hello, My question is very simple, how can I get in console mode with a debian, and install free radius? THX 2005/9/2, freeradius-users-request@lists.freeradius.org < freeradius-users-request@lists.freeradius.org>:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: CHAP/MS-CHAP/MS-CHAPv2 + LDAP problem (Alan DeKok) 2. Re: CHAP/MS-CHAP/MS-CHAPv2 + LDAP problem (Tiago Fernandes) 3. rlm_perl support for pre/post-proxy in next release? (Thor Spruyt) 4. RE: Windows Client Authentification bevore Domain logon (J?r?my Cluzel) 5. Removing prefix and suffix from User-Name (J?r?my Cluzel) 6. RE: Removing prefix and suffix from User-Name (Seferovic Edvin) 7. RE: 4400 switch configuration and auth_module_radius.so problem (Luis Antonio Chavez Puebla)
----------------------------------------------------------------------
Message: 1 Date: Thu, 01 Sep 2005 17:06:30 -0400 From: "Alan DeKok" <aland@ox.org> Subject: Re: CHAP/MS-CHAP/MS-CHAPv2 + LDAP problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <20050901210630.5E05316FAB@mail.nitros9.org>
Vilius =?utf-8?b?xaB1bXNrYXM=?= <vilius@lnk.lt> wrote:
But Radius can't autenticate to LDAP as there is no User-Password attribute in the packet. (rlm_ldap: Attribute "User-Password" is required for authentication).
Use LDAP as a database, not as an authentication server.
See many, many, posts on this topic to this list.
Is there a way to do this authentification and NOT turning MS-CHAP protocol in VPN box? Are there some kind of preauth hooks in Radius?
Have FreeRADIUS get the password from LDAP, and let FreeRADIUS do the authentication.
Alan DeKok.
------------------------------
Message: 2 Date: Thu, 01 Sep 2005 22:16:11 +0100 From: Tiago Fernandes <l13614@alunos.uevora.pt> Subject: Re: CHAP/MS-CHAP/MS-CHAPv2 + LDAP problem To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <1125609371.3607.7.camel@pyka.crinnet.net> Content-Type: text/plain; charset="iso-8859-15"
On Thu, 2005-09-01 at 12:32 +0300, Vilius ¦umskas wrote:
Hello,
I'm having trouble authenticating from VPN box through Radius server to LDAP. My VPN uses MS-CHAP challenge/response system for authentification. Packet that comes from VPN to Radius server looks like this:
User-Name = "admin" MS-CHAP-Challenge = 0x45bc0700dd22f6795f77bbe0d986328c MS-CHAP2-Response =
0x0100313396a8ea58cd1155c817c50a00715b0000000000000000b03e5340a5ae3c2ac4e
9408d57eae02fcfdbffab3f983a1b NAS-Port = 0 NAS-Port-Type = Virtual Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 10.1.1.202 <http://10.1.1.202>
But Radius can't autenticate to LDAP as there is no User-Password attribute in the packet. (rlm_ldap: Attribute "User-Password" is required for authentication).
insert the NT-Password (ntPassword) attribute into ldap user. this attibute is field with a NT hash value
example: password: test NT Hash: 0CB6948805F797BF2A82807973B89537
Is there a way to do this authentification and NOT turning MS-CHAP protocol in VPN box? Are there some kind of preauth hooks in Radius?
I'm using freeradius-1.0.1-1.1.RHEL3 with openldap-2.0.27-17 and Netware 6.0 Directory Services.
P.S. I tried to turn MS-CHAP protocol and it works great with PAP or plain-text passwords. So everything is configured to work well with LDAP.