Trying to strip the Windows Domain name from a login

2011-01-21 Thread Brett Littrell
seconds. Sending delayed reject for request 0 Sending Access-Reject of id 198 to 172.17.17.66port 1645 Waking up in 4.9 seconds. Cleaning up request 0 ID 198 with timestamp +20 Ready to process requests. An yes I am pretty new to freeradius. Brett Littrell Network Manager MUSD CISSP, CCSP

Re: Trying to strip the Windows Domain name from a login

2011-01-24 Thread Brett Littrell
or right before the ldap auth. Thanks again, I will continue and try to figure out where to do this until I hear back. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Friday, January 21, 2011 at 11:56 PM, in message 4d3a8da0.7050...@deployingradius.com, Alan DeKok al

Question on Virtual Servers and inner-tunnel

2011-01-25 Thread Brett Littrell
causes it to exclusively handle inner-tunnel requests, in other word is inner-tunnel a hard coded name that has to be used for handling inner-tunnel requests? Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: Question on Virtual Servers and inner-tunnel

2011-01-26 Thread Brett Littrell
questions:) FYI: You guys are great, and I think I speak for everyone new to freeradius that we appreciate your help. PS: What is up with Garys email? or is it my threaded view? Gary's email keeps popping up as a new email and not as a threaded response? Brett Littrell Network

Re: Question on Virtual Servers and inner-tunnel

2011-01-26 Thread Brett Littrell
Must have been a really old version of GW, I use GW here and it seems to thread fine but we are on the latest version. Thanks again.. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Wednesday, January 26, 2011 at 8:48 AM, in message vrv518-hm1@chipmunk.wormnet.eu

Re: freeradius data encryption modes

2011-01-28 Thread Brett Littrell
encryption methods to query the username, password to get authorization and access levels. So WPA/AES ends at the AP. Hope that helps. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Thursday, January 27, 2011 at 11:54 PM, in message 20110128075412.49...@gmx.net, mc...@gmx.de

Question on Radius logs

2011-02-01 Thread Brett Littrell
occur it would make it a lot easier to figure out scripts as well as make common issues easier for techs to troubleshoot. From what I can tell in the unlang man page it did not mention this, perhaps I missed it though. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE - List

Re: Question on Radius logs

2011-02-01 Thread Brett Littrell
module, that will really help a lot!!. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Tuesday, February 01, 2011 at 9:02 AM, in message 57DE4B8C2C2D9555B06A9046@valium, James J J Hooper jjj.hoo...@bristol.ac.uk wrote: --On Tuesday, February 01, 2011 08:41:54 -0800 Brett

Re: Question on Radius logs

2011-02-01 Thread Brett Littrell
Thanks Alan, Did not think about calling the perl module, that should work very well... thanks Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Tuesday, February 01, 2011 at 10:15 AM, in message 20110201181525.ga9...@lboro.ac.uk, Alan Buxey a.l.m.bu...@lboro.ac.uk

Re: Active Directory and authorize section

2011-02-01 Thread Brett Littrell
to the switch/router or what have you. Usually you set the Authenticate and authorize to the same servers though so the authenticate server pushes down the info for authorization as well. Anyway, I hope that helps and I am not giving you bad info:) Brett Littrell Network Manager MUSD CISSP, CCSP

Re: Active Directory and authorize section

2011-02-02 Thread Brett Littrell
to knowing who you are? Or are you saying that the way the program loads the config the authorize section simply gets read first? Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Wednesday, February 02, 2011 at 12:05 AM, in message 20110202080557.ga2...@talktalkplc.com, Brian

Re: Active Directory and authorize section

2011-02-02 Thread Brett Littrell
. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Wednesday, February 02, 2011 at 9:01 AM, in message 20110202170140.ga12...@talktalkplc.com, Brian Candler b.cand...@pobox.com wrote: On Wed, Feb 02, 2011 at 07:23:39AM -0800, Brett Littrell wrote: Very interesting, I

Re: MAC Authentication - Bad Idea?

2011-02-02 Thread Brett Littrell
, it is just to easy to sniff unprotected wireless networks. -- Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Wednesday, February 02, 2011 at 12:00 PM, in message 8860_1296676852_4D49B7F4_8860_589_1_D9B37353831173459FDAA836D3B43499AF0FA683@WA PMBXV0.waddell.com, Gary Gatten

RE: 802.1x on Active Directory: no errors in debug but auth fails

2011-02-07 Thread Brett Littrell
our Novell Cert server and both worked for issuing a Cert that MS clients will accept. I am sure OpenSSL can do it to just never looked far enough into it to see the exact syntax. Hope this helps. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Monday, February 07, 2011

RE: 802.1x on Active Directory: no errors in debug but auth fails

2011-02-08 Thread Brett Littrell
back end, maybe an AD backend is a bit different. Good luck on it either way, you will eventually find your way there I am sure:) Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Tuesday, February 08, 2011 at 3:16 AM, in message 00ad01cbc781$94f25850$bed708f0$@it, Domenico

Re: Authenticating SSH login on a Cisco IOS switch to AD

2011-02-09 Thread Brett Littrell
, you may need to use local files to define groups with attributes or some scripts to inject the values Cisco wants. Hope that helps. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Wednesday, February 09, 2011 at 7:24 AM, in message

RE: Authenticating SSH login on a Cisco IOS switch to AD

2011-02-09 Thread Brett Littrell
difference is that TACACS encrypts more of the authentication requests then Radius and does better accounting. Of course it only really works on Cisco which is a major draw back. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Wednesday, February 09, 2011 at 8:11 AM, in message

RE: AW: Authenticating SSH login on a Cisco IOS switch to AD

2011-02-09 Thread Brett Littrell
tables can bypass vlans if need be, just as someone can get the SSID from a hidden Wireless network, that does not mean you have to make it easier for them:) Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Wednesday, February 09, 2011 at 9:20 AM, in message

Re: AW: Authenticating SSH login on a Cisco IOS switch to AD

2011-02-09 Thread Brett Littrell
, true switches don't care about ARP at all (as opposed to layer 3 switches). Regards, Brian. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE - List info/subscribe/unsubscribe? See http

Re: rlm_python and the Tunnel-Private-Group-Id attribute

2011-02-10 Thread Brett Littrell
Hi Bob, I do have this running successfully with eDir. I am guessing you are using the eDir Radius schema extensions? Also, if you are using Cisco equipment, you have to send the vlan name, not the ID. Not sure if other switches require the ID. Brett Littrell Network Manager MUSD

Re: rlm_python and the Tunnel-Private-Group-Id attribute

2011-02-10 Thread Brett Littrell
my hair out using the ID before and found you had to use the name. Hope you get the perl side to work. Thanks Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Thursday, February 10, 2011 at 12:47 PM, in message 4d53de6b02690002d...@internetemail.musd.org, Brett

Re: Freeradius2.1.3 + Fedora9 + PEAP + AD = problem

2011-02-16 Thread Brett Littrell
Auth-Type = EAP looks like your supplicant is sending workstation logins and your LDAP server is rejecting them. I don't know though, I am not a big log reader, I skim over them to find the error, I really need to get into them more:) Brett Littrell Network Manager MUSD CISSP, CCSP

Re: Hash username or mac address to assign user to different vlan

2011-02-17 Thread Brett Littrell
. Anyway, that is my 2 cents on the whole deal. Brett Littrell Network Manager MUSD CISSP, CCSP, CCVP, MCNE On Thursday, February 17, 2011 at 11:26 AM, in message fc9038-7cg@chipmunk.wormnet.eu, Alexander Clouter a...@digriz.org.uk wrote: schilling schilling2...@gmail.com wrote: I

Trying to remove a suffix

2011-09-09 Thread Brett Littrell
Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 239 to 10.2.2.100 port 36360 Waking up in 4.9 seconds. Cleaning up request 0 ID 239 with timestamp +10 Ready to process requests. Brett

Re: Trying to remove a suffix

2011-09-09 Thread Brett Littrell
with DEFAULT User-Name =~ ^([^.]+), Strip-User-Name = yes User-Name := %{1} Thanks anyway!!.. Brett Littrell Network Manager Milpitas Unified School District blittr...@musd.org Ph# (408)635-2600 X6086 Fax# (408)635-2632 CISSP, MCNE, CCVP, CCSP, Project+,MCITP/EA On Friday, September 09, 2011

Re: Trying to remove a suffix

2011-09-09 Thread Brett Littrell
Brett Littrell Network Manager Milpitas Unified School District blittr...@musd.org Ph# (408)635-2600 X6086 Fax# (408)635-2632 CISSP, MCNE, CCVP, CCSP, Project+,MCITP/EA On Friday, September 09, 2011 at 10:23 AM, in message 4e69e93902690003f...@internetemail.musd.org, Brett Littrell blittr