How to enable only EAP-TTLS type and not EAP-TLS?

Hi, I want to enable only TTLS authentication and if the client is requesting any other types EAP-TLS or PEAP the authentication should be denied. I am running freeradius-1.1.6, and if try to disable EAP-TLS module the server itself is not starting up. Please let me know if there are any ways to

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Hi, nikitha george wrote on 09.01.2008 10:04: Hi, I want to enable only TTLS authentication and if the client is requesting any other types EAP-TLS or PEAP the authentication should be denied. within the eap section you must configure the tls and the ttls section. Delete the peap section.

Re: How to enable only EAP-TTLS type and not EAP-TLS?

I think there is a cleaner way. I enabled only EAP-TTLS and disabled EAP-TLS just puttting this lin in /etc/radddb/users DEFAULTEAP-Type == EAP-TLS, Auth-Type := Reject It works, I think Alan gave me this hint 1 year ago, maybe it could be put in the FAQ since it is an interesting

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Riccardo Veraldi wrote: I think there is a cleaner way. I enabled only EAP-TTLS and disabled EAP-TLS just puttting this lin in /etc/radddb/users DEFAULTEAP-Type == EAP-TLS, Auth-Type := Reject It works, I think Alan gave me this hint 1 year ago, maybe it could be put in the FAQ

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Hi, Hi, I want to enable only TTLS authentication and if the client is requesting any other types EAP-TLS or PEAP the authentication should be denied. I am running freeradius-1.1.6, and if try to disable EAP-TLS module the server itself is not starting up. Please let me know if there are any

Re: How to enable only EAP-TTLS type and not EAP-TLS?

Yes this is much better, but anyway I had disabled PEAP in eap.conf. thanks Rick Arran Cudbard-Bell ha scritto: Riccardo Veraldi wrote: I think there is a cleaner way. I enabled only EAP-TTLS and disabled EAP-TLS just puttting this lin in /etc/radddb/users DEFAULTEAP-Type ==

Re: How to enable only EAP-TTLS type and not EAP-TLS?

nikitha george wrote: Hi, I want to enable only TTLS authentication and if the client is requesting any other types EAP-TLS or PEAP the authentication should be denied. I am running freeradius-1.1.6, and if try to disable EAP-TLS module the server itself is not starting up. Please let me

RE: OpenSSH, PAM and pam_radius_auth

Hi Alan, So fix DNS so that it has a name to IP mapping for that host. Or, add that name to IP mapping into /etc/hosts. The module can't do anything if you tell it to use radius1 as a RADIUS server, and the don't tell it where radius1 is on the network. We have entry in the

Re: ldap group membership required

Thank you for the quick reply. I beat my head against it again, and again. Then noticed the clients file. I got it working. Alan DeKok wrote: Daniel Durgin wrote: I have search the archives and google, and there seems to be lots of confusion on the subject: Requiring membership to and LDAP

Re: How to Make Digital Certificates in Radius

Never mind. thanx anyway. On 09/01/2008, orion [EMAIL PROTECTED] wrote: isnt there a way to browse by web the cvs archives on cvs.freeradius.orgwithout opting to use the cvs build , `cause i have a working server but dont want to mess it up. after all ,all i need are the docs of the new

Re: How to Make Digital Certificates in Radius

orion wrote: isnt there a way to browse by web the cvs archives on cvs.freeradius.org http://cvs.freeradius.org without opting to use the cvs build , `cause i have a working server but dont want to mess it up. sigh The instructions on the web page include how to CHECK OUT the source code.

Re: Freeradius-client in pppd

I need the feature to specify the local ip address for the radius requests in PPPd and I see that freeradius-client-1.1.5 has that feature. Is there any patch to make pppd use this radius client instead of it's own copy of the old radiusclient? No comments on this??? -- damjan |

Re: Freeradius-client in pppd

Is there any patch to make pppd use this radius client instead of it's own copy of the old radiusclient? No comments on this??? Maybe if you ask this question on a pppd mailing list, chances of getting a response are higher. -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de

different authentication methods in users file

Hi list I'd like to authenticate some users request coming from a firewall with perl, and some other coming from a Brocade box with LDAP. Each authentication alone works, but I haven't figure out how make things work toghether. This combinaison works, but I'd rather have a generic statement :

Stopping LDAP searches during each part of EAP session?

I have a freeradius server configured to do both EAP-TLS and LDAP auth. It works great so far. If I have a cert. configured, then I'm authenticated with the cert. If I don't have a cert then I get prompted for my un/pw on my NAS's Captive Portal page, which then passes my username/password on

Re: Stopping LDAP searches during each part of EAP session?

Matt Alexander wrote: When I look through the debug logs, however, I see that the rlm_ldap module is doing an LDAP search for my username during each stage of the EAP session. Is there a way to configure freeradius so that it won't try LDAP auth in the middle of an EAP session? See the

Re: different authentication methods in users file

Johan wrote: I'd like to authenticate some users request coming from a firewall with perl, and some other coming from a Brocade box with LDAP. Use 2.0 (CVS head) and virtual servers. It will be trivial. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Freeradius-client in pppd

Is there any patch to make pppd use this radius client instead of it's own copy of the old radiusclient? No comments on this??? Maybe if you ask this question on a pppd mailing list, chances of getting a response are higher. I don't think there is a pppd mail list. Thats why I ask here.

Re: Freeradius-client in pppd

I don't think there is a pppd mail list. Thats why I ask here. http://us4.samba.org/samba/archives.html Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RPM install error.

I install freeradius-1.1.7-7.1.i386.rpm few days ago, When I try to install, upgrade or remove freeradius-1.1.7-7.1.i386.rpm get this error: /var/tmp/rpm-tmp.25681: line 1: fg: no job control error: %postun( freeradius-1.1.7-7.1.i386) scriptlet failed, exit status 1 I use Fedora

Re: Freeradius-client in pppd

Hi, I don't think there is a pppd mail list. Thats why I ask here. The README in pppd states: Contacts. * The comp.protocols.ppp newsgroup is a useful place to get help if you have trouble getting your ppp connections to work. Please do not send me questions of the form please help

Configuring own VSA to FreeRADIUS server

Hi Everyone, We are tring to add our own VSA to the Access-Accept message sent out by FreeRADIUS server.Can you please outline the steps as to how this can be done?We require this urgently. Thanks in advance for the help sought. Regards Sourav - List info/subscribe/unsubscribe? See