Re: Auth-Type := Accept - CHAP problems

2008-08-21 Thread Ivan Kalik
Have a look at captive portals. Ivan Kalik Kalik Informatika ISP Dana 21/8/2008, "Thomas Buchberger" <[EMAIL PROTECTED]> piše: >Hi Alan and Ivan, > >Alan DeKok wrote: >>> Config looks like this: >>> >>> DEFAULTAuth-Type := Accept >>> >> This completely bypasses any password checks. >>

Re: Auth-Type := Accept - CHAP problems

2008-08-21 Thread Thomas Buchberger
Hi Alan and Ivan, Alan DeKok wrote: >> Config looks like this: >> >> DEFAULTAuth-Type := Accept >> > This completely bypasses any password checks. > >> ERX-Virtual-Router-Name = "vpn:XXX", >> ERX-Egress-Policy-Name = "XXX", >> ERX-Local-Loopback-Interface = "loopback

Re: Auth-Type := Accept - CHAP problems

2008-08-20 Thread Alan DeKok
Thomas Buchberger wrote: > With PAP it works - but not with CHAP. That's the problem ... > I think the CHAP module handles wrong passwords and auth-type different > than the rlm_pap module. No. It doesn't. > Config looks like this: > > DEFAULTAuth-Type := Accept This completely byp

Re: Auth-Type := Accept - CHAP problems

2008-08-20 Thread Ivan Kalik
>Config looks like this: > >DEFAULTAuth-Type := Accept That would make any protocol irrelevant. pap or chap. >ERX-Virtual-Router-Name = "vpn:XXX", >ERX-Egress-Policy-Name = "XXX", >ERX-Local-Loopback-Interface = "loopback 255", >Service-Type = Framed-User, >Framed-Prot

Re: Auth-Type := Accept - CHAP problems

2008-08-20 Thread Thomas Buchberger
Ivan Kalik wrote: > Add Fall-Through = Yes to the DEFAULT entry if you want to check entries > that come later in users file. Fall-Through is active. With PAP it works - but not with CHAP. That's the problem ... I think the CHAP module handles wrong passwords and auth-type different than the rlm_p

Re: Auth-Type := Accept - CHAP problems

2008-08-20 Thread Ivan Kalik
>CHAP Passwords don't get checked and if the username is correct the user >gets the wrong Options. >Not really better... Add Fall-Through = Yes to the DEFAULT entry if you want to check entries that come later in users file. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See

Re: Auth-Type := Accept - CHAP problems

2008-08-20 Thread Thomas Buchberger
Hi Alan, Alan DeKok wrote: > :) It's simple... just read 1000's of lines of debugging output, and > hordes of miscellaneous unrelated unorganized documentation files. > :-P >> We have several different Users in user-files which works fine. >> Now we want that the radius always answers with O

Re: Auth-Type := Accept - CHAP problems

2008-08-19 Thread Alan DeKok
Thomas Buchberger wrote: > we're playing with the freeradius features and are getting confused in > the way it behaves: :) It's simple... just read 1000's of lines of debugging output, and hordes of miscellaneous unrelated unorganized documentation files. > We have several different Users in u

Auth-Type := Accept - CHAP problems

2008-08-19 Thread Thomas Buchberger
Hi @ll, we're playing with the freeradius features and are getting confused in the way it behaves: We have several different Users in user-files which works fine. Now we want that the radius always answers with OK and no more "Login incorrect" - but with other Options than a correct user. We appe