ntlm_auth reconnection without login data?
Hi, if I connect to my radius server, I don't need my password anymore, also if I restart radius or my workstation. But why? Thanks
Am 27.10.2011 22:57, schrieb Alan DeKok:
Andreas Rudat wrote:
if I connect to my radius server, I don't need my password anymore, also if I restart radius or my workstation. But why? The PC caches the credentials.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hm ok, but radius, too? Cause I don't see there any reaction, too. Andreas -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.17 (MingW32) mQGNBE6jHfABDACyzFkn6k+OtbRANjKZ6NEQOxnnsBSBSs6sT9EBF0U3MnnYW3/p YTW+7aUa/1FZTOWt9wb9H7t0SOqpgqUBmRo/sPteepXblnDaGEh8tzIWfaC9MKc1 QobU5zK9KcDKrs3SyGXEPOOQM8QdtE8KfSJFdUxfanFJUbfTbxq5Gqz1eaU4cWxp gR6GeVYnd11J8AdDDwkjPjx4ZJ5guZ+D646Qi3CT7KT6y8sXVPwpNA3CvGweYX0r STKyBf+nlQtOtByrgZW7BiSAxilYUL4mGE4KmuYAadJ+O6X7NOtz3OQaWgSGjqxH YxDu6orTzL4/csjoVXS9dgeGkhLJgAg72a2yxA4tx/8IXrGp3JVGYGEY2kYcq3k9 jq5hJezoy6s1N//mgm5KaB84zrU5cUcu8kXDppmnp7eXUPnBqj2g2O82buBNa48S wAtnbY4K5fbcnog8g6ouYXpAJo9yHcj+wraQ8+TNFx5nbkg3fZKuf3UeyL3dPKXf wsKehnZ3Ipqkb08AEQEAAbQiQW5kcmVhcyBSdWRhdCA8cnVkYXRAZW5kc3RlbGxl LmRlPokBuAQTAQIAIgUCTqMd8AIbDwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AA CgkQBw5gh+kRIv+yGQv5AQCRZt8wR2McgsTurZEZXz5UpxEPZB/dA/iXtPzZXJih XLRZFqcdT+c8DCLbhXjO5aLndOCIDwWmsnqX2fuGAjlM4GJAAUEARSNtWY7V+rUt PhdOz/flCZo/+p7wBi0XOJcWhysS7DV/ssSYdnuJvONUBXCQ/MpJsVXuKdgPa9IR hvi37Ang1Cxb7htKHIuA4wCuqz1/4VGNez/65qwjuYakbB4/rXkKWb17XqCZrtoo YiQSxPU7fP5lM4ybQXxP1qrptmaF9EqGTnj/xAU3tCE+PhB3baoVw6VG9nr9xYwh bqCGtTbtrkmYlgioC2fFHDgg3U1GVBIbi0AoddXSs5OekgSvt827OcyWVSyjobyn tH4/jwb8X8iOM/x8RZhzwKhpHA0k7ltTm7qXApARcL1tV6y4GIKwuy1RLZqkpNh1 teqYaxAKlxC77s6gftxqr7G6NCssgCCy2Y50LSvcQbZDPZeBdrPoGI/xAWNy4Otv 33k4P9hxJKHNqLYJN+Gn =UaS9 -----END PGP PUBLIC KEY BLOCK-----
On Fri, Oct 28, 2011 at 1:18 PM, Andreas Rudat <rudat@endstelle.de> wrote:
Am 27.10.2011 22:57, schrieb Alan DeKok:
Andreas Rudat wrote:
if I connect to my radius server, I don't need my password anymore, also if I restart radius or my workstation. But why? The PC caches the credentials.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hm ok, but radius, too? Cause I don't see there any reaction, too.
What do you mean by "connect to my radius server"? ssh? What do you mean by "don't see any reaction"? If you want clear answer, start by posting clear questions. Asking Tarzan-like questions will get you Tarzan-like answers. For example, you could write "I'm trying to connect to my radius server, running Centos 5.x, using ssh with putty, as root. However it didn't ask password, and simply lets me log in". Obviously that's just an example. Also, be clear how it's connected to FR. Do you use pam_radius? Do you use 802.1x? -- Fajar
Am 28.10.2011 08:33, schrieb Fajar A. Nugraha:
On Fri, Oct 28, 2011 at 1:18 PM, Andreas Rudat <rudat@endstelle.de> wrote:
Am 27.10.2011 22:57, schrieb Alan DeKok:
Andreas Rudat wrote:
if I connect to my radius server, I don't need my password anymore, also if I restart radius or my workstation. But why? The PC caches the credentials.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hm ok, but radius, too? Cause I don't see there any reaction, too. What do you mean by "connect to my radius server"? ssh? What do you mean by "don't see any reaction"?
If you want clear answer, start by posting clear questions. Asking Tarzan-like questions will get you Tarzan-like answers.
For example, you could write "I'm trying to connect to my radius server, running Centos 5.x, using ssh with putty, as root. However it didn't ask password, and simply lets me log in". Obviously that's just an example.
Also, be clear how it's connected to FR. Do you use pam_radius? Do you use 802.1x?
Hi, sorry for that. I use 802.1x and I'm wondering if I connect again at radius, I don't see any reactions in my debug output of radius, so at the first time you see how the peap tunnel is getting up, challange response and so on. Radius is running on Pfsense 2.0 and the clients are connecting with wpa2 Windows/Linux Thanks
On Fri, Oct 28, 2011 at 1:46 PM, Andreas Rudat <rudat@endstelle.de> wrote:
sorry for that. I use 802.1x
802.1 wired? wireless?
and I'm wondering if I connect again
What do you mean by "connect again"? unplug the cable and plug it again? Trun off the wireless adapter and turn it on again? Logout and login?
at radius, I don't see any reactions in my debug output of radius, so at the first time you see how the peap tunnel is getting up, challange response and so on.
Radius is running on Pfsense 2.0 and the clients are connecting with wpa2 Windows/Linux
From your (very brief) description, the best answer I can give is "ask the NAS".
FR debug would preety print much print out everything it does. If it doesn't print anything, it's not doing anything. Not even accepting any packets. Why didn't it recive any packet? Probably because the NAS doesn't send anything (which is why I said "ask the NAS"). Why didn't the NAS send any packet? There are several possible options. Namely: - the NAS cache authentication result - the session was never terminated So, ask the NAS. I'm GUESSING that you were never disconnected in the first place. -- Fajar
Am 28.10.2011 08:55, schrieb Fajar A. Nugraha:
On Fri, Oct 28, 2011 at 1:46 PM, Andreas Rudat <rudat@endstelle.de> wrote:
sorry for that. I use 802.1x 802.1 wired? wireless?
and I'm wondering if I connect again What do you mean by "connect again"? unplug the cable and plug it again? Trun off the wireless adapter and turn it on again? Logout and login?
at radius, I don't see any reactions in my debug output of radius, so at the first time you see how the peap tunnel is getting up, challange response and so on.
Radius is running on Pfsense 2.0 and the clients are connecting with wpa2 Windows/Linux From your (very brief) description, the best answer I can give is "ask the NAS".
FR debug would preety print much print out everything it does. If it doesn't print anything, it's not doing anything. Not even accepting any packets.
Why didn't it recive any packet? Probably because the NAS doesn't send anything (which is why I said "ask the NAS").
Why didn't the NAS send any packet? There are several possible options. Namely: - the NAS cache authentication result - the session was never terminated
So, ask the NAS. I'm GUESSING that you were never disconnected in the first place.
It seems it is the NAS, it is AP with openwrt on it, but cannot find any thing there what could be the problem. -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.17 (MingW32) mQGNBE6jHfABDACyzFkn6k+OtbRANjKZ6NEQOxnnsBSBSs6sT9EBF0U3MnnYW3/p YTW+7aUa/1FZTOWt9wb9H7t0SOqpgqUBmRo/sPteepXblnDaGEh8tzIWfaC9MKc1 QobU5zK9KcDKrs3SyGXEPOOQM8QdtE8KfSJFdUxfanFJUbfTbxq5Gqz1eaU4cWxp gR6GeVYnd11J8AdDDwkjPjx4ZJ5guZ+D646Qi3CT7KT6y8sXVPwpNA3CvGweYX0r STKyBf+nlQtOtByrgZW7BiSAxilYUL4mGE4KmuYAadJ+O6X7NOtz3OQaWgSGjqxH YxDu6orTzL4/csjoVXS9dgeGkhLJgAg72a2yxA4tx/8IXrGp3JVGYGEY2kYcq3k9 jq5hJezoy6s1N//mgm5KaB84zrU5cUcu8kXDppmnp7eXUPnBqj2g2O82buBNa48S wAtnbY4K5fbcnog8g6ouYXpAJo9yHcj+wraQ8+TNFx5nbkg3fZKuf3UeyL3dPKXf wsKehnZ3Ipqkb08AEQEAAbQiQW5kcmVhcyBSdWRhdCA8cnVkYXRAZW5kc3RlbGxl LmRlPokBuAQTAQIAIgUCTqMd8AIbDwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AA CgkQBw5gh+kRIv+yGQv5AQCRZt8wR2McgsTurZEZXz5UpxEPZB/dA/iXtPzZXJih XLRZFqcdT+c8DCLbhXjO5aLndOCIDwWmsnqX2fuGAjlM4GJAAUEARSNtWY7V+rUt PhdOz/flCZo/+p7wBi0XOJcWhysS7DV/ssSYdnuJvONUBXCQ/MpJsVXuKdgPa9IR hvi37Ang1Cxb7htKHIuA4wCuqz1/4VGNez/65qwjuYakbB4/rXkKWb17XqCZrtoo YiQSxPU7fP5lM4ybQXxP1qrptmaF9EqGTnj/xAU3tCE+PhB3baoVw6VG9nr9xYwh bqCGtTbtrkmYlgioC2fFHDgg3U1GVBIbi0AoddXSs5OekgSvt827OcyWVSyjobyn tH4/jwb8X8iOM/x8RZhzwKhpHA0k7ltTm7qXApARcL1tV6y4GIKwuy1RLZqkpNh1 teqYaxAKlxC77s6gftxqr7G6NCssgCCy2Y50LSvcQbZDPZeBdrPoGI/xAWNy4Otv 33k4P9hxJKHNqLYJN+Gn =UaS9 -----END PGP PUBLIC KEY BLOCK-----
ah, I see, if I disconnect from wlan, there is also no response from radius no disconnect response. Am 28.10.2011 15:49, schrieb Andreas Rudat:
Am 28.10.2011 08:55, schrieb Fajar A. Nugraha:
On Fri, Oct 28, 2011 at 1:46 PM, Andreas Rudat <rudat@endstelle.de> wrote:
sorry for that. I use 802.1x 802.1 wired? wireless?
and I'm wondering if I connect again What do you mean by "connect again"? unplug the cable and plug it again? Trun off the wireless adapter and turn it on again? Logout and login?
at radius, I don't see any reactions in my debug output of radius, so at the first time you see how the peap tunnel is getting up, challange response and so on.
Radius is running on Pfsense 2.0 and the clients are connecting with wpa2 Windows/Linux From your (very brief) description, the best answer I can give is "ask the NAS".
FR debug would preety print much print out everything it does. If it doesn't print anything, it's not doing anything. Not even accepting any packets.
Why didn't it recive any packet? Probably because the NAS doesn't send anything (which is why I said "ask the NAS").
Why didn't the NAS send any packet? There are several possible options. Namely: - the NAS cache authentication result - the session was never terminated
So, ask the NAS. I'm GUESSING that you were never disconnected in the first place.
It seems it is the NAS, it is AP with openwrt on it, but cannot find any thing there what could be the problem.
participants (3)
-
Alan DeKok -
Andreas Rudat -
Fajar A. Nugraha