Re: Freeradius error: Discarding conflicting packet

2008-10-04 Thread Jelle Langbroek
I use the EAP/TTLS and EAP/PAP scheme. I have the same error as you but is somewhat at ramdom. In my case, APs Linksys WRT54GL has OpenWRT WhiteRussian installed. Could be some bad in clients? I've seen things too weirds in Mac OS X clients... I'd like to know if your problems have been

Re: peap without client side certificate

2008-09-07 Thread Jelle Langbroek
But please do give the client the radius-server-cerificate so it knows which server to authenticate with. If you don't use that certificate anybody can set up a (intermediate) radius-server and make you authenticate with that (without you knowing it). After that, all your data will flow though

Re: Fwd: Certificate problem on Windows XP clinet ...

2008-08-23 Thread Jelle Langbroek
Well, since we still don't know anything... You could try rebuilding the certs with the following scripts and use those scripts in freeRadius. The scripts makes CA certs, server certs AND client certs. Good luck! scripts: http://wiki.freeradius.org/WPA_HOWTO#Step_1:_Make_Certificates jelle

Re: I've started to put the book online

2008-08-19 Thread Jelle Langbroek
Just great! Thanks, I'll be sure to read it. 2008/8/19 Alan DeKok [EMAIL PROTECTED] http://deployingradius.com/book/ Only parts of the first chapter are online. It covers the basic concepts behind RADIUS, and should hopefully address a number of common misunderstandings about how it all

Solutions: Various certificate issues with MACOSX (TLS Errors)

2008-06-24 Thread Jelle Langbroek
Hi, I'm posting this to the list just for future reference. Though this may not seem a freeRadius issue, it still had a lot to do with it. Probably people with the same issues will look in this list for answers. I've been struggling with various freeRadius certificate issues the past year.

Re: Bind socket?

2008-06-23 Thread Jelle Langbroek
Your radiusd is still running. Stop it first before you start another pid. jelle 2008/6/23 ELOM ETSE [EMAIL PROTECTED]: While i was resolving the problem of lib rlm_exec, i meet whith this another problem. ERROR: Failed to open socket: cannot bind socket: Cannot assign requested address

Re: No Aoth Type problem again

2008-06-21 Thread Jelle Langbroek
, it now runs out of the box! Where there so many changes from 2.0.3 to 2.0.5? Anyway, thanks for all the help Alan and Ivan! Jelle 2008/6/20 Alan DeKok [EMAIL PROTECTED]: Jelle Langbroek wrote: Hi, I know it's plain English but I still can't figure out where the warning is comming from

Re: No authentication method (AUth Type) problem.

2008-06-19 Thread Jelle Langbroek
Yep, I got the same error with 2.0.5 (SQL, not LDAP). It might have something to do with the radgroupcheck table not having the Aut-Type set correctly (to EAP maybe?). Hadn't got time for testing that. Maybe you have some use for this information. Please post if it works! Jelle 2008/6/19 Andy An

MacOSX Leopard authentication with Freeradius

2008-06-17 Thread Jelle Langbroek
Hi, I'm using freeRadius 2.0.3 on my WLAN. I have WindowsXP, WindowsVista and Apple (OSX) clients. Windows clients authenticate well with freeRadius but I have problems with OSX Leopard. I can't figure out where the problem originates from. I'm using MySQL, Cleartext-Passwords, PEAP auth,

Re: simple web interface

2008-06-15 Thread Jelle Langbroek
Wow! That looks absolutely great! I've searched a lot for an interface like that. Right now I have Radius (mysql) connected to our LAN Management System (LMS). Also great by the way... Thanks! gr, jelle On 15/06/2008, Liran Tal [EMAIL PROTECTED] wrote: Hey Vittore On Tue, Jun 3, 2008 at

Re: eap/tls authentication problem

2008-06-15 Thread Jelle Langbroek
So, you should probably create a new certificate with a certified CA or a correct own CA. Install openssl and follow a howto on creating new certificates. Make sure you match Common Name to server.domainname Furthermore change certificate options (like password) in eap.conf. gr, jelle

Re: eap/tls authentication problem

2008-06-15 Thread Jelle Langbroek
Oh, and when using TLS, install client certificate on client. 2008/6/15 Jelle Langbroek [EMAIL PROTECTED]: So, you should probably create a new certificate with a certified CA or a correct own CA. Install openssl and follow a howto on creating new certificates. Make sure you match Common Name

Re: Freeradius error: Discarding conflicting packet

2008-06-13 Thread Jelle Langbroek
Hi, Thanks for your reply. I began testing different setups immediately. I located 1 AP which didn't regenerate the error (AP1) and swapped it with one which did generate the error (AP2). I then saw that AP1 (which now was located on the place of AP2), began generating the same errors. The