Re: NT_STATUS_WRONG_PASSWORD: Wrong Password!!!

2011-12-01 Thread Alan DeKok
Guillermo W. Llanes Suárez wrote: _*when I do the test using mschap radtest-t is when the key is erroneous*_ /radtest -t mschap gwilliam 1qazxsw23edc@ localhost 0 testing123/ Because you edited the configuration and broke it. Don't do that. Alan DeKok. - List info/subscribe/unsubscribe?

Re: freeradius on FreeBSD - system passwords

2011-12-01 Thread Alan DeKok
Jim Pazarena wrote: Ahh. the FreeBSD docs indicate that the default for password encryption is MD5. That doesn't matter. Now I need to learn how to use MD5 within freeradius. You shouldn't have to. FreeRADIUS has worked on FreeBSD for *years*. It calls a FreeBSD function to get the

Re: freeradius on FreeBSD - system passwords

2011-12-01 Thread Arran Cudbard-Bell
On 1 Dec 2011, at 09:52, Alan DeKok wrote: Jim Pazarena wrote: Ahh. the FreeBSD docs indicate that the default for password encryption is MD5. If the password encryption is MD5 then you'll have to use PAP or an EAP method with a PAP inner. Nothing else will work. -Arran Arran Cudbard-Bell

Re: NT_STATUS_WRONG_PASSWORD: Wrong Password!!!

2011-12-01 Thread Guillermo W. Llanes Suárez
El 01/12/2011 3:49, Alan DeKok escribió: Because you edited the configuration and broke it. Don't do that. thanks alan, the main problem when I try to authenticate a client EAP (PEAP) against the radius server when it attempts to authenticate using ntlm_auth is wrong, however, is

Re: NT_STATUS_WRONG_PASSWORD: Wrong Password!!!

2011-12-01 Thread Fajar A. Nugraha
2011/12/1 Guillermo W. Llanes Suárez gwill...@uci.cu: El 01/12/2011 3:49, Alan DeKok escribió: Because you edited the configuration and broke it.   Don't do that. thanks alan, the main problem when I try to authenticate a client EAP (PEAP) against the radius server when it attempts to

Re: annoying stop retransmissions.

2011-12-01 Thread Alexandre Chapellon
Le 29/11/2011 14:02, Phil Mayers a écrit : On 29/11/11 12:04, Fajar A. Nugraha wrote: It may be suitable to workaround some db limitation. If the db can't do INSERT ... ON DUPLICATE KEY UPDATE, you might get away with INSERT on the main query and UPDATE on _alt. However we use mysql (which

Accounting-Response dependence

2011-12-01 Thread RudolfSusnik
Hello, I have freeradius 2.1.12 installed on 64bit CentOS. Radius-Accounting messages are logged on MySql (I call mysql procedure to write into the table). When execution of mysql procedure takes a while, accounting-response is delayed to accounting-request according to the procedure execution

Re: Accounting-Response dependence

2011-12-01 Thread Alan DeKok
RudolfSusnik wrote: When execution of mysql procedure takes a while, accounting-response is delayed to accounting-request according to the procedure execution delay. That's how accounting works. When MySQL goes down, accounting-response is sent immediately. Is it possible to configure

Re: Accounting-Response dependence

2011-12-01 Thread RudolfSusnik
Effective solutions are usualy simple ;) Tnx Alan! Regards, Rudolf. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Accounting-Response-dependence-tp5038687p5038812.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

AK Timeout

2011-12-01 Thread David Peterson
In one of my NAS release notes it mentions: In the external AAA, the re-authentication timer (AK Life time) should be set to a value higher than 1hour. Where would I set this? David - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: AK Timeout

2011-12-01 Thread Alan DeKok
David Peterson wrote: In one of my NAS release notes it mentions: “In the external AAA, the re-authentication timer (AK Life time) should be set to a value higher than 1hour.” Where would I set this? What's an AK life time ? Alan DeKok. - List info/subscribe/unsubscribe? See

freeradius, problem with chap ?

2011-12-01 Thread Piotr
Hello I have two kind of remote access on cisco asa, first ovia ssl vpn and second via l2tp/ipsec (for mobile phones with androids). Both access are made on the same cisco and both autorizen on the same freeradius server with motp ( mobile one time password). Access via ssl vpn works correct

Re: freeradius, problem with chap ?

2011-12-01 Thread James J J Hooper
On 01/12/2011 22:41, Piotr wrote: This is debug from l2tp/ipsec connection: CHAP-Password = 0x01972f0886c4e5e2f30e32053dbcf67504 [chap] login attempt by tom3 with CHAP password [chap] Cleartext-Password is required for authentication ++[chap] returns invalid Failed to authenticate the

Change of network adapters in radius server

2011-12-01 Thread Roland Pinches
Hi, We've run into a problem with our freeradius server virtual machine. It's a RHEL5.5 VM running on ESXi 4.1 and it talks to a cisco NAS. It currently works but we have performance issues, which I have partly tracked down to a very specific VMware issue - if running linux with more than 1 vCPU,

Re: Change of network adapters in radius server

2011-12-01 Thread Sven Hartge
Roland Pinches rolyp...@ihug.co.nz wrote: We've run into a problem with our freeradius server virtual machine. It's a RHEL5.5 VM running on ESXi 4.1 and it talks to a cisco NAS. It currently works but we have performance issues, which I have partly tracked down to a very specific VMware issue

Getting NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) when using ntlm_auth

2011-12-01 Thread Angelica Delgado
I follow http://deployingradius.com/documents/configuration/active_directory.html to configure freeradius with Active Directory. Samba and Kerberos works. When running ntlm_auth --request-nt-key command and it works but through Freeradius, it gives NT_STATUS_WRONG_PASSWORD. Following is the

Re: Change of network adapters in radius server

2011-12-01 Thread Roland Pinches
On 12/02/2011 12:21 PM, Sven Hartge wrote: Roland Pinches rolyp...@ihug.co.nz wrote: We've run into a problem with our freeradius server virtual machine. It's a RHEL5.5 VM running on ESXi 4.1 and it talks to a cisco NAS. It currently works but we have performance issues, which I have partly

RE: AK Timeout

2011-12-01 Thread David Peterson
Sigh, I wish I knew. I was hoping it would make sense to someone on this list. I will bug the NAS manufacturer for clarification. David -Original Message- From: freeradius-users-bounces+davidp=wirelessconnections@lists.freeradius.org

Re: AK Timeout

2011-12-01 Thread Fajar A. Nugraha
On Fri, Dec 2, 2011 at 6:41 AM, David Peterson dav...@wirelessconnections.net wrote: Sigh, I wish I knew.  I was hoping it would make sense to someone on this list. My best GUESS would be Acct-Interim-Interval For example, when using chillispot, Acct-Interim-Interval (if you use it) must be

configuration freeradius for no simultaneous use

2011-12-01 Thread tolik_shavlov...@mail.ru
Hi, i need your help in configuration freeradius for no simultaneous use. So, i need one active user per login/password. I configured user as follow: te...@wimax.com Cleartext-Password := test Framed-Filter-Id = SP=data:MSF=data;, Simultaneous-Use = 1, but my WIMAX CPEs

Re: configuration freeradius for no simultaneous use

2011-12-01 Thread Fajar A. Nugraha
On Fri, Dec 2, 2011 at 2:31 PM, tolik_shavlov...@mail.ru tolik_shavlov...@mail.ru wrote: Hi, i need your help in configuration freeradius for no simultaneous use. simultanouse use limit is somewhat ... awkward. So, i need one active user per login/password. I configured user as follow:

Re: configuration freeradius for no simultaneous use

2011-12-01 Thread Alan DeKok
tolik_shavlov...@mail.ru wrote: i need your help in configuration freeradius for no simultaneous use. doc/Simultaneous-Use See also the Wiki. Have you read that documentation and followed the instructions there? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Getting NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) when using ntlm_auth

2011-12-01 Thread Alan DeKok
Angelica Delgado wrote: I follow http://deployingradius.com/documents/configuration/active_directory.html to configure freeradius with Active Directory. Samba and Kerberos works. When running ntlm_auth --request-nt-key command and it works but through Freeradius, it gives

Re: Change of network adapters in radius server

2011-12-01 Thread Alan DeKok
Roland Pinches wrote: Is there something I have missed that binds radius to a specific MAC address? No. It *does* bind to a specific IP address, if you've configured it to do that. Can anyone offer suggestions? I can provide the output from radiusd -X if needed but will take me a day or