<div dir="ltr">What is in this entry:<br>
<br>
users: Matched entry test100 at line 172<br>
<br>we are using the 'users' file to authenticate the clients and in the file 'users' we are defining the clients. <br><br>please find the attached 'users' file which is at "/usr/local/etc/raddb/".<br>
<br>regards,<br>Venkat<br>SAI Technology Inc.,<br>408.727.1560<br><br><div class="gmail_quote">2008/8/15 <span dir="ltr"><<a href="mailto:freeradius-users-request@lists.freeradius.org">freeradius-users-request@lists.freeradius.org</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Send Freeradius-Users mailing list submissions to<br>
<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.freeradius.org/mailman/listinfo/freeradius-users" target="_blank">http://lists.freeradius.org/mailman/listinfo/freeradius-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:freeradius-users-request@lists.freeradius.org">freeradius-users-request@lists.freeradius.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:freeradius-users-owner@lists.freeradius.org">freeradius-users-owner@lists.freeradius.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Freeradius-Users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. RE: Freeradius in an AD environment on opensuse server<br>
(Murray, Elizabeth [DNR])<br>
2. Re: 2.0.5 on Solaris with openssl 0.9.8h (Andrew Hood)<br>
3. Re: Freeradius in an AD environment on opensuse server<br>
(Maurizio Cimaschi)<br>
4. RE: Freeradius in an AD environment on opensuse server<br>
(Murray, Elizabeth [DNR])<br>
5. Re: Crash on x64? (Alex Balashov)<br>
6. RE: FreeRadius 2.0.5 AD PEAP (Brooks, Kyle)<br>
7. Re: Failing to authenticate using FreeRadius(in OpenBSD) + XP<br>
as a client+Linksys AP (WRT54v2.2) using peap (Ivan Kalik)<br>
8. what are the intended semantics of paircompare()? (John Dennis)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 15 Aug 2008 08:45:24 -0500<br>
From: "Murray, Elizabeth [DNR]" <<a href="mailto:Elizabeth.Murray@dnr.iowa.gov">Elizabeth.Murray@dnr.iowa.gov</a>><br>
Subject: RE: Freeradius in an AD environment on opensuse server<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID:<br>
<<a href="mailto:19B6CF3C6982234BB7AD5E01E70F5AF8037F0194B9@iowadsmex104.iowa.gov.state.ia.us">19B6CF3C6982234BB7AD5E01E70F5AF8037F0194B9@iowadsmex104.iowa.gov.state.ia.us</a>><br>
<br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
Sorry. I'm really new at this and I took this as a good suggestion. I was just trying to follow the instructions. I will begin again and leave that out. I do appreciate having the ability to communicate with everyone on the list and will try to be more exact.<br>
<br>
Right now I have installed 11.0 opensuse. Radius -X does not load error message is<br>
First error I found says<br>
"/etc/raddb/certs/bootstrap: line 15: make: command not found"<br>
<br>
<br>
<br>
-----Original Message-----<br>
From: freeradius-users-bounces+elizabeth.murray=<a href="http://dnr.iowa.gov" target="_blank">dnr.iowa.gov</a>@<a href="http://lists.freeradius.org" target="_blank">lists.freeradius.org</a> [mailto:<a href="mailto:freeradius-users-bounces%2Belizabeth.murray">freeradius-users-bounces+elizabeth.murray</a>=<a href="http://dnr.iowa.gov" target="_blank">dnr.iowa.gov</a>@<a href="http://lists.freeradius.org" target="_blank">lists.freeradius.org</a>] On Behalf Of Maurizio Cimaschi<br>
Sent: Thursday, August 14, 2008 4:22 PM<br>
To: FreeRadius users mailing list<br>
Subject: Re: Freeradius in an AD environment on opensuse server<br>
<br>
Murray, Elizabeth [DNR] wrote:<br>
> OK. Following the suggestions, I installed the application for the application to track changes. Not so easy to do. I now give up.<br>
> I followed the instructions and when I run the test it asks me about the .hgrc file. Not to be found anywhere.<br>
<br>
Given this error, it seems that you're busy installing Mercurial; but I<br>
did not sugest you to install any Source Control Management system. At<br>
least is not related with the installation of freeradius.<br>
<br>
<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Sat, 16 Aug 2008 00:03:40 +1000<br>
From: Andrew Hood <<a href="mailto:freeradius@andyhood.net">freeradius@andyhood.net</a>><br>
Subject: Re: 2.0.5 on Solaris with openssl 0.9.8h<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:48A58CBC.40201@andyhood.net">48A58CBC.40201@andyhood.net</a>><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
Rafiqul Ahsan wrote:<br>
> Hi Alan, and All,<br>
><br>
> Well, I believe I have linked Freeradius 2.0.5 with the right openssl<br>
> (0.9.8h) now by adding below env variables(my build logs also says<br>
> that linked with -L/usr/local/ssl/lib). However I still see the same<br>
> error while using sha256 encryption algorithm with RSA 2048 key. I<br>
> sent this query to openssl maillist, they are sending me back to you<br>
> (freeradius folks) to verify whether Freeradius supports sha2, sha256<br>
> etc. (I hoped that below patch would allow, but no luck).<br>
><br>
> CFLAGS=-I/usr/local/ssl/include/openssl<br>
> CPPFLAGS=-I/usr/local/ssl/include/openssl<br>
> LDFLAGS=-L/usr/local/ssl/lib<br>
> export CFLAGS CPPFLAGS LDFLAGS<br>
<br>
I forget. Were you using the Sun toolchain or GNU?<br>
<br>
You probably need one of:<br>
<br>
LDFLAGS='-L/usr/local/ssl/lib -Wl,-rpath -Wl,/usr/local/ssl/lib<br>
<br>
or<br>
<br>
LDFLAGS='-L/usr/local/ssl/lib -R/usr/local/ssl/lib'<br>
<br>
or whatever similar incantation your linker wants to achive the same<br>
result, forcing it to use the version of openssl in /usr/local/lib<br>
<br>
<br>
--<br>
REALITY.SYS not found: Universe halted.<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Fri, 15 Aug 2008 17:03:23 +0200<br>
From: Maurizio Cimaschi <<a href="mailto:mauri@unixrulez.org">mauri@unixrulez.org</a>><br>
Subject: Re: Freeradius in an AD environment on opensuse server<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:48A59ABB.7080702@unixrulez.org">48A59ABB.7080702@unixrulez.org</a>><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
Murray, Elizabeth [DNR] wrote:<br>
> "/etc/raddb/certs/bootstrap: line 15: make: command not found"<br>
<br>
you need to install "make" package.<br>
<br>
Try here: <a href="http://packages.opensuse-community.org/" target="_blank">http://packages.opensuse-community.org/</a><br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Fri, 15 Aug 2008 10:27:45 -0500<br>
From: "Murray, Elizabeth [DNR]" <<a href="mailto:Elizabeth.Murray@dnr.iowa.gov">Elizabeth.Murray@dnr.iowa.gov</a>><br>
Subject: RE: Freeradius in an AD environment on opensuse server<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID:<br>
<<a href="mailto:19B6CF3C6982234BB7AD5E01E70F5AF8037EB28264@iowadsmex104.iowa.gov.state.ia.us">19B6CF3C6982234BB7AD5E01E70F5AF8037EB28264@iowadsmex104.iowa.gov.state.ia.us</a>><br>
<br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
<br>
________________________________________<br>
From: freeradius-users-bounces+elizabeth.murray=<a href="http://dnr.iowa.gov" target="_blank">dnr.iowa.gov</a>@<a href="http://lists.freeradius.org" target="_blank">lists.freeradius.org</a> [freeradius-users-bounces+elizabeth.murray=<a href="http://dnr.iowa.gov" target="_blank">dnr.iowa.gov</a>@<a href="http://lists.freeradius.org" target="_blank">lists.freeradius.org</a>] On Behalf Of Maurizio Cimaschi [<a href="mailto:mauri@unixrulez.org">mauri@unixrulez.org</a>]<br>
Sent: Friday, August 15, 2008 10:03 AM<br>
To: FreeRadius users mailing list<br>
Subject: Re: Freeradius in an AD environment on opensuse server<br>
<br>
Murray, Elizabeth [DNR] wrote:<br>
> "/etc/raddb/certs/bootstrap: line 15: make: command not found"<br>
<br>
you need to install "make" package.<br>
<br>
Try here: <a href="http://packages.opensuse-community.org/" target="_blank">http://packages.opensuse-community.org/</a><br>
<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Fri, 15 Aug 2008 13:00:06 -0400 (EDT)<br>
From: "Alex Balashov" <<a href="mailto:abalashov@evaristesys.com">abalashov@evaristesys.com</a>><br>
Subject: Re: Crash on x64?<br>
To: "FreeRadius users mailing list"<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID:<br>
<<a href="mailto:4043.97.81.69.51.1218819606.squirrel@webmail.corp.evaristesys.com">4043.97.81.69.51.1218819606.squirrel@webmail.corp.evaristesys.com</a>><br>
Content-Type: text/plain;charset=iso-8859-1<br>
<br>
<br>
On Fri, August 15, 2008 5:56 am, Phil Mayers wrote:<br>
<br>
> Well, it's an invalid "free", obviously, which indicates pointer<br>
> corruption or something similar. What's odd is that we're running a<br>
> relatively high-volume server on RHEL5 & Postgres and it's fine.<br>
<br>
2.0.5 (tried both from binary and source0. Postgres <a href="http://8.3.3." target="_blank">8.3.3.</a><br>
<br>
--<br>
Alex Balashov<br>
Evariste Systems<br>
Web : <a href="http://www.evaristesys.com/" target="_blank">http://www.evaristesys.com/</a><br>
Tel : (+1) (678) 954-0670<br>
Direct : (+1) (678) 954-0671<br>
Mobile : (+1) (706) 338-8599<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Fri, 15 Aug 2008 13:23:23 -0400<br>
From: "Brooks, Kyle" <<a href="mailto:Kyle.Brooks@nrc-cnrc.gc.ca">Kyle.Brooks@nrc-cnrc.gc.ca</a>><br>
Subject: RE: FreeRadius 2.0.5 AD PEAP<br>
To: "FreeRadius users mailing list"<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:6AF37B759D23CD4FB862A21C1F06CF9732AD3C@nrccenexb2.nrc.ca">6AF37B759D23CD4FB862A21C1F06CF9732AD3C@nrccenexb2.nrc.ca</a>><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
>>>++[mschap] returns ok<br>
>>>MSCHAP Success<br>
>>>++[eap] returns handled<br>
>><br>
>>Radius is doing fine. Your switch is having problems with<br>
EAP-MSCHAPv2.<br>
>>Debug the switch.<br>
>><br>
>>Ivan Kalik<br>
>>Kalik Informatika ISP<br>
><br>
>Ok, but we are using this same switch and config for our current<br>
>deployment of freeradius 1.1.7 with AD and everything is working fine.<br>
><br>
>I will debug the switch but would it be something else?<br>
<br>
I've debugged the switch which is currently passing auth traffic with<br>
FreeRadius 1.1.7 correctly, and it too is passing traffic correctly with<br>
<a href="http://2.0.5." target="_blank">2.0.5.</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 7<br>
Date: Fri, 15 Aug 2008 21:28:51 +0100<br>
From: "Ivan Kalik" <<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>><br>
Subject: Re: Failing to authenticate using FreeRadius(in OpenBSD) + XP<br>
as a client+Linksys AP (WRT54v2.2) using peap<br>
To: "FreeRadius users mailing list"<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:FkuK2QF9.1218832131.0955900.tnt@kalik.co.yu">FkuK2QF9.1218832131.0955900.tnt@kalik.co.yu</a>><br>
Content-Type: text/plain; charset=ISO-8859-2<br>
<br>
What is in this entry:<br>
<br>
users: Matched entry test100 at line 172<br>
<br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<br>
<br>
Dana 15/8/2008, "Venkata LK Mula" <<a href="mailto:vlkmula@saitechnology.com">vlkmula@saitechnology.com</a>> pi?e:<br>
<br>
>Hi,<br>
><br>
>This is with reference to the above mentioned subject, we<br>
>are trying to authenticate client in PEAP-MSCHAPv2<br>
>configuration.<br>
><br>
>For which we are getting the following error:<br>
><br>
>modsingle[authenticate]: calling mschap (rlm_mschap) for<br>
>request 6<br>
>rlm_mschap: No Cleartext-Password configured. Cannot create<br>
>LM-Password.<br>
>rlm_mschap: No Cleartext-Password configured. Cannot create<br>
>NT-Password.<br>
>rlm_mschap: Told to do MS-CHAPv2 for test100 with<br>
>NT-Password<br>
>rlm_mschap: FAILED: No NT/LM-Password. Cannot perform<br>
>authentication.<br>
>rlm_mschap: FAILED: MS-CHAP2-Response is incorrect<br>
>modsingle[authenticate]: returned from mschap (rlm_mschap)<br>
>for request 6<br>
>++[mschap] returns reject<br>
>rlm_eap: Freeing handler<br>
>modsingle[authenticate]: returned from eap (rlm_eap) for<br>
>request 6<br>
>++[eap] returns reject<br>
>auth: Failed to validate the user.<br>
>PEAP: Tunneled authentication was rejected.<br>
>rlm_eap_peap: FAILURE<br>
>modsingle[authenticate]: returned from eap (rlm_eap) for<br>
>request 6<br>
>++[eap] returns handled<br>
><br>
><br>
>rlm_eap_peap: Received EAP-TLV response.<br>
>rlm_eap_peap: Had sent TLV failure. User was rejected<br>
>earlier in this session.<br>
><br>
>The version of FreeRadius is <a href="http://2.0.5." target="_blank">2.0.5.</a><br>
><br>
>Please help me out to solve the issue.<br>
><br>
>regards,<br>
>Venkat<br>
><br>
>We are also attaching the total log and the clients.conf,<br>
>eap.conf and radiusd.conf. and the log file as .rar file.<br>
><br>
><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 8<br>
Date: Fri, 15 Aug 2008 16:50:21 -0400<br>
From: John Dennis <<a href="mailto:jdennis@redhat.com">jdennis@redhat.com</a>><br>
Subject: what are the intended semantics of paircompare()?<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:48A5EC0D.2020101@redhat.com">48A5EC0D.2020101@redhat.com</a>><br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br>
<br>
I'm in the process of debugging a problem and it seems to me<br>
paircompare() (in src/main/valuepair.c) is returning the wrong result.<br>
But I might be ascribing the wrong semantics to the function. Here is<br>
what I think it's supposed to do, is this correct?<br>
<br>
If any check attribute matches (according to it's operator) any<br>
attribute of the same attribute type in the request then return 0 else<br>
return ~0.<br>
<br>
Phrased another way it's a short circuit "logical or", e.g. as long as<br>
something matches it succeeds.<br>
<br>
If that is the intended semantics then I think there are couple of bugs<br>
in it and I'll provide a patch along with an explanation, otherwise<br>
could you set me straight on what it's behaviour is supposed to be?<br>
<br>
Thanks!<br>
<br>
--<br>
John Dennis <<a href="mailto:jdennis@redhat.com">jdennis@redhat.com</a>><br>
<br>
<br>
<br>
------------------------------<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
<br>
<br>
End of Freeradius-Users Digest, Vol 40, Issue 68<br>
************************************************<br>
</blockquote></div><br><br clear="all"><br>-- <br>regards,<br>Venkat<br>9885480745<br>'take the things and as and when the way they come ...'<br>
</div>