Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Federico Giannici
Since we upgraded from OpenBSD amd64 7.3 to 7.5 (passing through 7.4) the FreeRadius EAP authentication no longer works! We are using a custom version of FreeRadius (because we had to do some little changes and a module of our own), and everything worked correctly for many years. Now, with 7

Re: Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Stuart Henderson
On 2024-04-17, Federico Giannici wrote: > Since we upgraded from OpenBSD amd64 7.3 to 7.5 (passing through 7.4) > the FreeRadius EAP authentication no longer works! > > We are using a custom version of FreeRadius (because we had to do some > little changes and a module of our own), and everythin

Re: Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Kapetanakis Giannis
On 17/04/2024 16:19, Stuart Henderson wrote: > On 2024-04-17, Federico Giannici wrote: >> Since we upgraded from OpenBSD amd64 7.3 to 7.5 (passing through 7.4) >> the FreeRadius EAP authentication no longer works! >> >> We are using a custom version of FreeRadius (because we had to do some >> li

Re: Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Stuart Henderson
On 2024-04-17, Kapetanakis Giannis wrote: > One idea if you have old devices that cannot upgrade to a newer SSL/TLS > protocol would be to run some kind of proxy between the client and the radius > server (stunnel?) > > Don't know how well this plays with EAP. > Maybe this will only work with EA

Re: Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Federico Giannici
On 4/17/24 15:19, Stuart Henderson wrote: On 2024-04-17, Federico Giannici wrote: Since we upgraded from OpenBSD amd64 7.3 to 7.5 (passing through 7.4) the FreeRadius EAP authentication no longer works! We are using a custom version of FreeRadius (because we had to do some little changes and a

Re: Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Kapetanakis Giannis
On 17/04/2024 17:37, Federico Giannici wrote: > On 4/17/24 15:19, Stuart Henderson wrote: >> This is most likely because of: >> >> https://www.openbsd.org/74.html >> "Disabled TLSv1.0 and TLSv1.1 in libssl so that they may no longer be >> selected for use." >> >> I don't think there's anything s

Re: Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Federico Giannici
On 4/17/24 16:34, Stuart Henderson wrote: On 2024-04-17, Kapetanakis Giannis wrote: One idea if you have old devices that cannot upgrade to a newer SSL/TLS protocol would be to run some kind of proxy between the client and the radius server (stunnel?) Don't know how well this plays with EAP.

Re: Creating GLX context fails on ATI Picasso Radeon

2024-04-17 Thread Страхиња Радић
Hi, I'd just like to report that I found the solution to the issue with GLX. It was the environment variable export LIBGL_ALWAYS_INDIRECT=1 which I read about in some search results about Ungoogled Chromium crashing (also LIBGL_ALWAYS_SOFTWARE was suggested as an alternative to try), an

Re: ixl driver very poor network performance

2024-04-17 Thread Hrvoje Popovski
On 16.4.2024. 20:22, Szél Gábor wrote: > Dear @misc! > > We have several more complex networks where openbsd is the router. > > Structure of the network: > > * OpenBSD redundant routers > - two OpenBSD > - CARP > - pfsync > - LACP trunks for LAN (2x 10Gbit)  (1 side switch #1,

Re: Since upgrade to OpenBSD 7.5 the FreeRADIUS EAP authentication no longer works

2024-04-17 Thread Stuart Henderson
On 2024-04-17, Federico Giannici wrote: > On 4/17/24 16:34, Stuart Henderson wrote: >> On 2024-04-17, Kapetanakis Giannis wrote: >>> One idea if you have old devices that cannot upgrade to a newer SSL/TLS >>> protocol would be to run some kind of proxy between the client and the >>> radius serv

subscribe

2024-04-17 Thread Calvin Dwayne Clark (SplinTer)
subscribe -- Thanks, SplinTer splin...@nastycode.com IRCNow Network https://www.nastycode.com/For all your UNIX/IRC Needs https://www.partnaz-n-crime.com/For all your UNIX/IRC Needs https://waterboy.nastycode.com/FREE Waterboy Gospel Lyrics