How do I not set Auth-Type?

2007-03-16 Thread John T. Guthrie
Hello all, I have a configuration where I allow users to get onto the wireless network by authenticating with EAP-TLS or with EAP-GTC inside of EAP-TTLS. If they have a cert, then they authenticate with EAP-TLS, and if they have a password, then they authenticate with EAP-TTLS/EAP-GTC which in

Re: How do I not set Auth-Type?

2007-03-16 Thread John T. Guthrie
On Fri, 2007-03-16 at 09:40 +0100, Alan DeKok wrote: John T. Guthrie wrote: As it turns out, I have a configuration that accomplishes all of this *perfectly*. If it works... Well, it's been doing what I want it to do for about 7+ months, so I'd say that qualifies as working. ;-) Now

MAC address restriction with EAP-TLS

2009-01-23 Thread John T. Guthrie III
Hello all, We are currently using EAP-TLS authentication with FreeRADIUS at the place where I work right now. Management would like to be able to restrict the use of a given certificate for this authentication to specific MAC addresses. In other words, for each certificate, the desire is to tie

Re: MAC address restriction with EAP-TLS

2009-01-25 Thread John T. Guthrie III
Ivan Kalik t...@kalik.net wrote: We are currently using EAP-TLS authentication with FreeRADIUS at the place where I work right now. Management would like to be able to restrict the use of a given certificate for this authentication to specific MAC addresses. In other words, for each

Re: MAC address restriction with EAP-TLS

2009-01-27 Thread John T. Guthrie III
Ivan Kalik t...@kalik.net wrote: We are currently using EAP-TLS authentication with FreeRADIUS at the place where I work right now. Management would like to be able to restrict the use of a given certificate for this authentication to specific MAC addresses. In other words, for

Kreberos module config

2007-03-12 Thread John T. Guthrie
Hello all, I was just looking through the Kerberos code in rlm_krb5.c, and I found this little code snippet: static CONF_PARSER module_config[] = { { keytab, PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,keytab), NULL, NULL }, { service_principal, PW_TYPE_STRING_PTR,

Re: Ssl help

2007-03-12 Thread John T. Guthrie
On Mon, 2007-03-12 at 13:52 -0400, Hillary Marek wrote: I am trying to set up a Fedora Core 6 computer as a FreeRadius Server. It is currently running, and authenticating via mac address. I also want to set the same computer up as a CA using openssl. When I run the CA script, I get the

Re: Kerberos module config

2007-03-12 Thread John T. Guthrie
On Mon, 2007-03-12 at 12:45 -0400, John T. Guthrie wrote: Hello all, I was just looking through the Kerberos code in rlm_krb5.c, and I found this little code snippet: static CONF_PARSER module_config[] = { { keytab, PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,keytab), NULL

Re: Kerberos module config

2007-03-13 Thread John T. Guthrie
On Tue, 2007-03-13 at 17:31 +0100, Alan DeKok wrote: John T. Guthrie wrote: Well, when all else fails, read the documentation. I just checked the wiki on the website, and it says that the answer to my question is yes. However, I went ahead and wrote a patch to the radiusd.conf.in file

RE: restricting users access to clients?

2007-03-14 Thread John T. Guthrie
On Wed, 2007-03-14 at 16:08 -0300, Matt Ashfield wrote: Ok, the users file it is! Thanks! I guess I was hoping for a link to an example of some sort. Because the user who would be given access is not explicitly defined in the users file (the users is defined in LDAP), I'm not sure how to