May 2007 - Freeradius-Users - lists.freeradius.org

EAP-TTLS PEAP MCHAPv2
by Eshun Benjamin 02 May '07

02 May '07

Any one has an idea of how to get rid of "The server certificate is not trusted because there are no explicit trust settings" on MAC OSX 10.4.9 without selecting "always trust these freecertificate" ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

4 3

Re : EAP-TTLS PEAP MCHAPv2
by Eshun Benjamin 02 May '07

02 May '07

I am using an enterprise certificate which has intermediate CA. The root CA is well known (verisign) and already on the MAC keychain access(3.3) by default. MAC recognises the certificate and its validity but complains of "The server certificate is not trusted because there are no explicit trust settings". If I click continue or always trust it works fine but I want to get rid of this prompt without clicking continue or always trust to give it smooth and uninteractive log on. ----- Message d'origine ---- De : Guy Davies <aguydavies(a)gmail.com> À : FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Envoyé le : Lundi, 30 Avril 2007, 20h54mn 41s Objet : Re: EAP-TTLS PEAP MCHAPv2 Or, if you're using an Enterprise CA with a self signed cert, then make sure that the CA's cert is installed on your Mac. I do this at home and it's fine once you've installed the CA's cert. Rgds, Guy On 30/04/07, Peter Nixon <listuser(a)peternixon.net> wrote: > On Mon 30 Apr 2007, Eshun Benjamin wrote: > > Any one has an idea of how to get rid of > > "The server certificate is not trusted because there are no explicit > > trust settings" > > > > on MAC OSX 10.4.9 without selecting "always trust these freecertificate" > > Yep. Buy a certificate that your machine trusts :-) > > -- > > Peter Nixon > http://www.peternixon.net/ > PGP Key: http://www.peternixon.net/public.asc > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

2 1

Re: No available IP Addresses in the pool ...
by Florin 02 May '07

02 May '07

Hi Thibault, Hi Alan, Thank you very much for coming back to me on this. > If not, confirm that the pool module name is defined in > the acctounting{} section of radiusd.conf and that your > NAS sends accounting Stop messages. The accounting is performed on a different machine (physically) so no poolname is be defined under the acctounting{} section. Which also means that the machine I have problems with will never see accounting packets. For some security reasons outside of my control, this setup cannot be changed. I'll have a look at the rlm_ippool_tool tool. Thanks. > I wonder what it would take to convince RedHat to use a > version that wasn't almost THREE YEARS out of date. Will the latest version of freeradius **really** help in this scenario ? How ? Could it automatically free up IP addresses from the pool based on a timer ? I cannot go "astray" from RHEL binaries and compile a new freeradius version on a production server (24x7x365) without a hell of a good reason. I hope you can understand me. Thanks again guys and I am looking forward for your opinions :-) Regards, Florin

3 2

Different Groups
by Norman Zhang 02 May '07

02 May '07

Is there a way to set FreeRADIUS to authenticate against specific group of users for certain devices. For example, DEFAULT Auth-Type = System Fall-Through = Yes, cisco-avpair = "shell:priv-lvl=1", Service-Type = NAS-Prompt-User DEFAULT Group == router-rw cisco-avpair := "shell:priv-lvl=15" DEFAULT Group == fw-admin cisco-avpair := "shell:priv-lvl=15" Can I have the PIX to authenticate only against group fw-admin? Norman

2 3

Configure freeradius with authentication
by vicente barrientos 01 May '07

01 May '07

2 1

Help stuck on error: rlm_ldap: LDAP login failed: check identity, password settings in ldap section of radiusd.conf
by shrikant Bhat 01 May '07

01 May '07

How did u resolve this issue? thanks SB

3 2

Howto Freeradius+Authentication, help me.
by vicente barrientos 01 May '07

01 May '07

1 0