RE: free NAS ?

2010-05-06 Thread John McDonnell
://freenas.org/freenas -- John McDonnell Penn Cambria School District mcdon...@pcam.org smime.p7s Description: S/MIME cryptographic signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

EAP-TLS and MAC Authentication

2010-05-14 Thread John McDonnell
solution would be to do a check in FR to ensure when the user requests access, that the requesting MAC is from one of our machines. Regardless, could someone let me know if there is any need to do MAC authentication when doing EAP-TLS? -- John McDonnell Penn Cambria School District mcdon...@pcam.org

RE: EAP-TLS and MAC Authentication

2010-05-16 Thread John McDonnell
-Original Message- John McDonnell wrote: I'm not doing any dynamic VLAN assignments over the wireless so I really don't see any need for MAC authentication and just see it as unneeded overhead. Is there any reason why I'm wrong with this assumption? It never hurts. You can do

RE: EAP-TLS and MAC Authentication

2010-05-17 Thread John McDonnell
a pain to keep that many lists in sync) and I think using a check in FR is a much cleaner solution in many ways. -- John McDonnell Penn Cambria School District mcdon...@pcam.org O ASCII Ribbon Campaign - Stop HTML e-mail! - www.asciiribbon.org smime.p7s Description: S/MIME cryptographic

RE: EAP-TLS and MAC Authentication

2010-05-17 Thread John McDonnell
is a much cleaner solution in many ways. -- John McDonnell Penn Cambria School District mcdon...@pcam.org O ASCII Ribbon Campaign - Stop HTML e-mail! - www.asciiribbon.org Yes, when checking the MAC against the local list, it works. It checks the MAC against the local list before attempting

Re: Accounting to MySQL not working

2010-05-28 Thread John McDonnell
Making a backup of the file in sites-available would make more sense since the files in sites-enabled are only links to the files in sites-enabled. It is documented. ;) Marinko Tarlac mangi...@gmail.com wrote: :) Sure, its good idea to create backups but do not store them in the

RE: User + Password + AMC address group authentication

2010-07-09 Thread John McDonnell
the addresses easier and will only be accessed when adding/removing/making sure MAC was entered correctly. Thanks for your patience and help. Sincerely, -- John McDonnell Penn Cambria School District mcdon...@pcam.org O ASCII Ribbon Campaign - www.asciiribbon.org smime.p7s Description: S/MIME

Novell E-Directory

2010-07-13 Thread John McDonnell
in the future.) Thanks. :) -- John McDonnell Penn Cambria School District mcdon...@pcam.org O ASCII Ribbon Campaign - www.asciiribbon.org smime.p7s Description: S/MIME cryptographic signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: How to filter MAC addresses within Freeradius?

2010-11-30 Thread John McDonnell
-Original Message- On Behalf Of Christ Schlacta mac filtering should happen at the AP level. Ever try maintaining large (300+) MAC auth lists on multiple APs? Not fun at all. Even maintaining a consistent list of 50 addresses across multiple APs is not that fun, though a bit more

RE: TLS authentication works, but does not check usernames against 'users' file.

2010-11-30 Thread John McDonnell
-Original Message- On Behalf Of Andrew Bovill Hi, I'm trying to get WPA Enterprise EAP/TLS working with my wireless router. It appears that the TLS portion of the authentication works (valid certificates give me a working connection) but it does NOT appear to actually be

RE: freeradius 2.1.10 WARNING: Internal sanity check failed

2011-01-13 Thread John McDonnell
-Original Message- On Behalf Of joanroldan snipped Line breaks are your friend. Having everything all run together makes it extremely difficult to read the debug or your comments about it. I didn't try to read through it (my own sanity check :D), but try pasting your debug log here