[RADIATOR] Thought you'd find this interesting

2013-07-12 Thread Prasoon Majumdar
Hi! I’ve just learned about the water crisis and thought you would be interested to check out this story: https://waterforward.charitywater.org/et/mMg6npLK Let me know what you think! Thanks, Prasoon -- Sent via WaterForward, an initiative of charity: water WaterForward, 387 Tehama Str

Re: [RADIATOR] Radiator + libtnc + tpm platform authentication IMC

2013-07-12 Thread Heikki Vatiainen
On 07/11/2013 07:31 PM, Florian Kabus wrote: > We would like to authenticate Win 7 endpoints with certificates stored > on the TPM and thus based on the identity deny or permit access to the > enterprise network. Hello Florian, this sounds like a normal EAP-TLS setup from the RADIUS/EAP server

Re: [RADIATOR] SIGHUP restart and AuthByRADSEC opens an additional socket

2013-07-12 Thread Heikki Vatiainen
On 07/10/2013 12:50 PM, Karl Gaissmaier wrote: > a SIGHUP to a running radiator (Version 4.11) opens an additional socket > for AuthByRADSEC: Hello Charly, it should not be doing this and it's a general problem, not related to your setup. We have a fix for this and currently checking if there ar

Re: [RADIATOR] Radiator + libtnc + tpm platform authentication IMC

2013-07-12 Thread Florian Kabus
Am 12.07.2013 11:28, schrieb Heikki Vatiainen: > this sounds like a normal EAP-TLS setup from the RADIUS/EAP server's > perspective. Please see goodies/eap_tls.cfg for EAP-TLS examples. I do > not think it matters to the servers side whether the private key is > stored in a TPM chip or in a file.

[RADIATOR] PacketTrace for Authby RADSEC does not dump receiving packets

2013-07-12 Thread Karl Gaissmaier
Hi radiator team, I've a nasty problem between radiator and radsecproxy. I tried to dump the receiving packets by AuthRADSEC, but no chance. Seems that the PakcetTrace flag does not go transfered to the receiving packet. Maybe this is a bug? Please see my config snippet. The same is true for Ser

Re: [RADIATOR] proxying POD reply packets

2013-07-12 Thread Michael
also, Change-Filter-Request-NAKed would also need to be in that list. On 09/07/13 07:00 AM, Heikki Vatiainen wrote: > On 07/05/2013 09:17 PM, Michael wrote: > >> In AuthRADIUS.pm, routine sub handleReply, should >> "Disconnect-Request-NAKed" also be listed in the code bellow? > I think all types