peap/eap tls authentication
Hello, I'm not familiar with freeradius yet. I read some HOWTOs and I do try to make wireless Windows XP talk to Radius server. I have an AP 1131. I have managed to make this configuration work with cisco ACS in the past, so AP part should be OK. I do send the output from radiusd -X Hope somebody can help me to point out which parts of configuration should I look into and what possible problems could be. Thanks for your understanding. Dorota
You are setting up Auth-Type System. Post the entry in users file:
users: Matched entry dkupis at line 1
Ivan Kalik Kalik Informatika ISP Dana 12/10/2007, "Dorota Kupis" <dkupis@yukoncollege.yk.ca> piše:
Hello,
I'm not familiar with freeradius yet. I read some HOWTOs and I do try to make wireless Windows XP talk to Radius server. I have an AP 1131. I have managed to make this configuration work with cisco ACS in the past, so AP part should be OK.
I do send the output from radiusd -X
Hope somebody can help me to point out which parts of configuration should I look into and what possible problems could be.
Thanks for your understanding.
Dorota
I do post users thanks -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Friday, October 12, 2007 12:03 PM To: FreeRadius users mailing list Subject: Re: peap/eap tls authentication You are setting up Auth-Type System. Post the entry in users file:
users: Matched entry dkupis at line 1
Ivan Kalik Kalik Informatika ISP Dana 12/10/2007, "Dorota Kupis" <dkupis@yukoncollege.yk.ca> piše:
Hello,
I'm not familiar with freeradius yet. I read some HOWTOs and I do try to make wireless Windows XP talk to Radius server. I have an AP 1131. I have managed to make this configuration work with cisco ACS in the past, so AP part should be OK.
I do send the output from radiusd -X
Hope somebody can help me to point out which parts of configuration should I look into and what possible problems could be.
Thanks for your understanding.
Dorota
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I do post users thanks
dkupis Auth-Type := system Service-Type = NAS-Prompt-User, cisco-avpair == "shell:priv-lvl=15", idle-timeout = 1800
okay. from this it looks like your attempting to configure FR to do some form of Cisco device login authentication. is the user 'dkupis' in /etc/passwd and /etc/shadow etc? if not, then how can the password be tested? also, cisco-avpair == "shell:priv-lvl=15" is a (broken) comparison, if you want to set that value you need cisco-avpair = "shell:priv-lvl=15" alan
You are using an old version of the server. Which one? Why don't you use the latest?
dkupis Auth-Type := system Service-Type = NAS-Prompt-User, cisco-avpair == "shell:priv-lvl=15", idle-timeout = 1800
1. How sure are you that you can get to the command prompt over a wireless interface? I don't think that will work. 2. Try something like: dkupis User-Password == "whatever"[, Auth-Type := EAP] try without Auth-Type first. If it doesn't start EAP convesation add it. Ivan Kalik Kalik Informatika ISP With this you should try to put User-Password instead of Auth-Type on the first line. Dana 12/10/2007, "Dorota Kupis" <dkupis@yukoncollege.yk.ca> piše:
I do post users thanks
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Friday, October 12, 2007 12:03 PM To: FreeRadius users mailing list Subject: Re: peap/eap tls authentication
You are setting up Auth-Type System. Post the entry in users file:
users: Matched entry dkupis at line 1
Ivan Kalik Kalik Informatika ISP
Dana 12/10/2007, "Dorota Kupis" <dkupis@yukoncollege.yk.ca> piše:
Hello,
I'm not familiar with freeradius yet. I read some HOWTOs and I do try to make wireless Windows XP talk to Radius server. I have an AP 1131. I have managed to make this configuration work with cisco ACS in the past, so AP part should be OK.
I do send the output from radiusd -X
Hope somebody can help me to point out which parts of configuration should I look into and what possible problems could be.
Thanks for your understanding.
Dorota
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
1.1.3 -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Friday, October 12, 2007 12:50 PM To: FreeRadius users mailing list Subject: RE: peap/eap tls authentication You are using an old version of the server. Which one? Why don't you use the latest?
dkupis Auth-Type := system Service-Type = NAS-Prompt-User, cisco-avpair == "shell:priv-lvl=15", idle-timeout = 1800
1. How sure are you that you can get to the command prompt over a wireless interface? I don't think that will work. 2. Try something like: dkupis User-Password == "whatever"[, Auth-Type := EAP] try without Auth-Type first. If it doesn't start EAP convesation add it. Ivan Kalik Kalik Informatika ISP With this you should try to put User-Password instead of Auth-Type on the first line. Dana 12/10/2007, "Dorota Kupis" <dkupis@yukoncollege.yk.ca> piše:
I do post users thanks
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Friday, October 12, 2007 12:03 PM To: FreeRadius users mailing list Subject: Re: peap/eap tls authentication
You are setting up Auth-Type System. Post the entry in users file:
users: Matched entry dkupis at line 1
Ivan Kalik Kalik Informatika ISP
Dana 12/10/2007, "Dorota Kupis" <dkupis@yukoncollege.yk.ca> piše:
Hello,
I'm not familiar with freeradius yet. I read some HOWTOs and I do try to make wireless Windows XP talk to Radius server. I have an AP 1131. I have managed to make this configuration work with cisco ACS in the past, so AP part should be OK.
I do send the output from radiusd -X
Hope somebody can help me to point out which parts of configuration should I look into and what possible problems could be.
Thanks for your understanding.
Dorota
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I'm not familiar with freeradius yet. I read some HOWTOs and I do try to make wireless Windows XP talk to Radius server. I have an AP 1131. I have managed to make this configuration work with cisco ACS in the past, so AP part should be OK.
you're authenticating, or trying to, from the system passwd file. if this is intentional then sorry, somethings wrong. if its accidental then you need to edit your users file - remove the line that says DEFAULT Auth-Type := System I also think that the first line or so should print out the version of the FreeRADIUS being run as soo many people neglect to pass on those details..... alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Dorota Kupis -
tnt＠kalik.co.yu