<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">
<DIV>Hi Gary, I'm from Northern Lights school Division 69, We run Sles 10, with OES2 SP2 services on it, and are using edirectory 8.8 SP5 (I think the newest one), and guess what, I'm using radius 2.1.9, and it works like a hot damn. I think i can help you :) I have Freeradius, Authenticating against edir, with about 300+ users. My authetication uses the secure certificate from the Novell OES2 server embedded into freeradius, and I have no authentication issues (Other than the users choking out the access points with youtube ;) my config even follows edir policy, IE disables accounts, time frames etc.</DIV>
<DIV> </DIV>
<DIV>Let me know if you're interested in that.</DIV>
<DIV> </DIV>
<DIV>Matt</DIV>
<DIV> </DIV>
<DIV>Anyways, I could probably modify my instructions to meet your sites needs. </DIV>
<DIV> </DIV>
<DIV>
<DIV><STRONG><FONT face=Terminal>
<HR>
</FONT></STRONG></DIV>
<DIV align=left><STRONG><FONT face=Terminal>
<TABLE style="WIDTH: 481px; HEIGHT: 176px" cols=2 border=1>
<TBODY>
<TR>
<TD width=50><BR><IMG alt="" hspace=0 src="cid:RIOVGGOTHBIP.IMAGE.jpg" align=baseline border=0></TD>
<TD width=50>
<DIV><FONT size=2>Matthew Stavert </FONT></DIV>
<DIV><FONT size=2>ITSM, ACMT </FONT></DIV>
<DIV><FONT size=2><FONT size=1>Information Systems Analyst</FONT></FONT></DIV>
<DIV><FONT size=1>NLSD. 69</FONT></DIV>
<DIV><FONT size=1></FONT> </DIV>
<DIV><FONT size=1>PH: 780-826-3145</FONT></DIV>
<DIV><FONT size=1>Cell: 780-207-1146</FONT></DIV>
<DIV><FONT size=2></FONT><BR> </DIV></TD></TR></TBODY></TABLE></FONT></STRONG></DIV><BR><BR>>>> Gary Gatten <Ggatten@waddell.com> 12/15/2010 4:52 PM >>><BR>Someone will for SURE yell at you for using something that old. Or, they'll just ignore you.<BR><BR>That is a weird a$$ problem for sure! Why can't you upgrade? At LEAST to the latest 1.x version?<BR><BR>-----Original Message-----<BR>From: freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org [mailto:freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org] On Behalf Of discgolfer72<BR>Sent: Wednesday, December 15, 2010 5:36 PM<BR>To: freeradius-users@lists.freeradius.org<BR>Subject: Password oddity<BR><BR><BR>Set up FreeRadius on SLES 10. Using the NTRadPing utility we can authenticate<BR>to our back end LDAP server (eDirectory) w/o problem. However, when we<BR>enabled Radius authentication on two separate Wireless access points<BR>(Linksys WRT54 and DLink WBR 1310), they both fail authentication because<BR>the password they pass (or how FreeRadius interprets the password) changes<BR>one letter of the password.<BR><BR>For example, we set up a radtest user with a password of radtest. FreeRadius<BR>server in debug shows the request come in but passes a password value of<BR>aadtest. So, as a test we changed the password to aadtest for the radtest<BR>user. The password then came across as badtest. So, we thought we'd change<BR>the password to cadtest to see what would happen. Now the password was<BR>sent/received as aadtest again.<BR><BR>Using NTRadPing utility, we see the request come in, get processed and then<BR>login.......<BR><BR>Running FreeRadius 1.1.0 as this is the version that Novell "supports." <BR>Please don't yell at me on this. Their documentation is based on this<BR>version and not the latest version.......<BR><BR>Has anyone seen this behavior before and if so, know how to fix it?<BR><BR>TIA!! <BR>-- <BR>View this message in context: <A href="http://freeradius.1045715.n5.nabble.com/Password-oddity-tp3307174p3307174.html">http://freeradius.1045715.n5.nabble.com/Password-oddity-tp3307174p3307174.html</A><BR>Sent from the FreeRadius - User mailing list archive at Nabble.com.<BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR><BR><BR><BR><BR><BR><font size="1"><BR><div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'><BR></div><BR>"This email is intended to be reviewed by only the intended recipient<BR>and may contain information that is privileged and/or confidential.<BR>If you are not the intended recipient, you are hereby notified that<BR>any review, use, dissemination, disclosure or copying of this email<BR>and its attachments, if any, is strictly prohibited. If you have<BR>received this email in error, please immediately notify the sender by<BR>return email and delete this email from your system."<BR></font><BR><BR><BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR></DIV></BODY></HTML>