(RADIATOR) Problem with Novell Universal Passwords and EAP

[Hugh Irvine]

Hello Peter -

What you are doing is correct, although it is more usual to do  
something like this:


# configure processing for "inner" request

<Handler TunnelledByPEAP=1>
	<AuthBy LDAP2>
		.....
	</AuthBy>
</Handler>

# configure processing for "outer" request

<Handler>
	<AuthBy FILE>
		Filename %D/users.anonymous
		# configure EAP
		.....
	</AuthBy>
</Handler>


The AuthBy FILE just needs a single entry for "anonymous":


# users.anonymous

anonymous	Encrypted-Password = this.will.never.match


hope that helps

regards

Hugh


On 2 Sep 2006, at 01:05, Peter Bates wrote:

>
> Hello all...
>
> Well, answering my own question, the problem seems
> to lie with the fact that I wasn't authenticating the PEAP inner
> request properly
> (or in fact, at all).
>
> If I configured my <AuthByLDAP2>
> to do Universal Passwords and also added an Identifier (TestUP in this
> case),
> if I then put
>
> <Handler TunnelledByPEAP=1>
> AuthBy TestUP
> </Handler>
>
> all now seems well.
>
> I'd appreciate knowing if any of this is horribly wrong!
>
>
>
> ---------------------------------------------------------------------- 
> ----------------------------->
> Peter Bates, Systems Support Officer, IT Services.
> London School of Hygiene & Tropical Medicine.
> Telephone:0207-958 8353 / Fax: 0207- 636 9838
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.