Re: FW: Login for any user

2007-04-17 Thread Phil Mayers 
inverse wrote:
>> Anybody got an idea on how the entry in the users-file has to look like
> 
> something like
> DEFAULT Auth-Type := Eap, User-Password == "blah"
> 
> with deafult eap type set to md5.
> 
> I've yet to try it tho, may you report back if it works?

This suggestion is wrong on a number of levels:

  1. Don't set Auth-Type

  2. Don't use == for User-Password; use := and in recent server 
versions use Cleartext-Password

  3. You cannot just "permit" EAP. The client will want the server to 
complete the challenge-response. The ONLY authentication algorithm that 
you can "just accept" is PAP.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FW: Login for any user

2007-04-17 Thread Phil Mayers 
[EMAIL PROTECTED] wrote:
> Auth-Type:= Accept will let everyone in.

No. Every EAP method I am aware of will require the successful 
completion of the challenge-response. Just setting Auth-Type to Accept 
will break things completely.

You *might* possibly be able to use EAP TTLS+PAP and set Auth-Type to 
Accept on the *inner* PAP method. But that's about it.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FW: Login for any user

2007-04-17 Thread tnt 
Auth-Type:= Accept will let everyone in.

Ivan Kalik
Kalik Informatika ISP

Dana 17/4/2007, "inverse" <[EMAIL PROTECTED]> piše:

>> Anybody got an idea on how the entry in the users-file has to look like
>
>something like
>DEFAULT Auth-Type := Eap, User-Password == "blah"
>
>with deafult eap type set to md5.
>
>I've yet to try it tho, may you report back if it works?
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FW: Login for any user

2007-04-17 Thread inverse 
> Anybody got an idea on how the entry in the users-file has to look like

something like
DEFAULT Auth-Type := Eap, User-Password == "blah"

with deafult eap type set to md5.

I've yet to try it tho, may you report back if it works?
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html