

2010-08-31 Thread Phil Mayers
On 08/31/2010 10:23 AM, mat...@crs4.it wrote: Hello all, I'm trying to use Freeradius 21.1.9 EAP-TTLS with MSCHAPv2 as inner authentication against an OpenLDAP server with crypt password encryption scheme. That is not possible I'm afraid. MS-CHAP requires access to the NT/LM hashes (or

Re: No authenticate method (Auth-Type) found

2010-08-31 Thread Isabelle RECH
Hi Alan, I 've found the reason why le rlm_ldap module was not loaded. Now it's a little better i.e., but now the LDAP can't authenticate my account: Below the new output when running radtest: /usr/bin/radtest/ -d /etc/freeradius ldap 127.0.0.1:1812 10 testing123: r/ad_recv:

Re: EAP-TTLS with mschapv2 inner authentication issue

2010-08-31 Thread Fajar A. Nugraha
On Tue, Aug 31, 2010 at 4:23 PM, mat...@crs4.it wrote: Hello all, I'm trying to use Freeradius 21.1.9 EAP-TTLS with MSCHAPv2 as inner authentication against an OpenLDAP server with crypt password encryption scheme. Short answer: you can't. MSCHAPv2 needs clear text password. You can't use

Re: Failed (re-)authentification after some time...

2010-08-31 Thread Jan Zacharias
Hey Alan, you suggested: Fix is so that nothing is blocking the server.   Call me dump, but I have no idea what to look for. One idea: is ntlm_auth referred to as child? Maybe I sould write a wrapper and see how long execution of this helper program takes, or can I somehow log what

Re: No authenticate method (Auth-Type) found

2010-08-31 Thread Alan DeKok
Isabelle RECH wrote: Hi Alan, Don't CC me on messages to the list. I *do* read the list. rlm_ldap: ldap_search() failed: Operations error Install 2.1.7 or later, and see chase_referrals and rebind in raddb/modules/ldap Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Failed (re-)authentification after some time...

2010-08-31 Thread Alan DeKok
Jan Zacharias wrote: Call me dump, but I have no idea what to look for. Neither do I. It's your system... One idea: is ntlm_auth referred to as child? Maybe I sould write a wrapper and see how long execution of this helper program takes, Possibly, yes. Alan DeKok. - List

Re: Adding Attributes in Access-Accept

2010-08-31 Thread Chidanand Gangur
Hi Alan, Thank you for your quick response. I will definitely explore unlang. Right now I tried working with attr_rewrite module things worked as expected. Thanks Regards, Chidanand On Tue, Aug 31, 2010 at 4:44 PM, Alan DeKok al...@deployingradius.comwrote: Chidanand Gangur wrote: I do

Re: VLAN Assignment of Wifi-Clients

2010-08-31 Thread Marten Pape
Alan DeKok schrieb: Marten Pape wrote: Now my goal is to tell the NAS to assign every wifi-packet to a certain VLAN. I don't need to have a dynamic assignment of VLAN based on usernames or something else. One VLAN would be sufficient. You can assign the vlan in the post-auth

Re: VLAN Assignment of Wifi-Clients

2010-08-31 Thread Marten Pape
Alan DeKok schrieb: Marten Pape wrote: Now my goal is to tell the NAS to assign every wifi-packet to a certain VLAN. I don't need to have a dynamic assignment of VLAN based on usernames or something else. One VLAN would be sufficient. You can assign the vlan in the post-auth

Re: VLAN Assignment of Wifi-Clients

2010-08-31 Thread Arran Cudbard-Bell
On Aug 31, 2010, at 8:48 AM, Marten Pape wrote: Alan DeKok schrieb: Marten Pape wrote: Now my goal is to tell the NAS to assign every wifi-packet to a certain VLAN. I don't need to have a dynamic assignment of VLAN based on usernames or something else. One VLAN would be sufficient.

Re: CA_file vs. CA_path

2010-08-31 Thread David Mitchell
David Mitchell wrote: Alan DeKok wrote: David Mitchell wrote: I now have 2.1.10 compiled and running. It seems to work fine. I did have to make one change to my configuration. I had been using CA_path to refer to the certificates which can authenticate clients for EAP-TLS authentication in

ask for help on WiMAX + Freeradius + Disconnect

2010-08-31 Thread Xiaochen
Hello, friends, As I met some problems when using Freeradius to send Disconnect Request. Hope you can give me any suggestions. Please let me describe my issue. First I created a packete.txt for radclinet.exe. The content of packet.txt is as: Acct-Session-Id=0001 Calling-Station-Id=001E310008CC

ask for help on WiMAX + Freeradius + Disconnect

2010-08-31 Thread Xiaochen
Hello, friends, As I met some problems when using Freeradius to send Disconnect Request. Hope you can give me any suggestions. Please let me describe my issue. First I created a packete.txt for radclinet.exe. The content of packet.txt is as: Acct-Session-Id=0001 Calling-Station-Id=001E310008CC