Re: [RADIATOR] timing ldap auth

2011-02-07 Thread Barry Ard
I would like to be graph the results (number of timeouts and length of time to do ldap lookup) so I don't know if the log info would work very well. On Mon, Feb 7, 2011 at 2:04 PM, Heikki Vatiainen wrote: > On 02/07/2011 08:32 AM, Barry Ard wrote: > > > I would like to be track / report on the s

Re: [RADIATOR] timing ldap auth

2011-02-07 Thread Heikki Vatiainen
On 02/07/2011 08:32 AM, Barry Ard wrote: > I would like to be track / report on the success/failure of the our > LDAP2 AuthBy's. I am particularly interested in catching timeouts and > connection failures as these requests are made to machines in a > different part of our organization and we have

Re: [RADIATOR] ldap + starttls fails

2011-02-07 Thread Heikki Vatiainen
On 02/06/2011 09:20 PM, James wrote: > I'm having some issues getting Radiator to bounce off of an LDAP > server with STARTTLS. Note that authentication works fine if I disable > both SSL and STARTTLS against my OpenDS LDAP server. The config below does client-authentiated TLS handshake. That is,

Re: [RADIATOR] PEAP problem: EAP result: 1, EAP authentication is not permitted

2011-02-07 Thread Raúl Tejeda Calero
Thanks Christian! It looks better with your advice and the Alan´s help. Now, it seems to need the TLS information for the authentication. Mon Feb 7 18:13:16 2011: DEBUG: Packet dump: *** Received from x.x.x.x port 32768 Code: Access-Request Identifier: 128 Authentic: c<145><231><227

Re: [RADIATOR] PEAP problem: EAP result: 1, EAP authentication is not permitted

2011-02-07 Thread Christian Kratzer
Hi, On Mon, 7 Feb 2011, Raúl Tejeda Calero wrote: Hi everyone, I have another trouble with my radiator configuration. I ´m trying to connect my winxp client with PeAP (without "validate server certificate"), I have entered one valid user (mikem-fred 4 example) and the log shows: Mon Feb 7

Re: [RADIATOR] PEAP problem: EAP result: 1, EAP authentication is not permitted

2011-02-07 Thread Raúl Tejeda Calero
Hello Alan, I tried it, but don´t work. I used an user "user-test" user-password: any And the configuration file was "eap_peap.cfg" from goodies. Any idea? Mon Feb 7 17:17:02 2011: DEBUG: Packet dump: *** Received from 10.223.0.4 port 32768 Code: Access-Request Identifier: 99 Authen

Re: [RADIATOR] PEAP problem: EAP result: 1, EAP authentication is not permitted

2011-02-07 Thread Alan Buxey
Hi, > the users file supplied with RADIATOR is filled with rather special > users and purposes. it would probably make life easier to create > a nice clean users file for your usage. with eg 'test-user-1' > and other required parts (password, return attributes etc) rather > then deal with th

Re: [RADIATOR] PEAP problem: EAP result: 1, EAP authentication is not permitted

2011-02-07 Thread Raúl Tejeda Calero
Thanks for your answer Alan, I have already tried with another user file (very simple user-password) but the result is the same. Regards Raúl De: Alan Buxey [a.l.m.bu...@lboro.ac.uk] Enviado el: lunes, 07 de febrero de 2011 15:28 Para: Raúl Tejeda Calero

Re: [RADIATOR] PEAP problem: EAP result: 1, EAP authentication is not permitted

2011-02-07 Thread Alan Buxey
hi, the users file supplied with RADIATOR is filled with rather special users and purposes. it would probably make life easier to create a nice clean users file for your usage. with eg 'test-user-1' and other required parts (password, return attributes etc) rather then deal with the interest

[RADIATOR] PEAP problem: EAP result: 1, EAP authentication is not permitted

2011-02-07 Thread Raúl Tejeda Calero
Hi everyone, I have another trouble with my radiator configuration. I ´m trying to connect my winxp client with PeAP (without "validate server certificate"), I have entered one valid user (mikem-fred 4 example) and the log shows: Mon Feb 7 15:28:39 2011: DEBUG: Packet dump: *** Received from

Re: [RADIATOR] Assigning IP's directly from the Radius server

2011-02-07 Thread Christian Kratzer
Hi Gerard, On Mon, 7 Feb 2011, Gerard Alcorlo Bofill wrote: > Thanks Christian, > > but the IP address is not in my Accounting-request. May be I need to do > some changes to the AP configuration... > > That's the log I get from the Radius when the AP sends an Start and a > Stop accounting-request

Re: [RADIATOR] Assigning IP's directly from the Radius server

2011-02-07 Thread Gerard Alcorlo Bofill
Thanks Christian, but the IP address is not in my Accounting-request. May be I need to do some changes to the AP configuration... That's the log I get from the Radius when the AP sends an Start and a Stop accounting-requests. If I could get the IP from the accounting-request it would one easy and

Re: [RADIATOR] RV: Can't locate object method "response_identity"

2011-02-07 Thread Christian Kratzer
Hi, On Mon, 7 Feb 2011, Raúl Tejeda Calero wrote: Hello, I´m having trouble to handle EAP request with Radiator 4.7. I have installed all the perl modules (Net_SSLeay1.25, Digest_HMAC, Digest_SHA1, Digest_MD4,MD5, openssl 1.0.0beta5?) but the log shows this: Mon Feb 7 10:05:20 2011: DEBUG:

[RADIATOR] RV: Can't locate object method "response_identity"

2011-02-07 Thread Raúl Tejeda Calero
Hello, I´m having trouble to handle EAP request with Radiator 4.7. I have installed all the perl modules (Net_SSLeay1.25, Digest_HMAC, Digest_SHA1, Digest_MD4,MD5, openssl 1.0.0beta5…) but the log shows this: Mon Feb 7 10:05:20 2011: DEBUG: Handling request with Handler 'NAS-IP-Address=x.x.

Re: [RADIATOR] Assigning IP's directly from the Radius server

2011-02-07 Thread Christian Kratzer
Dear Gerard, On Mon, 7 Feb 2011, Gerard Alcorlo Bofill wrote: > Heikki, you do understood my problem. > And you confirmed me my suspicions, Framed-* attributes are ONLY for > connections such as PPP or PPPoE. > > I wanted to do all this work to have all logs centralized to radius and > to be able

Re: [RADIATOR] Assigning IP's directly from the Radius server

2011-02-07 Thread Gerard Alcorlo Bofill
Heikki, you do understood my problem. And you confirmed me my suspicions, Framed-* attributes are ONLY for connections such as PPP or PPPoE. I wanted to do all this work to have all logs centralized to radius and to be able tu run radwho.cgi script to see which IP addresses were being used in rea