Denying user from authentication

[tnt at kalik.co.yu]

That won't work with EAP-TLS. As you found out.

Ivan Kalik
Kalik Informatika ISP


Dana 19/9/2007, "anoop_c at sifycorp.com" <anoop_c at sifycorp.com> piše:

>HI
>  Thank you for the response.But as per users file configuration it should deny the user if i include that user name-reject file.Do i need to do any config for this to work.
>
>Regards
>Anoop
>
>
>> Message: 3
>> Date: Tue, 18 Sep 2007 11:30:53 +0100
>> From: <tnt at kalik.co.yu>
>> Subject: Re: Denying user from authentication
>> To: \"FreeRadius users mailing list\"
>> 	<freeradius-users at lists.freeradius.org>
>> Message-ID: <PsdtHepQ.1190111453.3996530.tnt at kalik.co.yu>
>> Content-Type: text/plain; charset=ISO-8859-2
>>
>> Revoke the certificate.
>>
>> Ivan Kalik
>> Kalik Informatika ISP
>>
>>
>> Dana 18/9/2007, \"anoop_c at sifycorp.com\" <anoop_c at sifycorp.com> pi?e:
>>
>> >Hi
>> >   I am using EAP_TLS authentication with free radius 1.1.7 .The
>> authentication is a certificate based one.
>> >
>> >  I want to reject one user .I have done config in users file
>> >
>> > anoop07        Auth-Type := Reject
>> >                Reply-Message = \"Your account has been disabled.\"
>> >
>> >Stll the user autheticates.How can i prevent user like this?
>> >
>> >Regards
>> >Anoop
>> >
>> >
>> >
>> >
>>
>>
>>
>> ------------------------------
>>
>> Message: 4
>> Date: Tue, 18 Sep 2007 14:12:50 +0200
>> From: inverse <inverse at ngi.it>
>> Subject: Re: Denying user from authentication
>> To: \"FreeRadius users mailing list\"
>> 	<freeradius-users at lists.freeradius.org>
>> Message-ID:
>> 	<32deb3e30709180512k2361fb99x10f3e4693930f899 at mail.gmail.com>
>> Content-Type: text/plain; charset=ISO-8859-1
>>
>> and make sure to use check_crl = yes in eap.conf
>>
>> On 9/18/07, tnt at kalik.co.yu <tnt at kalik.co.yu> wrote:
>> > Revoke the certificate.
>>
>>
>> ------------------------------
>>
>