After some version of windows (which I don't really know because I don't use it), by default what is sent is the name of the machine. You have to configure it on purpose to send the username, under 802.1X auth tab, changing machine name by default to user name. Regards ----------------------------- Message: 2 Date: Mon, 23 Sep 2013 14:14:26 -0400 (EDT) From: paul trader <fliptop@igolinux.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius-Users Digest, Vol 101, Issue 50 Message-ID: <alpine.DEB.2.02.1309231409260.7633@soundgarden.localdomain.local> Content-Type: text/plain; charset="windows-1252" On Mon, 23 Sep 2013 at 18:49, Rui Ribeiro opined: RR:Your not crazy for sure. The problem authenticating with Windows boxen RR:is that they only support MSCHAPv2? kudos to Microsoft. hi rui - thanks for that, although my family and co workers may disagree! according to this wiki faq entry: http://wiki.freeradius.org/guide/faq#How-do-I-make-Windows-XP-clients-use-on... it's possible to force ms to use pap. somehow, though, after reading another reply to my post, i'm getting the feeling ms clients are munging something in the username because it's not being found in the users file. regards, paul On 23 September 2013 21:23, <freeradius-users-request@lists.freeradius.org>wrote:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: pap always returns noop for windows dialup authentication (paul trader) 2. Re: Freeradius-Users Digest, Vol 101, Issue 50 (paul trader) 3. Re: pap always returns noop for windows dialup authentication (Alan DeKok) 4. Re: pap always returns noop for windows dialup authentication (John Dennis) 5. Re: EAP + SSL + Certificate chains (Trevor Jennings) 6. Re: pap always returns noop for windows dialup authentication (paul trader)
----------------------------------------------------------------------
Message: 1 Date: Mon, 23 Sep 2013 14:07:21 -0400 (EDT) From: paul trader <fliptop@igolinux.com> To: John Dennis <jdennis@redhat.com> Cc: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: pap always returns noop for windows dialup authentication Message-ID: <alpine.DEB.2.02.1309231357120.7633@soundgarden.localdomain.local> Content-Type: TEXT/PLAIN; charset=US-ASCII
On Mon, 23 Sep 2013 at 13:31, John Dennis opined:
JD:You still haven't sent the full debug.
hi john - thanks for your reply. i sent the output from running radiusd -X, are you saying i need to run -Xxx and send that instead?
or are you looking for the startup output as well? i only included the output for the particular requests.
JD:Also, you said you were moving from v1 to v2, you can't just copy v1 JD:configs over, they're different, hope you weren't doing that.
i used a default v2 install and only changed the users and clients.conf files. everything else was left alone.
regards, paul
------------------------------
Message: 2 Date: Mon, 23 Sep 2013 14:14:26 -0400 (EDT) From: paul trader <fliptop@igolinux.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius-Users Digest, Vol 101, Issue 50 Message-ID: <alpine.DEB.2.02.1309231409260.7633@soundgarden.localdomain.local> Content-Type: text/plain; charset="windows-1252"
On Mon, 23 Sep 2013 at 18:49, Rui Ribeiro opined:
RR:Your not crazy for sure. The problem authenticating with Windows boxen RR:is that they only support MSCHAPv2? kudos to Microsoft.
hi rui - thanks for that, although my family and co workers may disagree!
according to this wiki faq entry:
http://wiki.freeradius.org/guide/faq#How-do-I-make-Windows-XP-clients-use-on...
it's possible to force ms to use pap. somehow, though, after reading another reply to my post, i'm getting the feeling ms clients are munging something in the username because it's not being found in the users file.
regards, paul
------------------------------
Message: 3 Date: Mon, 23 Sep 2013 14:21:22 -0400 From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: pap always returns noop for windows dialup authentication Message-ID: <524086A2.9030708@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
paul trader wrote:
i used a default v2 install and only changed the users and clients.conf files. everything else was left alone.
Well, there's no magic. If the "users" file entry doesn't match, it's because the User-Name isn't "test".
Alan DeKok.
------------------------------
Message: 4 Date: Mon, 23 Sep 2013 14:42:35 -0400 From: John Dennis <jdennis@redhat.com> To: paul trader <fliptop@igolinux.com> Cc: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: pap always returns noop for windows dialup authentication Message-ID: <52408B9B.2060701@redhat.com> Content-Type: text/plain; charset=ISO-8859-1
On 09/23/2013 02:07 PM, paul trader wrote:
On Mon, 23 Sep 2013 at 13:31, John Dennis opined:
JD:You still haven't sent the full debug.
hi john - thanks for your reply. i sent the output from running radiusd -X, are you saying i need to run -Xxx and send that instead?
No. It means all the output from radiusd -X. Yes, that might seem like a lot but it contains useful information. But before you do send it to this list see below.
or are you looking for the startup output as well? i only included the output for the particular requests.
That's not the full debug is it? :-)
JD:Also, you said you were moving from v1 to v2, you can't just copy v1 JD:configs over, they're different, hope you weren't doing that.
i used a default v2 install and only changed the users and clients.conf files. everything else was left alone.
You have all the information you need to debug your problem. It does require reading the debug output carefully. But you should really try to do that yourself first. As a said earlier, verify you're reading the exact same users file in both cases (the debug output will tell you what files are being read), If they are then look at your users file and determine why the user name is not matching, there is nothing magic about it, it should be straight forward. Still stumped? Then come back to the list for help.
-- John
------------------------------
Message: 5 Date: Mon, 23 Sep 2013 16:18:55 -0400 From: Trevor Jennings <Trevor@simple101.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: EAP + SSL + Certificate chains Message-ID: < CAHNBdEJUdmUCQG+uW+dfXUDnDdYKuvCdQnstWwsjusiM3+afjQ@mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1"
Hey I wanted to say thanks for the tips! I convinced the peers that it was not a good idea to allow auto certificate acceptance and to just have the clients accept it when the new certificate went online.
Cheers,
- Trevor
On Thu, Sep 12, 2013 at 3:46 PM, Brian Julin <BJulin@clarku.edu> wrote:
Mathieu wrote: At least from that side there is hope for improvements with Android 4.3 onwards there are API calls for enterprise wireless configuration.
Maybe "someone" steps up by making an application that can manage profiles or something like this.
That is promising, but I hope this does not become a case of "Oh, there's an app for that basic system function" versus it being in the core UI. Because nobody will have it pre-installed.
-- Brian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html