Re: rlm_eap: Identity does not match User-Name...

Hi, if anybody has the same problem, here's the solution.. i've installed 2.0.0-pre2 and made just the following changes to radiusd.conf: mschap { with_ntdomain_hack = yes ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name}

Re: Example listed in huntgroup file does not work

Hi, I should say that I do not want to use an external solution. Creating a huntgroup for each NAS with the exact same user list does work, but then if I have to change a user I would then have to modify what could be over 100 groups. i think, therein, lies your problem - you havent looked

Re: Example listed in huntgroup file does not work

Hi, # This file can also be used to define restricted access # to certain huntgroups. The second and following lines # define the access restrictions (based on username and # UNIX usergroup) for the huntgroup. # so why not do as i

Re: EAP-TLS - About username sent by supplicant

Hi, My question deals with the username sent by the supplicant when the authentication goes on. At boot time, the username sent is : host/user_name. After the login, the username sent is : user_name. So, I have to create 2 users. I want to cut 'host/' to make this task easier. It is

Re: problem ./configure and MYSql

hi, you have installed the user programs for mysql - the library and the tools/database - but for compiling things that USE mysql, you need to install the development programs for mysql. usually mysql-devel, or mysql-dev or somesuch alan - List info/subscribe/unsubscribe? See

Re: Server blown up after move

Hi, what does the 'less debugging' mode - radiusd -x give you (thats a small x rather thana big X) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius + OpenWrt

Hi, Hi, I want to know is someone is using freeradius with APs with OpenWRT installed. I'd like to hear experiences about it. works. i wouldnt get a too complex system though - unless you are fortunate enough to have one of the routers with 32Mb of RAM and 16Mb of storage alan - List

Re: Two 'secret' entries in clients.conf

Hi, Can the two stanzas both have the same CIDR and can the 'shortnames' be the same or do they have to be different? the device is chosen by its closest matching subnet mask - so you could slowly migrate people by subnet allocation - eg take a /23 of the devices and migrate those...then do

Re:

Hi, #pkill radiusd #radiusd -x -X its a large X for debug mode. the little x also works but is different! alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: question

Hi, Hi sir, i am using freeradius server version(1.1.7) initially i sent some request to server (radiusd),it was turned failure by server. now is there any way, so that without restarting the server (radiusd) , further requests can be sent and get processed by the server. by default

Re: freeradius sql server with high loads

hi, your database is too slow to handle all the accounting in real time. hence the error messages. hence the lack of accounting either speed the DB up - and/or add more handles - or move to putting the details in in 'after real time' - eg with SQL-Relay - putting them into a file then using

Re: mschapv2 problem

hi, we need to see the output of the radiusd -X - the config file looks fine(!) we also need to know HOW you are trying to use MSCHAPv2 - where is your authentication done? users file? DB, ntlm_auth etc etc alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

latest CVS 2.0 beta hang problem

hi, a 2.0 beta (latest CVS head) install server locked up on us today in its early test deployment case secnario a request was proxied off to another RADIUS server. no response came back. server totally fails to respond to anything else. the only entry in the 'radiusd -X' is the last 2 lines

Re: mschapv2 problem

hi, ummm, lets get this right - you are using FreeRADIUS 1.1.0 ? I'm sorry - cannot give any support until you are using 1.1.7 (which has many old and obsolete bugs and issues removed) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mschapv2 problem

Hi, [/udir/delivery_a0028/wacsim_trunk/scripts/services/freeradius-1.1.0//etc/raddb/users]:1 WARNING! Check item EAP-Sim-Rand1 ?found in reply item list for user 123242010015. ?This attribute MUST go on the first line with the other check items ..and many more - this is an obvious

Re: latest CVS 2.0 beta hang problem

Hi, a 2.0 beta (latest CVS head) install server locked up on us today in its early test deployment Ugh. case secnario a request was proxied off to another RADIUS server. no response came back. server totally fails to respond to anything else. the only entry in the 'radiusd

Re: latest CVS 2.0 beta hang problem

hi, okay - got it to do the same with a straight radtest. here is the radiusd -X - several attempts that get proxied away..and never answered. remote site marked as zombie but then any valid requests just dont get serviced. Sending Access-Request of id 14 to 10.1.2.3 port 1812

Re: 2.0.0pre2

Hi, Is the HUP issues fixed? Just noticed it wasn't working, but didn't try CVS. the latest CVS handles HUP a lot better - various modules are now HUP friendly. why are you HUP'ing? what will HUP achieve that a service restart wont? how are you testing the config is sane before restarting the

Re: (was latest CVS 2.0) - logging issue

Hi, A lot has changed since -pre2. Hmm... it *should* be configurable in radiusd.conf. See the log section in radiusd.conf. Some configuration items have moved, because it was dumb to have log_foo, log_bar, log_baz, etc. ha! a lot HAS been changing. damn. you are right. how did i

Re: latest CVS 2.0 beta hang problem

hi, okay - updated to latest CVS after I saw the CVS log messages regarding this proxying issue. things look a little better but at the end the server is dead - unable to respond to any legitimate requests - (ie even simple local non proxy ones) latest output: Sending Access-Request of id 108

Re: FreeRadius as PEAP proxy to IAS

Hi, Everything work OK, Ovislink send request to FreeRadius server, FreeRadius send Access-Request to IAS (mschapv2) IAS send Access-Accept, but Ovislink received Access-Challenge from FreeRadius, one two, three ... and on the end authetication failed. proxied connection - by default you

Re: Error on radius

Hi, 'The maximum number of threads (32) are active, cannot spawn new thread to handle request' FreeRADIUS is getting many many requests but cannot handle them in real time - usually due to the authentication or accounting being too slow - you use SQL or AD for authentication? SQL for

Re: Error on radius

Hi, Thanks Alan, We are using SQL for authentication and accounting - do you think this could be the issue? I could potentially have thousands of requests coming in almost simultaneously, is this going to be too much for the process to handle? i dont know how good your SQL database is -

Re: proxied connection - please example

Hi, Hi Alan, thank you for your quick answer. Please send me some example about this proxy configuration. for example, your-proxied.realm.com Service-Type == Framed-User, Service-Type == Login-User, Login-Service == Telnet, Login-Service == Rlogin,

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Hi, Hi, I want to enable only TTLS authentication and if the client is requesting any other types EAP-TLS or PEAP the authentication should be denied. I am running freeradius-1.1.6, and if try to disable EAP-TLS module the server itself is not starting up. Please let me know if there are any

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Hi, RADIUS certificates for EAP should ALMOST ALWAYS be self-signed. That means that no one else can successfully convince the users to send them the passwords. seconded/thirded. as UK eduroam support I agree that such a closed-loop system provides a better protection. though more config

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Hi, Oh, it exists. It's called subject_match within a network { } stanza of wpa_supplicant, and all the Windows supplicants I've seen so far allow you set your expectations on the server name. It's turned off by default though. agreed. it is there. however, this puts the security on the

Re: I can't get 'access-accept' from Linux clients

Hi, Hi, I can't still figure it out why I can't access from Linux clients. I use version 1.1.7 of freeradius. Linux client is a Fedora 8 system. what is the linux client config? i see the following in your debug rlm_eap: Request found, released from the list rlm_eap: EAP/md5 rlm_eap:

Re: SNMP error

hi, known SNMP issues with 64bit and that version of SNMP. you will need to follow the debug instructions to help debug alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Hi, That road is painful. What we've come up so far with is supplying pre-configured supplicants (SecureW2) that bring the proper CA certificate along and set the expected CN automatically. It can even be preconfigured to auto-discard any other certificates, which doesn't give the user any

Re: LDAP Groups and EAP

hi, I'd like to add into this that if you upgrade to 2.0 then the EAP is simpler and quicker - and your LDAP wont get hit with each request. it'll only get the bare required outside and then the essential inner tunnel stuff. alan - List info/subscribe/unsubscribe? See

Re: probs with accounting Attribute Client-IP-Address was not

Hi, it this a bug or it should be like that ( Client-IP-Address same as NAS-IP-Address. ) ? what makes you think they would be different? the client is your NAS, yes? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SNMP error

Hi, hi alan, i searched the freeradius.org for the debug instructions, but i found nothing. what do you mean exactly by debug instructions i already have this in the radius debug mode read doc/bugs in the distribution tar file. i can send you a copy if your archive doesnt contain it.

Re: help

Hi, i have to install freeRADIUS 1.1.7 on fedora core 7 ,but i am unable to add users to the 'users' file . why? 2.0.0 is out now i am getting help from the website : www.aerospacesoftware.com/radius.html way way way out of date and it doesnt follow current best practice either. johndoe

Re: help again

Hi, if the website is old where should i go buddy http://www.aerospacesoftware.com/radius.html theres a bunch of docs that come in the freeradius tar archive (they'll end up in /usr/local/share/doc/freeradius or wherever you're chosen path during configure ; make ; make install theres also

Re: seg fault

Hi, If malloc() is core dumping, then something else is going wrong. i.e. some other part of the server is over-writing memory. when you say the server i assume you mean freeradius not another app.?? no - i'd read that as some other part of your 64bit x86 box is trashing the memory.

Re: Mysql error

Hi, Hi, I'm working with Freeradius in production enviroment (start up), at this time is working with only two users, they can connect whitout problems and all seems to work fine but looking into radius.log i found this messages: you dont state what platform you are using or what version

Re: Authorize/authenticate with LDAP

Hi, Thierry CHICH wrote: freeradius Version 1.1.3 ??? I can't believe it ! I thank I was using the version 1.1.6 ! Is it possible it change the beahvior if I upgrade ? In 1.1.x you can set the User-Name inside of the tunnel, and then set use_tunneled_reply = yes in the EAP config.

Re: SQL query length

Hi, option is to 'exec' external scripts to perform more complex queries, am I right? It's an option, but not the only one. You can use Perl or Python, too. Sorry if this seems studpid, but, do you mean that I can embed Perl in radiusd.conf? no - you can call PERL from pre-auth,

Re: Upgrading from 1.0.2 to 2.0.0 problems

Hi, the first request looks like this.NOTE the test order... rad_recv: Access-Request packet from host 192.168.1.64 port 32775, id=35, User-Name = test +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[unix] returns updated

Re: Rlm_sql in freeradius-1.1.7

Hi, This can be done if we use the attribute Called-Station-Id (or NAS-Identifier) with the operator '=~' and a value like this: (00-1b-d1-36-e2-85|11-1b-d1-36-e2-86|22-1b-d1-36-e2-87) This is a regular expression that will match the attribute if its value is one of them that are listed.

Re: unlang?

Hi, I am not sure why, I inherited this setup and I am still trying to understand it. The LDAP server is eDirectory (FreeRADIUS compiled with -with-edir) The -X output says: WARNING: Deprecated conditional expansion :-. See man unlang for details expand:

Re: Administering with MySQL DB

Hi, thanks, Ive looked at this and its a good guide to initial install but doesnt seem to provide any detailed info on how to administer the data in the tables. IE there is a sample of some data from a test system but this doesnt even mention the NAS table, how are other people

Re: radius attributes for cisco ip phone

Hi, HP ProCurve edge series can only dynamically assign a single untagged VLAN to any one switch port. It is not possible to create dynamic VLAN trunks. It may be possible to create a VLAN trunk statically, then leave the switch to do VLAN assignment, and just deny/allow access via the

Re: NAS list with MySQL

Hi, Hi there... i am new to free radius. I already successfully installed freeradius 1.1.7 with mysql5.1. The point is NAS's IPs and secrets are configured in clients.conf. I cannot find anything how to put those data to SQL database. Sql.conf doesn't describe any table or value for clients,

Re: NAS list with MySQL

Hi, Can u tell me about stability in freeradius 2.0.0. I am preparing a project for servers wchich will have to serve more than few milion entries (users) and i am concercn using lastests versions personally I would go for 2.0.0 - its been in beta for a long long time, it handles the packets

Re: MySQL

Hi, I have installed MySQL and Freeradius2.0.0. I have updated the schema for MySQL and set the location, username and password in sql.conf. When I start radiusd -X I get the following output. I cannot see any mention of connecting to mysql. you arent using sql for authentication,

Re: SNMP error

Hi, i followed the bugs file. i recompiled the freeradius with --enable-developer actually i made RPM file with ( rpmbuild -ta freeradius-1.1.7.tar.gz ) are you SURE That this worked fine - as if you used the standard SPEC then you wouldnt enable the developer stuff. (no debugging

Re: Problem with Vista EAP-PEAP Authentication

Hi, FR 1.1.6, 1.1.7 and 2.0.0/2.0.1 work fine with vista (without any special non windows-update KBs installed) are you using source from www.freeradius.org, or some distribution package? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Blank spaces after username - problem with accounting -MySqldatabase.

Hi, Please don't be angry. I'm trying to fix this issue because it works perfectly on FR1.1.7 if you've copied the config files direct from 1.1.7 to a 2.0.0 system then there will be quirks. wheres the full debug log? alan - List info/subscribe/unsubscribe? See

Re: Procedure to test performance

Hi, My radius server is not implemented yet, but i am wondering of a performance of it before it starts, I will need to simulate a performance test, My idea is to generate packet to analize the server. doc/performance-testing its in the freeradius archive - eg freeradius-server-2.0.1.tar.gz

Re: NAS list update without restarting radius server.

Hi, well the previous info regarding this only being read at startup was specific to data in SQL, so I suppose a kill -HUP should work. But I haven't tested it :P, maybe someone else on the list can tell us, otherwise give it a go by manually updating the clients.conf and try a kill -HUP,

Re: Unable to run radclient - libfreeradius-radius-2.0.0.so not found

Hi, Trying to run radclient to test if I have things set up correctly and I get this. Only similar thing I could find on the net was libcrypt being missing which was pointed at being an incorrect installation of openLDAP (I think). I downloaded the src and compiled from there with

Re: Problem with MySQL + system auth

Hi, In working to get my new radius server working I have run into a snag. I need to authenticate using a SQL database or system password file depending on where the request comes from, however the user may exist in both, with different passwords. How do I tell it to use the MySQL

Re: how to enable ldap during authentication

Hi, I am using version 2.0.2-pre I would like to use ldap for freeradius authentication. I couldn't find anything on web about this topic. I have ldap module in the authorize section in my default virtual server. I see in the debug that ldap module returns ok during authorization please

Re: authenticating with PIN only not username and password.

Hi, hi all, Can someone give me an insigth into how a user can authenticate from hotspot with 10digit PIN number not username and password. make the hotspot login only ask for a PIN, then send that as the User-Name with a password of the same value, or whatever via a RADIUS - as per normal.

Re: one RADIUS server per realm setup

Hi, 1. Proxy authorization as well - it's not clear how to do this. Can you? I'd really just like to forward the entire request elsewhere, before anything else happens, so I'd like to check the realm FIRST, and not do anything if it's not a local realm. yes, thats exactly what you do

Re: Don't work freeradius with MySQL.

hi, turn on the SQL debug logging in FreeRADIUS and see what the output of the SQl was alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SNMP error

Hi, i have OS RHEL5 it looks like it didnt build with the required debug parts - once again, as you are using the SPEC for your distro they could have other things that mess it up - I can only help if you build from the source and leave package management stuff alone. alan - List

Re: Question about forum

Hi, There is a history of this mailing list, but searching something is a nightmare. Imho forum would be great for that. Sent from my BlackBerry® wireless device forums suck imho alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Terminate EAP-PEAP client connection at FreeRadius Proxy and proxy(forward) request as PAP

Hi, Hi again and thanks, EAP-TTLS/PAP is the defaultI tried configuring the TTLS-PAP inner and outer tunnel but it will not work. EAP-TTLS/PAP ended A. If an incoming user conn. against the FreeRadius Server (Nr1) is belonging to OTHER (LOCAL) domain then the EAP-TTLS tunnel is ended

Re: Detail cisco logging

Hi, Hello, I have successfully configured freeradius 2.x to do AAA for my Cisco Catalyst 3560. Using modules rlm_detail I am able to log when the session starts and ends, however I am also interested in logging exactly what commands were issued by the user. Does anyone know how I can

Re: Attributes sent to proxy servers ...

hi, you are still pre-proxy attr filtering? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius v.2.0.1 and Cisco 1200AP IOS V.12.3

Hi, When installing FreeRadius 2.0.1, the only thing you should need is to add this to /etc/raddb/users username Cleartext-Password := thepassword ..and the clients file (and maybe even the firewall on the server! ;-) ) so that the AP acting as a NAS can talk to FR :-) ...and it

Re: freeradius v.2.0.1 and Cisco 1200AP IOS V.12.3

Hi, I have been working with freeradius v.2.0.1 and a Cisco 1200 Series Access Point (version 12.3 IOS) for many months now with no success to getting this working. I am doing research on freeradius product for a univeristy campus that I go to for implementation in the near future. I am

Re: New bee to FreeRadius; need help in configuration

Hi, Deepak, Have you considered using a ldap or sql backend instead of flat-file? those , too, will need to be refreshed via a server restart - the SQL clients are only read upon start. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Proxying VMPS requests

hi, we use FR with the VMPS module - and i can see the gotchas with trying to run it through some of the other modules. what we have is the VMPS calling post-auth - which runs a PERL module. the PERL module does our dirty work (check validity, return the correct VLAN etc) - but theres no reason

Re: need help in using mySql for freeRadius server.

Hi, you are using 2.0.0 ... they output you posted is not complete... Ready to process requests. ...which is the LAST line of output before the server is ready - the output before gives us a lot of information. can you connect to the mysql database from the command line using the

Re: weird error

Hi, Wed Feb 6 10:43:04 2008 : Error: rlm_eap: Failed to remember handler! Wed Feb 6 10:43:07 2008 : Error: rlm_eap: Failed to remember handler! and Wed Feb 6 10:43:07 2008 : Error: rlm_eap_tls: Unexpected ACK received the reason i am looking over these logs right now is because the

Re: no start of radiusd after reboot : mysql connection error

Hi, Do you mean that I must allow my user on the mysql server ? I don't think so, since there is no traffic from the freeradius to mysql at boot time. And furthermore, the user *is* allowed to connect to database from the free-radius host There are perhaps permissions problems on the

Re: no start of radiusd after reboot : mysql connection error

Hi, Yes I already check that, SELINUX is disabled [EMAIL PROTECTED] ~]# cat /etc/selinux/config SELINUX=disabled SELINUXTYPE=targeted SETLOCALDEFS=0 another idea ? perhaps something with permissions on binaries ? what happens if you start the daemon from the command line with

Re: radsqlrelay - and default config

Hi, Or, delete the sql_log queries, and use the ones from rlm_sql that are known to work. yes.i was thinking about why we have the stuff defined twice. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

radsqlrelay - and default config

hi, I've been looking at the current state of the default (commented out ready for use) radsqlrelay commands in radiusd.conf . for a quick reminder they look like this: # sql_log { # path = ${radacctdir}/sql-relay # acct_table = radacct #

Re: Newslists

hi, spending more time posting pseudo-insults and complaints to people posting bahaviour RATHER than the config/file-debug etc as requested aint going to help anyone. sure, some sarcastic comments arent necessary, but the basic method of using this list doesnt change. as previously

Re: no start of radiusd after reboot : mysql connection error

Hi, I add the following line to the /etc/init.d/radiusd : start) # Palliatif au pb du non-demarrage de radiusd apres reboot # cf freeradius-users@lists.freeradius.org thread no start of radiusd after reboot : mysql connection error ping -c 1 ntp.domain.com

Re: help in basic configuration in connection mysql with freeradius

Hi, hi, I am trying to use mysql database with free radius 2.0.0 for the first time. I am using centOS 4.5 and mysql 4.1.2.The authentication works fine if I am using the unix username and password. I modified some configurations in radiusd.conf and sql.conf but it doesn't work. Please

Re: Re: Freeradius2 and proxing

Hi, I do not receive any comment about my supplied patch. I will try to explain my issue better: I understood what you stated - and the patch does appear to handle the 'old style' 1.1.x DEFAULT handle properly. ..the old system could just be given a DEFAULT and stuff would go to it . i'm not

Re: Using freeradius integrated with Active Directory toautenticatecisco passwords

Hi, Thank you all. But how do I do this? Does any one has a tutorial about it? add the required parts to the radius config files to enable krb5 (direct password check) against the AD - you will also need to ensure your kerberos environment is sane and works eg run the command kinit

Re: Newslists

Hi, But when it checks for the attribute in the reply packet, it says it can't find it, but it still does the attrib-rewrite changes the values and then moans it couldn’t find the value pair. This is obviously not normal in my opinion, and thus I asked about a specific problem. I only

Re: weird error

Hi, else you can get into a situation where the compiler assumed the function (in this case ldap_get_values) returns an int (32bit), but it actually returns a pointer (64bit on 64 bit systems) which can then get truncated (which is likely why it always looked the same, because the part

Re: Newslists

Hi, Ok but then The thing about the attr_rewrite module is that it looks at ALL attributes in the list. In this case, you have two Configuration-Tokens. One has value SHAPED_NORMAL, and the other UNSHAPED_NORMAL. It doesn't match the first, but it does match the second. After that, it

Re: Newslists

hi, ..and i'd like to add that, once again, we are not seeing the whole picture - eg your configuration files and/or SQL tables. this case hence drags on and on... alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Newslists

Hi, Yes this is why I started looking at the debugs to see what was happening and found the attribute rewrite issue where it says it cannot find the configuration token, if I take the Configuration token out of the radgroup reply it shows one, if I take the attrib-rewrites out it only shows

Re: rlm_perl with huge load (~1000-1500 request per minute)

Hi, Hello! i use freeradiusd 1.7, rlm_perl with thread conf: thread pool { start_servers = 100 max_servers = 1500 min_spare_servers = 1 max_spare_servers = 10 max_requests_per_server = 10 } rlm_sql uses mysql. All works fine, but

Re: EAP session matching the State variable.

Hi, i am sorry, but my server doesn't have any internet-access... so, i can't use cvs for updating. use CVS on another machine, tar up the resulting CVS checkout, copy it to the server and recompile. it must have networking or some sort to be a radius server, n'est pas? ;-) alan - List

Re: multiple NAS's and Mysql

hi, a single FreeRADIUS server can do this. simply put each range of NASs into different groups and then use the group and groupreply tables in the SQL to do your return code work. if you cant google for SQL howto freeradius then

Re: conneting to mysql

Hi, hi, In order to connect to mysql what are the necessary configuration files to be changed. 1.x or 2.x ? generally, you need to edit radiusd.conf and.or sites-enabled/* to ensure that the sql.conf is loaded. then you need to edit sql.conf appropriately alan - List

Re: FR2 - proxying inner tunnel

Hi, Tue Feb 12 23:45:21 2008 : Error: Warning: Found 2 auth-types on request for user '[EMAIL PROTECTED]' Tue Feb 12 23:45:21 2008 : Debug: rad_check_password: Auth-Type = Accept, accepting the user whoah. WinXP is very fussy (as should all EAP clients) about getting a proper EAP

Re: accounting - no huntgroups

Hi, Arran Cudbard-Bell wrote: Woah, get that working with SQL and you have an insanely useful feature. Oooo what VLANS does this NAS support, hmm i'll just check the client VLAN tags. Where is this NAS located, hmm i'll just check the arbitrarily populated location tag. Err... why?

Re: EAP-TTLS/PAP tunneling issue

Hi, I've been simulating the traffic with JRadiusSimulator and used the EAP-TTLS/PAP option. Is there any other simulator you know of which I can use to simulate EAP-TTLS/(PAP and MS-CHAPv1)? I appreciate your help. wpa_supplicant is a good tool alan - List info/subscribe/unsubscribe? See

Re: Is tunnel right? (EAP-TTLS)

Hi, Sorry for insist on, but is right that in debug mode show the user password, even using tunnel? yes - if the password is available is a clear format - eg not a challenge/response method. ALL passwords get printed in clear text. alan - List info/subscribe/unsubscribe? See

Re: Is tunnel right? (EAP-TTLS)

Hi, But, I don't understand, how can be shown it if password is encrypted in LDAP and I am using EAP-TTLS, is not the password into the tunnel?. I am using securew2 with PAP from windows clients. Does it mean that password could be sniffed when radius is not running in debug mode?? the

Re: where is db_mysql.sql in 2.0.2?

Hi, hi Alan, where is the db_mysql.sql file in 2.0.2? i've searched whole, but found nothing. freeradius-server-2.0.2/raddb/sql/mysql/nas.sql freeradius-server-2.0.2/raddb/sql/mysql/schema.sql freeradius-server-2.0.2/raddb/sql/mysql/ippool.sql alan - List info/subscribe/unsubscribe? See

Re: Could not link driver rlm_sql_mysql.so

Hi, I couldn't be able to link the driver of mysql 5 with free radius 2.0.2due to this file rlm_sql_mysql.so. I couldn't locate this file in my entire system. I've gone througe all the faq's, but it doesn't work. the error's still there. answered every week on this list. your system

Re: can't get WPA/2 and EAP-TTLS to work

Hi, The wpa_supplicant keeps looping looking for missing keys accordint to Jouni. I suspected my Cisco access point was not configured properly, but Cisco claims that FreeRADIUS is asking the access point about dynamic VLANs which aren't even configured in FreeRADIUS (see configurations

Re: proxed EAP and eduroam project

Hi, rather than a problem, this is a question. I assume you know what eduroam is, but just in case: What is eduroam several members of this list are involved in eduroam at sites worldwide. What happens is that the EAP conversation traverls in cleartext across the public internet (really

Re: FreeRadius question

Hi, Ladies and Gentlemen, I am trying to find out how I can check what options the freeradius binary available for download was compiled with. I have STFW and RTFM, but still am not sure as to how to check. radiusd -X gives some information, but nothing about what freeradius was

Re: upgrade broke the users file - being read only partially - FR1.1.7 to FR2.0.2

Hi, No love man. Changed the huntgroup defination and also changed the sites-enabled/SERVER-1760 file to read. did you edit the users file according to the instructions too? ..the debug logs suggest otherwise alan - List info/subscribe/unsubscribe? See

Re: your mail

Hi, I am trying to setup freeradius 1. I have chap authentication working with mysql but pap authentication will not work with mysql. This is what I receive from the nas when someone trys to connect. radius.conf does not contain the full sql details - eg sql.conf, the required SQL backend

Re: upgrade broke the users file - being read only partially - FR1.1.7 to FR2.0.2

Hi, Yes I did make that change. What in the output suggested I didn't? Auth-Type already set I don't know what the deal is, it seems odd that it will read the file and proxy my requests but failed to authenticate a locally defined user in the file. its matching on line * (iirc) the

  1   2   3   4   5   6   7   8   9   10   >