Re: freeradius 2.1.6 ldap + mschapv2 to authenticate
Chris, So funny you say that, I was just talking about that with a co worker. I almost find myself searching for his emails and thinking that poor person who is looking for help. I hope to post a link giving exact details on how to do auth with ldap using freeradius 2. I also plan to add how to do group auth with unlang. So tired of finding bits and pieces and no one quite giving a how to do in this mailing list. ------Original Message------ From: Christopher Sheldon Sender: freeradius-users-bounces+daverummel=boothcreek.com@lists.freeradius.org To: FreeRadius users mailing list ReplyTo: FreeRadius users mailing list Subject: Re: freeradius 2.1.6 ldap + mschapv2 to authenticate Sent: Jun 24, 2009 5:36 PM Does anyone else who subscribes to the list specifically read every email Alan sends just to chuckle at him berating the poor, confused people seeking help? It's like reality TV. ;-) Chris. Alan DeKok wrote:
jpablorp wrote:
I replace eap.conf with the Default eap.conf file
and this is my debug:
Where you have *deleted* the real cause of the error.
[peap] Had sent TLV failure. User was rejected earlier in this session.
Look EARLIER in the debug log for the failure. It's really not hard. Look for words like "reject", or "fail", or "error".
The messages will tell you what is wrong, and why. All you need to do is read them.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Sent on the Now Network� from my Sprint® BlackBerry
We should start collecting the Best of Alan posts. Any nominations? Tim
-----Original Message----- From: freeradius-users- bounces+tim.sylvester=networkradius.com@lists.freeradius.org [mailto:freeradius-users- bounces+tim.sylvester=networkradius.com@lists.freeradius.org] On Behalf Of daverummel@boothcreek.com Sent: Wednesday, June 24, 2009 7:56 PM To: FreeRadius users mailing list Subject: Re: freeradius 2.1.6 ldap + mschapv2 to authenticate
Chris, So funny you say that, I was just talking about that with a co worker. I almost find myself searching for his emails and thinking that poor person who is looking for help. I hope to post a link giving exact details on how to do auth with ldap using freeradius 2. I also plan to add how to do group auth with unlang. So tired of finding bits and pieces and no one quite giving a how to do in this mailing list. ------Original Message------ From: Christopher Sheldon Sender: freeradius-users- bounces+daverummel=boothcreek.com@lists.freeradius.org To: FreeRadius users mailing list ReplyTo: FreeRadius users mailing list Subject: Re: freeradius 2.1.6 ldap + mschapv2 to authenticate Sent: Jun 24, 2009 5:36 PM
Does anyone else who subscribes to the list specifically read every email Alan sends just to chuckle at him berating the poor, confused people seeking help?
It's like reality TV. ;-)
Chris.
Alan DeKok wrote:
jpablorp wrote:
I replace eap.conf with the Default eap.conf file
and this is my debug:
Where you have *deleted* the real cause of the error.
[peap] Had sent TLV failure. User was rejected earlier in this session.
Look EARLIER in the debug log for the failure. It's really not hard. Look for words like "reject", or "fail", or "error".
The messages will tell you what is wrong, and why. All you need to do is read them.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Sent on the Now Network from my Sprint® BlackBerry
daverummel@boothcreek.com wrote:
So funny you say that, I was just talking about that with a co worker. I almost find myself searching for his emails and thinking that poor person who is looking for help.
Asking people to read the debug log, as suggested in the FAQ, README, INSTALL, "man" page, every single "howto", and daily on this list? For shame. It's really quite simple. It's a choice. People DON'T read the documentation. They DON'T follow instructions. They DON'T read the debug log. But they get incensed when they get told to read it, and they get incensed when told to follow instructions. Happily, there is a solution. Along with Christopher, you're now the new "cut & paste" master. Please spend a few short hours every day answering questions on this list by cutting & pasting answers from the existing documentation. Also, you will need to explain to people that they should run the server in debugging mode. Feel free to *continue* explaining why this is necessary after they have gotten angry at you for not immediately solving their problem. Complaining about *my* behavior is not an option until you've contributed something to the project. Alan DeKok.
Not only I have to thank Alan for this or that hint and the great software. Nowadays I find his answers amusing. They sound like a mantra: Read the documentation, post the debug output, don't change too much in the default configuration .... What is wrong with that answer? And knowing that one might get this kind of answer: Maybe one thinks twice and reads a bit more through the docs before posting a question. In my opinion there are worse things than thinking twice. I know people that behave exactly this way just for that reason. And they solved most of their problems this way. FreeRADIUS is a project with a comprehensive documentation. Many -if not most - of the questions on the list could be answered by reading the wiki and the rest of the documentation. Knowing this I personally would find it hard to impossible to answer the same questions over and over again. Thanks Alan. Norbert Wegener ________________________________________ Von: freeradius-users-bounces+norbert.wegener=siemens.com@lists.freeradius.org [freeradius-users-bounces+norbert.wegener=siemens.com@lists.freeradius.org] im Auftrag von Alan DeKok [aland@deployingradius.com] Gesendet: Donnerstag, 25. Juni 2009 08:20 An: daverummel@boothcreek.com; FreeRadius users mailing list Betreff: Re: freeradius 2.1.6 ldap + mschapv2 to authenticate daverummel@boothcreek.com wrote:
So funny you say that, I was just talking about that with a co worker. I almost find myself searching for his emails and thinking that poor person who is looking for help.
Asking people to read the debug log, as suggested in the FAQ, README, INSTALL, "man" page, every single "howto", and daily on this list? For shame. It's really quite simple. It's a choice. People DON'T read the documentation. They DON'T follow instructions. They DON'T read the debug log. But they get incensed when they get told to read it, and they get incensed when told to follow instructions. Happily, there is a solution. Along with Christopher, you're now the new "cut & paste" master. Please spend a few short hours every day answering questions on this list by cutting & pasting answers from the existing documentation. Also, you will need to explain to people that they should run the server in debugging mode. Feel free to *continue* explaining why this is necessary after they have gotten angry at you for not immediately solving their problem. Complaining about *my* behavior is not an option until you've contributed something to the project. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wegener, Norbert wrote:
Not only I have to thank Alan for this or that hint and the great software. Nowadays I find his answers amusing. They sound like a mantra: Read the documentation, post the debug output, don't change too much in the default configuration ....
What is wrong with that answer? And knowing that one might get this kind of answer: Maybe one thinks twice and reads a bit more through the docs before posting a question. In my opinion there are worse things than thinking twice. I know people that behave exactly this way just for that reason. And they solved most of their problems this way.
FreeRADIUS is a project with a comprehensive documentation. Many -if not most - of the questions on the list could be answered by reading the wiki and the rest of the documentation. Knowing this I personally would find it hard to impossible to answer the same questions over and over again.
Thanks Alan.
I have to FULLY agree. Every single time someone has had a resonable request, Alan responded immediately. Personally I did not even know what the three a's in aaa meant when I got involved with freeradius. I got ALL the info I needed from the docs. I configured a perfectly working solution without ONE question to this list. (A fairly complicated one - all the docs are there!!) I started posting when I had a feature that did not quote work as exepected. (dynamic clients). Alan even went to the trouble to commit some code to git just to help me. I certainly cannot fault his behaviour. I personally run about 8 technicians. Whenever someone asks me for advice, I always ask them. "What is the exact error"? After asking for it the 100th time, I also get rude. You should NOT have to say the same thing over and over again!!! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782
Alan often replies immediately with useful information, often for questions which are constantly repeated. I'm personally impressed with his tireless dedication, not only in being one of the primary "help desk" roles but also in developing the software, both of which you're getting for *free*. I think Alan (and some others) deserve a note of thanks from this community. Folks, get real, this is open source. That means it's a community of volunteers. In open source if you think something is deficient your job is to step up to the plate and contribute for the betterment of everyone. But if instead you feel you need to complain and not contribute then please walk away. John
-----Original Message----- From: freeradius-users- bounces+jmdanner=samford.edu@lists.freeradius.org [mailto:freeradius- users-bounces+jmdanner=samford.edu@lists.freeradius.org] On Behalf Of John Dennis Sent: Thursday, June 25, 2009 8:54 AM To: FreeRadius users mailing list Subject: Re: freeradius 2.1.6 ldap + mschapv2 to authenticate
Alan often replies immediately with useful information, often for questions which are constantly repeated. I'm personally impressed with his tireless dedication, not only in being one of the primary "help desk" roles but also in developing the software, both of which you're getting for *free*. I think Alan (and some others) deserve a note of thanks from this community.
Folks, get real, this is open source. That means it's a community of volunteers. In open source if you think something is deficient your job is to step up to the plate and contribute for the betterment of everyone. But if instead you feel you need to complain and not contribute then please walk away.
John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I agree wholeheartedly. The documentation is more than adequate. Surprising how much you'll learn by reading it. If you'd prefer Alan spend time answering already answered questions rather than refining/developing freeradius........ Mearl
participants (7)
-
Alan DeKok -
Danner, Mearl -
daverummel@boothcreek.com -
Johan Meiring -
John Dennis -
Tim Sylvester -
Wegener, Norbert