<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Hi omegabk,<br><br>Yes, I already known that. However, for some reason FreeRadius doesn't recognized that OpenSSL is already installed on my system. During the compilation there wasn't any WARNING about OpenSSL. In the other hand, I just want to do transparent authentications of the user (it does not matter if it used clear text passwords) with my AD using a wireless LAN. As Alan Dekov said in his How To, I am using ntlm_auth module so when I wrote in eap.conf<br><br> eap {<br> default_eap_type = gtc<br> ...<br><br>with my wireless client (Nokia N900) configured like taht:<br><br>EAP Type : PEAP<br>EAP Method: EAP GTC (other possibility is EAP MSCHAPv2) # I am not using certifies at all<br>Username: ortegaca<br><br>In the FreeRadius console I see:<br><br>Listening on authentication address * port 1645<br>Listening on accounting address * port 1646<br>Listening on command file /usr/local/var/run/radiusd/radiusd.sock<br>Listening on proxy address * port 1647<br>Ready to process requests.<br>rad_recv: Access-Request packet from host 129.90.13.170 port 1645, id=223, length=192<br> User-Name = "<font style="" color="#ff0000">h59bfGBUMZsw4BwQZ3Pz/Q==</font>"<br> Framed-MTU = 1400<br> Called-Station-Id = "0015.62c8.75d0"<br> Calling-Station-Id = "a87b.3995.468a"<br> Cisco-AVPair = "ssid=radiusd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x125b506b554d05dcf0cd7eace1e4b8a1<br> EAP-Message = 0x0202001d0168353962664742554d5a7377344277515a33507a2f513d3d<br> NAS-Port-Type = Wireless-802.11<br> Cisco-NAS-Port = "682"<br> NAS-Port = 682<br> NAS-IP-Address = 129.90.13.170<br> NAS-Identifier = "ap"<br>+- entering group authorize {...}<br>[ntlm_auth] expand: --username=%{mschap:User-Name} -> --username=h59bfGBUMZsw4BwQZ3Pz/Q==<br>[ntlm_auth] expand: --password=%{User-Password} -> --password=<br>Exec-Program output: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064) <br>Exec-Program-Wait: plaintext: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064) <br>Exec-Program: returned: 1<br>++[ntlm_auth] returns reject<br>Using Post-Auth-Type Reject<br>+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> h59bfGBUMZsw4BwQZ3Pz/Q==<br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Delaying reject of request 0 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br>Sending delayed reject for request 0<br>Sending Access-Reject of id 223 to 129.90.13.170 port 1645<br>Waking up in 4.9 seconds.<br><br>Why my username is encrypted or something like that? I don't get it... I just need authenticate a AD user using clear-text password<br><br>Cesar<br><hr id="stopSpelling">Date: Wed, 17 Mar 2010 14:03:57 +0100<br>Subject: Re: openssl support<br>From: omegabk@gmail.com<br>To: freeradius-users@lists.freeradius.org<br><br>hi,<br><br>You need to have the <span class="ecxil">openssl</span> development
packages installed. When you run configure please make sure you check for warnings, if configure
doesn't find required libraries and headers it will emit a warning
message, but will proceed (just disabling the feature).<br>i fixed it doing like this<br><br>bye<br><br><br><br><div class="ecxgmail_quote">2010/3/17 Cesar Ortega <span dir="ltr"><<a href="mailto:cesar8489@hotmail.com">cesar8489@hotmail.com</a>></span><br>
<blockquote class="ecxgmail_quote" style="padding-left: 1ex;">
<div>
Hi there guys,<br><br>Look, I have been configuring FreeRadius (2.1.8) with OpenSSL (0.9.8m)<br>to use ntlm_auth but it did not work at all. I installed libssl-dev (as<br>Alan Dekok has said before) but it stills telling me:<br>
<br>Ignoring EAP-Type/tls because we do not have OpenSSL support.<br>Ignoring EAP-Type/ttls because we do not have OpenSSL support.<br>Ignoring EAP-Type/peap because we do not have OpenSSL support.<br><br>Recompiling FreeRadius does not work either. I tried installing from the<br>
sources and repositories but I could not solved the issue.<br><br>Any suggestion? <br><br>Help please...<br><font color="#888888"><br>Cesar
<br></font><div class="ecxhm"><hr>Connect to the next generation of MSN Messenger <a href="http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline">Get it now! </a></div>
</div>
<br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br> <br /><hr />Connect to the next generation of MSN Messenger <a href='http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline' target='_new'>Get it now! </a></body>
</html>