RE: EAP-PEAP with LDAP for 802.1x authentication
Hello, I use FreeRadius with OpenLDAP to authenticate device using EAP-PEAP and it works fine. The only problem I had was the encrypted password in my LDAP database. I by-passed this problem using clear-text Password in LDAP Database and it works fine. You can also have a look at this : http://deployingradius.com/documents/protocols/compatibility.html Regards, Nicolas SOULEMAN. -----Message d'origine----- De : freeradius-users-bounces+debug=afone.com@lists.freeradius.org [mailto:freeradius-users-bounces+debug=afone.com@lists.freeradius.org] De la part de freeradius-users-request@lists.freeradius.org Envoyé : lundi 25 février 2008 11:59 À : freeradius-users@lists.freeradius.org Objet : Freeradius-Users Digest, Vol 34, Issue 124 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. rlm_dbm can not work? (Hangjun He) 2. EAP-PEAP with LDAP for 802.1x authentication (Ryan) 3. Re: EAP-PEAP with LDAP for 802.1x authentication (Arjuna Scagnetto) 4. Re: rlm_dbm can not work? (A.L.M.Buxey@lboro.ac.uk) 5. Re: EAP-PEAP with LDAP for 802.1x authentication (Ivan Kalik) 6. Re: EAP-PEAP with LDAP for 802.1x authentication (Sergio Belkin) 7. radius users update after NAS downing (Zahra Bahar) 8. ldap configuration parameters in radiusd.conf file (Gopinath Reddy N) ---------------------------------------------------------------------- Message: 1 Date: Mon, 25 Feb 2008 11:15:38 +0800 (CST) From: Hangjun He <elmerhe@yahoo.com.cn> Subject: rlm_dbm can not work? To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <182021.24135.qm@web15107.mail.cnb.yahoo.com> Content-Type: text/plain; charset="gb2312" Hi, I am using freeRADIUS 1.1.6. I can not let rlm_dbm work. Result of rlm_dbm_cat: [root@Jack-Linux raddb]# pwd /usr/local/etc/raddb [root@Jack-Linux raddb]# rlm_dbm_cat -f users.db "hhe4" Cleartext-Password := "hhe123" Reply-Message = "Hello" "hhe123" Cleartext-Password := "hhe123" Reply-Message = "Hello" [root@Jack-Linux raddb]# [root@Jack-Linux raddb]# ls users.* users.db.dir users.db.pag [root@Jack-Linux raddb]# Debug message: Module: Loaded dbm dbm: usersfile = "/usr/local/etc/raddb/users.db" Module: Instantiated dbm (dbm) Listening on authentication *:1812 Listening on accounting *:1813 ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:1033, id=26, length=58 User-Name = "hhe123" User-Password = "hhe123" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 rlm_dbm: try open database file: /usr/local/etc/raddb/users.db rlm_dbm: Call parse_user: sm_parse_user.c: check for loops Add hhe123 to user list rlm_dbm: User <hhe123> not foud in database Remove hhe123 from user list sm_parse_user.c: check for loops Add DEFAULT to user list rlm_dbm: User <DEFAULT> not foud in database Remove DEFAULT from user list modcall[authorize]: module "dbm" returns notfound for request 0 modcall: leaving group authorize (returns noop) for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Sending Access-Reject of id 26 to 127.0.0.1 port 1033 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 26 with timestamp 47c220be Nothing to do. Sleeping until we see a request. John. --------------------------------- ???????????????????
participants (1)
-
debug afone