Trying to setup a RADIUS connection with challenge response

I need to test a RADIUS authentication and I've read note id 272804.1 and http://download.oracle.com/docs/cd/B19306_01/network.102/b14268/asoradus.htm.
I'm trying to connect from DEVDB machine using sqlplus as client and connect to the local database server 10gr2 which then should act as RADIUS client to finally try to reach another machine with hostname DEVRADIUS.
I'm using freeRadius which delegate authentication and authorization phases to a OTP service. Other middleware services are able to use this kind of RADIUS authentication with no problem: so this radius configuration is perfectly working for other clients.
I've done some tests, but I'm not able to connect to DEVRADIUS from the Oracle database.
Executing ./adapters and ./adapters ./oracle showed me the RADIUS authentication is available.
When I try to connect using my external user I'm receiving the following error:
ORA-12638: Credential retrieval failed
A firewall exists between the database server and clients, but the port 1812 used to connect my database DEVDB to radius server DEVRADIUS has been open (UDP)
My sqlnet.ora
# sqlnet.ora Network Configuration File: /u01/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora
# Generated by Oracle configuration tools.
SQLNET.AUTHENTICATION_SERVICES= (RADIUS)
SQLNET.RADIUS_PORT= (1812)
SQLNET.RADIUS_AUTHENTICATION_PORT = 1812
SQLNET.RADIUS_SECRET = (/u01/app/oracle/product/10.2.0/db_1/network/security/radius.key)
SQLNET.RADIUS_AUTHENTICATION_TIMEOUT = 10
SQLNET.RADIUS_AUTHENTICATION = DEVRADIUS
SQLNET.RADIUS_CHALLENGE_RESPONSE = (ON)
SQLNET.RADIUS_CHALLENGE_KEYWORD = (CHALLENGE)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)Into /u01/app/oracle/product/10.2.0/db_1/network/security/radius.key there's only the shared secret RADIUS key.
Previously I've created this user:
SQL> create user rad_user identified externally;
SQL> grant connect, resource to rad_user;
SQL> show parameter OS_A
NAME TYPE VALUE
os_authent_prefix string
remote_os_authent boolean FALSE
SQL> show parameter OS_RO
NAME TYPE VALUE
os_roles boolean FALSE
remote_os_roles boolean FALSEThis is the error I receive:
sqlplus /nolog;
SQL> connect /@DEVDB;
ERROR:
ORA-12638: Credential retrieval failedOn RADIUS server started in debug mode, I don't see any attempt to connect.
Any suggestions?

loqs wrote:You built the package (using --asroot with makepkg is not a good idea ) but you did missed Install_the_package
Also see Kernel_Modules so the module is loaded automatically at boot.
Seriously? I spent that many hours searching for my several error messages, trying to solve them, not wanting to ask for help without putting too much of my own effort into it and when I finally decide to ask for help it is when I didn't get a super essential thing like makepkg doesn't install and is merely to create .pkg.tar.xz?? Oh gosh... (;
Well, thank you! I guess I'll take my next change to use Google to find out how to use makepkg without --asroot. Yes, wl is loaded now and it's set as the kernel driver in use!
Unfortunately, after ip link set wlp2s0 up and typing dmesg | grep wl I get:
wl: module license 'Mixed/Proprietary' taints kernel.
wlan0: Broadcom BCM4727 802.11 Hybrid Wireless Controller 6.30.223.248 (r487574)
systemd-udevd[148]: renamed network interface wlan0 to wlp2s0
wl 0000:02:00.0: no hotplug settings from platform
wl 0000:02:00.0: no hotplug settings from platform
wl 0000:02:00.0: no hotplug settings from platform
wl 0000:02:00.0: no hotplug settings from platform
And therefor: No firmware loaded. Google doesn't give much about this message but hints to PCI or PCI-Express not working as it should. I found this and tried starting with pciehp.pciehp_force=1 and ordered a modprobe acpiphp but nothing changed.

Similar Messages

Trying to setup FaceTime on iPad with aol email- it. Keeps saying verifying and it never sends an email

Trying to setup FaceTime on iPad with aol email- it. Keeps saying verifying and it never sends an email- any suggestions?

take a look at the link
IOS troubleshooting facetime
http://support.apple.com/kb/TS3367

Can't setup correctly VPN connection with certificate

First of all: the VPN connection to a Windows server I'm trying to setup in Mac OS X works perfectly with a Windows XP client.
The VPN is of L2TP over IPSEC type and uses a certificate for computer authentication. I've tried to setup the connection on my mac importing the certificate on Keychain and marking the certificate as trusted for every use. I've set up the VPN in System preferences - Network creating a new VPN connection and filling: server address, account name, password for user authentication and selecting the certificate for computer authentication in the "Authentication settings" section. Then I've clicked Apply.
Then, when I click Connect the mac answers with a message something like this (I'm going to translate from the italian message), titled "Internet connection": "The IPSec shared secret is missing. Verify settings and retry.".
So, what's happened? Why mac says me that the "shared secret is missing" while I've never set up that option but instead I've selected the "Certificate" radio button in "Computer authentication" section of "Authentication settings" and correctly selected the imported certificate? The strange thing is that verifying what I've set up in the VPN configuration I've found that the active radio button in "Authentication settings" was the one corresponding to "Shared secret", not the one of "Certificate". It seems that when clicking on Apply the mac doesn't stores the certificate choice but resets the choice to "Shared secret".
Anyone has some suggestions to resolve my problem?
Thank you

to run IKEv2 you need the following EKUs on both server and client certificates. The machines select certificates automatically, the best option is the a), if not present, they proceed to the next b) and c):
a)IPSec IKE
Intermediate (IPSec Protection)
1.3.6.1.5.5.8.2.2 + Server Authentication +
Client Authentication
b)IPSec IKE Intermediate +
Client Authentication
c)Client Authentication
As you may see, both client and server require Client Authentication EKU in the certificate. If you include Server Authentication and IKE Intermediate, you will get more exact match.
ondrej.
Hi ondrej,
Thanks for the reply. I've reissued the certificate with the Client Authentication EKU, but it hasn't made any difference.
Please note that I'm not using machine certificates on the client for authentication - I want to use Secure Password (EAP-MSCHAPv2), which is working when I connect through SSTP. However, the server seems to be determined to use certificates for client authentication
- when I log using wfp, in the wfpdiag.xml file I can see that the authentication method listed is <mmAuthMethod>IKEEXT_CERTIFICATE</mmAuthMethod>. As I understand it, this should not be the case.
How can I get the server to accept EAP-MSCHAPv2 authentication?
Thanks,
Andrew

LDAP Servers not listed when trying to setup new LDAP connection

Using SQL Developer: 1.5.1
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0
Windows XP client environment
Can anyone clarify how to setup LDAP connections in SQL Developer. We use LDAP for our connections with all the other Oracle tools like SQL*Plus and other developer tools like forms. LDAP is working fine for all of those tools. However, when I try to setup an LDAP connection for SQL*Developer no servers are found for the drop down box. Do we need to put the sqlnet.ora and ldap.ora files somehwere so that SQL Developer can find them? Does SQL Developer even need them? How does the LDAP server get populated in SQL Developer? Thanks. I have tried looking at other posts on this issue and nothing really jumped out at how to do this. I do have some older version Oracle homes setup also. For example we have a Oracle 6i home setup on our machines for the old versions of forms and reports.

I set it to C:\Oracle10g_DevSuiteHome_1\NETWORK\ADMIN. This is under one of my Oracle Homes on this machine that contains the sqlnet.ora and the LDAP.ora files. This didn't appear to make any difference. Still no LDAP servers listed when you try to add or build a new connection. I tried some of my other Oracle Homes and still no effect. I have also tried copying the sqlnet.or and the ldap.ora files to other directories. I have switched my default Oracle Home to point to the 9i and above homes and this made no difference.
I have never had to do anything with an environment variable called TNS_ADMIN before. I almost remember a variable called TNS_ADMIN years ago in the registery that had to be modified and it was TNS_ADMIN if I remember correclty. When you said to set an environment variable you did mean to just set or create a new environment variable using the My Computer > Properties > Advanced Tab > Environment Variables on the client machine. I just want to make sure I set the right variable. Thanks for you help and suggestons.
By the way I can connect just fine using basic or advanced connections. I just would like to use LDAP so I don't have to maintain connections when port, server or SID change. For example we just failed over and the fail over database is on a different server. We do this as a test or when needed for failover purposes. If you are using the basic and advanced connections you need to go in a update connection information. If we use LDAP this is all maintained by the DBAs and individual clients shouldn't have to maintain any connection information as long as the have the right SID. The documentation for SQL Developer doesn't really seem to address how to setup LDAP connections it just mentions that you can do it and it sounds simple.

RV220W - Trying to setup an IPv6 connection

Hi,
My ISP provides IPv6 connectivity in the form of dual stack IPv4/IPv6 with DHCPv6 Prefix Delegation. Using a Cisco IOS-based router I managed to make such a connection by using as a template the Cisco IOS configuration file that my ISP has posted as an example in the following link:
http://ipv6.otenet.gr/current-config.txt
The main point on this configuration is a PPPoE connection with:
interface Dialer46
ipv6 address autoconfig default
ipv6 enable
ipv6 dhcp client pd LAN_DHCP
interface Vlan1
description local LAN
ipv6 address LAN_DHCP ::/64 eui-64
ipv6 enable
ipv6 nd other-config-flag
ipv6 dhcp server LAN_DHCP
I am now trying to configure an RV220W router on the same network but I cannot make it establish an IPv6 connection. Perhaps I am not setting it up correctly to make it work similarly to the Cisco IOS-based router. My settings are the following:
Networking -> IPv6 ->
IP Mode - IPv4 and IPv6 Dual-Stack
IPv6 WAN - DHCPv6 + Stateless Address Auto Configuration
IPv6 LAN - IPv6 Address: fec0::1, IPv6 Prefix Length: 64, DHCP Status: Enable DHCPv6 Server, DHCP Mode: Stateless, DNS Servers: Use DNS from ISP.
Router Advertisement: Status: Enable, Advertise Mode: Unsolicited Multicast
When I check the Summary page I see that although a have a proper working IPv4 connection, the IPv6 information is the following:
WAN (Internet) Information (IPv6)
Connection Time:                0 Days 00:07:10
Connection Type:                Dynamic IP (DHCP)
Connection State:               Connected
IP Address:                        fe80::5a8d:9ff:fee2:f9d3/64
Gateway:                           fe80::200:ff:fe00:0
DNS Servers:
which is of course wrong.
Could someone please help me to configure this router according the Cisco IOS configuration file I linked on the top in order to have a working IPv6 connection?

So, I did a WAN packet capture to see that type of DHCPv6 packets the router sends to the ISP in order to obtain an IPv6 address and I saw that the router is sending DHCPv6 solicitation packets of type IA_NA i.e. for Identity Association for Non-temporary Address. However, most ISPs that offer a dual stack IP4/IPv6 service, they use DHCPv6 Prefix Delegation in which case the router is expected to send DHCPv6 solicitation packets of type IA_PD i.e. for Identity Association for Prefix Delegation.
Therefore, this router does not support DHCPv6 Prefix Delegation services with firmware 1.0.3.5 and as a result in practice it is only good for tunnel IPv6 connections.
Are there any plans to provide support for Prefix Delegation?

Trying to setup PHP site (friendica) with nginx on localhost

Hi, just new here :-)
Started to use Arch a couple of month ago and sofar everything went fine thanks to the great documentation!
Now I tried to setup friendica on my computer for testing some modifications but I just fail on installing the required modules :-(
I already installed:
php
php-fpm
php-gd
php-cgi
php-mcrypt
mariadb
nginx
phpmyadmin
But I still get the following errors:
GD graphics PHP module (required)
Error: GD graphics PHP module with JPEG support required but not installed.
OpenSSL PHP module (required)
Error: openssl PHP module required but not installed.
mysqli PHP module (required)
Error: mysqli PHP module required but not installed.
Generate encryption keys (required)
Error: the "openssl_pkey_new" function on this system is not able to generate encryption keys
If running under Windows, please see "http://www.php.net/manual/en/openssl.installation.php".
Command line PHP
Could not find a command line version of PHP in the web server PATH.
If you don't have a command line version of PHP installed on server, you will not be able to run background polling via cron. See 'Activating scheduled tasks'
PHP executable path Enter full path to php executable. You can leave this blank to continue the installation.
Url rewrite is working (required)
Url rewrite in .htaccess is not working. Check your server configuration.
My nginx.conf looks like this:
#user http;
worker_processes 1;
error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log logs/access.log main;
sendfile on;
keepalive_timeout 15;
gzip on;
gzip_comp_level 1;
server {
listen 80;
server_name localhost;
location ~ \.php {
root /srv/http/project;
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
location / {
root /srv/http/project;
index index.php;
Can someone help me?

Thanks for the quick answer!
progandy wrote:Did you enable all necessary modules in your php.ini?
I had a look at /etc/php/php.ini but I can't find things (with my knwoledge) that seem to be important....
progandy wrote:Then you'll have to create the rules in the .htaccess in the format nginx understands.
Haven't checked that yet...
progandy wrote:https://github.com/friendica/friendica/ … tall-Guide
This is quite complicated. Seems like I'd need to study to understand it:-(
progandy wrote:http://jcsesecuneta.com/tome/labox/sett … -on-nginx/
This one seemed clear I changed my nginx.xonf according to it:
server {
listen 80;
server_name localhost;
root /srv/http/project;
access_log off; # If you are using 'Analytics' type software for tracking, keep this 'off'
log_not_found on; # Turn on if you want to track "not found" errors
error_log /srv/http/project/logs/error.log info; # valid values: debug, info, notice, warn, error, crit
#rewrite_log on; # Uncomment if you want to debug your rewrites (then change 'crit' above to 'notice')
# block stuff early
# Do not log favicon.ico and robots.txt stuff
location ~* /(favicon\.ico|robots\.txt) {
allow all;
access_log off;
log_not_found off;
# Return error 444 for these files
location ~* ^.+\.(bzr|git|log)$ {
access_log off;
log_not_found off;
return 444;
# Deny public access to ~ (bak) files
location ~* ~$ {
access_log off;
log_not_found off;
return 444;
# Friendica #
location / {
try_files $uri $uri/ @friendicacleanurl;
location @friendicacleanurl {
rewrite ^/(.*) /index.php?q=$uri last;
break;
# Security: Friendica #
# block public access to .htaccess and .htconfig.php
location ~* /\.ht {
access_log off;
log_not_found off;
return 444;
# block public access to .tpl files located in /view/ folder
location ~* /view/(.*)\.tpl$ {
access_log off;
log_not_found off;
return 444;
# block public access to /util/ folder
location ^~ /util/ {
access_log off;
log_not_found off;
return 444;
# Deliver static files directly #
# images (Friendica)
location ~* /(addon|images|library|spec|util|view)/(.*)\.(bmp|cur|gif|ico|j2k|jp2|jpe|jpeg|jpf|jpg|jpm|jpx|mj2|mng|png|svg|svgz|thm|tif|tiff|webp)$ {
add_header Pragma "public";
add_header Cache-Control "public";
access_log off;
log_not_found off;
expires 28d;
# redirect 50x error pages #
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
internal;
# enable PHP #
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_pass 127.0.0.1:9000; # Comment if you want to use sock instead of tcp
#fastcgi_pass unix:/var/run/php-fpm.sock; # Uncomment to use sock instead of tcp
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include /etc/nginx/fastcgi_params;
but then nothing works anymore! When I try to restart nginx I get:
sudo systemctl status nginx.service
nginx.service - A high performance web server and a reverse proxy server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled)
Active: active (running) (Result: exit-code) since Sa 2013-12-28 18:05:13 CET; 1 day 22h ago
Process: 15591 ExecReload=/usr/bin/nginx -g pid /run/nginx.pid; daemon on; master_process on; -s reload (code=exited, status=1/FAILURE)
Process: 318 ExecStart=/usr/bin/nginx -g pid /run/nginx.pid; daemon on; master_process on; (code=exited, status=0/SUCCESS)
Process: 314 ExecStartPre=/usr/bin/nginx -t -q -g pid /run/nginx.pid; daemon on; master_process on; (code=exited, status=0/SUCCESS)
Main PID: 320 (nginx)
CGroup: /system.slice/nginx.service
├─ 320 nginx: master process /usr/bin/nginx -g pid /run/nginx.pid; daemon on; master_process on;
└─10295 nginx: worker process
Dez 30 14:59:10 thinker nginx[10294]: 2013/12/30 14:59:10 [notice] 10294#0: signal process started
Dez 30 14:59:10 thinker systemd[1]: Reloaded A high performance web server and a reverse proxy server.
Dez 30 16:12:58 thinker systemd[1]: Reloading A high performance web server and a reverse proxy server.
Dez 30 16:12:58 thinker nginx[15396]: 2013/12/30 16:12:58 [emerg] 15396#0: "server" directive is not allowed here in /etc/nginx/nginx.conf:1
Dez 30 16:12:58 thinker systemd[1]: nginx.service: control process exited, code=exited status=1
Dez 30 16:12:58 thinker systemd[1]: Reload failed for A high performance web server and a reverse proxy server.
Dez 30 16:15:33 thinker systemd[1]: Reloading A high performance web server and a reverse proxy server.
Dez 30 16:15:33 thinker nginx[15591]: 2013/12/30 16:15:33 [emerg] 15591#0: no "events" section in configuration
Dez 30 16:15:33 thinker systemd[1]: nginx.service: control process exited, code=exited status=1
Dez 30 16:15:33 thinker systemd[1]: Reload failed for A high performance web server and a reverse proxy server.
What's wrong?

My iphone 4s will no longer connect to wifi if it has a password it keeps telling me incorrect password, my mac book pro connects and the new iphone 5, i have reset it reset factory setting tried to manually input the connection with no luck

my iphone 4s will no longer connect to internet via wifi if it is password protected. i have tried to restart the phone reset the phone reset factory settings tried from a distance nothing works. i have connected my mac book and iphone 5 with the same password successfuly but the 4s wont connect. i have gone back to other knowen connections and since resetting the factory settings it will no longer connect there either what should i do??

Settings > General > Reset > Reset Network Connections
Try again.

Howto setup an imap connection with ssl for incoming, but nonssl for outgo

I am just stucked in a "simple" problem. Our mail-server is doing imap with a special configuration:
- incomming is running imap/ssl on port 443
- outgoing is running non-ssl (plain) on port 25
The problem is that I can not set the "use ssl" and "port" configuration for incoming or outgoing separately. Or I assume I just can not find the way to setup this in the right way.
Any hints on this?
Carsten

Hi. To set up you ssl incoming connection, open Preferences>Accounts. Click the Advanced tab, and near the bottom, you will see a place to enter the port number and check ssl enabled. For the outgoing connection, in the preference box, click Account Information. At the bottom you should see outgoing server information. Click on this and scroll to Edit Server List. Select the appropriate server (if you have more than one) and Click the Advanced tab. You should see a radio button that selects Standard ports (25 is among them).
My account is set up exactly the same way without any problems.

Trying to create a wireless connection with an Imac and ibook

I was connected to the internet using a DSL cable modem, and ethernet. My main computer is a iMAC G5 (bought last year) using Snow Leopard as the operating system.
I recently acquired an old iBook (2004) running on Panther.
It was connected to the internet using a dual type ethernet/wireless modem from Sympatico.
It used the built-in airport to link to the internet.
I bought this week a new Airport Express 802.11n Wi-Fi device.
I sucessfully hooked up my iMAC to a new wireless network I created, but was unable to connect
the old ibook. Did anybody else have this problem?
Is there a solution?

loqs wrote:You built the package (using --asroot with makepkg is not a good idea ) but you did missed Install_the_package
Also see Kernel_Modules so the module is loaded automatically at boot.
Seriously? I spent that many hours searching for my several error messages, trying to solve them, not wanting to ask for help without putting too much of my own effort into it and when I finally decide to ask for help it is when I didn't get a super essential thing like makepkg doesn't install and is merely to create .pkg.tar.xz?? Oh gosh... (;
Well, thank you! I guess I'll take my next change to use Google to find out how to use makepkg without --asroot. Yes, wl is loaded now and it's set as the kernel driver in use!
Unfortunately, after ip link set wlp2s0 up and typing dmesg | grep wl I get:
wl: module license 'Mixed/Proprietary' taints kernel.
wlan0: Broadcom BCM4727 802.11 Hybrid Wireless Controller 6.30.223.248 (r487574)
systemd-udevd[148]: renamed network interface wlan0 to wlp2s0
wl 0000:02:00.0: no hotplug settings from platform
wl 0000:02:00.0: no hotplug settings from platform
wl 0000:02:00.0: no hotplug settings from platform
wl 0000:02:00.0: no hotplug settings from platform
And therefor: No firmware loaded. Google doesn't give much about this message but hints to PCI or PCI-Express not working as it should. I found this and tried starting with pciehp.pciehp_force=1 and ordered a modprobe acpiphp but nothing changed.

How to setup a wireless connection with a STATIC IP?

Hello all, currently, my wireless connection is using dhcp, which I don't want
How would I go about setting a static IP for my wireless connection?

Try searching the wiki:
http://wiki.archlinux.org/index.php?tit … c+ip&go=Go
Hint: Configuring_Network#For_Static_IP

Hi,i just got a retina display iPad,I am trying to play hbo and connect with AirPlay with my Apple TV ,everything works perfect but I have a problem that the subtitles doesn't come up on the tv!!Can please anyone help with this problem. Thank you advanced

How can I make this problem work!?

Return it for a credit. Buying things like phones and computers on eBay is not a good idea. If the person refuses to refund your money, use the eBay appeal process since you were sold something that does not work.
Barry

ASA cut through proxy with RADIUS challenge response?

Have this working for IPSEC VPN on same box (tested on 8.2.1 and 8.2.3)
Want to do cut through proxy with challenge response - same ASA and same RADUIS server but using aaa authentication match command and this is what happens...
It looks like the ASA sends a completely different radius authentication request than with VPN authentication request. Is there any way to specify what request is sent?
What the RADIUS Server sees with ASA VPN auth - THIS WORKS OK (included for comparison)
Date: 15/11/2010
Time: 3:53:57 PM
Type: Information
Source: Server
Category: RADIUS
Code: I-006001
Description: A RADIUS Access-Request has been received.
AMID: 0xC8500B80B3D8F49C6CB37E5D32DA6682
Details:
Source Location : 10.xx.21.24
Client Location : 10.xx.21.230:1025
Request ID : 31
Password Protocol : PAP
Input Details : RADIUS Code:1, RADIUS Id:31, , User-Name:xxxx, User-Password:******, NAS-IP-Address:10.xx.21.230, NAS-Port:31, NAS-Port-Type:Virtual, vendor(9):attrib(1):0x1A2000000009011A69703A736F757263652D69703D31302E32312E352E313137, Calling-Station-Id:ip:source-ip=10.21.5.117
Action : Process
What the RADIUS Server sees with ASA cut thru - THIS FAILS (any help V welcome)
Date: 17/11/2010
Time: 2:29:31 PM
Type: Warning
Source: Server
Category: RADIUS
Code: W-006001
Description: An invalid RADIUS packet has been received.
AMID: 0xC19D988F83365F20151C3F6339DEC74B
Details:
Source Location : 10.xx.21.24:1812 (Authentication)
Client Location : 10.xx.21.230:1025
Reason : The sub-protocol of the received RADIUS packet cannot be determined
Request ID : 33
Input Details : 0x01210066055A8B6881266714BDB20380B9FE5FAC01066962333504060AC815E60506000000203D06000000051A2000000009011A69703A736F757263652D69703D31302E34302E352E3131311F1A69703A736F757263652D69703D31302E34302E352E313131
Request Type : Access-Request
Thanks in advance
IB

Hi Ian,
sorry for the late reaction - do you still need help with this?
The difference between the working (VPN) auth and the failing (CTP) auth seems to be that VPN is using PAP (so no challenge-response!) while the CTP is using MS-Chapv2
So my guess is that your Radius server does not support MS-Chapv2. If that is the case then you may want to try this:
aaa-server () host
no mschapv2-capable
Although this command is not really meant to be used in this scenario, so I'm not sure if it will work but I'm hoping it will make the ASA revert to PAP for all auth requests to this host.
Note that you won't be doing challenge/response, so your passwords will be transmitted over the wire (encrypted).
hth
Herbert

Trying to establish eMAC ADSL connection

Hi all,
Okay, I just received an old eMAC but updated with Tiger OSX and have been trying to establish an internet connection with an existing Xavi X8268r ADSL wireless router. The WLAN works real fine. Only problem is when I try to setup a LAN connection with the eMAC(as it doesn't have airport), it always states that the PPPoE server cannot be found. I've keyed in the username and password but am not sure if I need to set the TCP/IP manually or not. The local ISP in Thailand is not 'MAC' friendly at all.
I am able to access the ADSL modem via HTTP and the settings look fine.
Any help will be greatly appreciated.
Cheers,
Bari

The easiest way to get ADSL to work with a Mac is to have the ASL device do the heavy lifting with respect to PPPoE. Most (all?) ADSL devices can be configured to log into PPPoE automatically, from their configuration web pages. (My old Speedtouch used 192.168.0.1; check and see what yours uses, it should be in the manual or the read me or somewhere easily accessable.)
Once you have PPPoE configured on the DSL device, turn OFF all PPPoE stuff on the Mac itself.

Can't establish a sftp connection with the finder

Hi, I'm trying to establish a sftp connection with the finder (using the "Connect to server" feature) between my (recently purchased) Mac Mini (mid 2011: i5, 2.3 GHz, 2 GB, running 10.7.3) and a Debian Testing box and I can't, I get the following error:
'There was a problem connecting to the server "ip.address"
This file server will not allow any additional users to log on. Try to connect again later.'
However if I try establishing a connection from the terminal (either ssh or sftp) it works flawlessly:
SSH:
victoria:~ RonIn$ ssh [email protected]
[email protected]'s password:
Linux clementine 3.0.0-1-486 #1 Sat Aug 27 15:56:48 UTC 2011 i686
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
You have new mail.
Last login: Sat Apr 28 21:52:18 2012 from ukamy.local
ronin@clementine:~$
SFTP:
victoria:~ RonIn$ sftp [email protected]
[email protected]'s password:
Connected to ip.address.
sftp>
I've searched for a fix or alternative on the internet and I haven't found one that works; The one that keeps coming up is to try: "ftps" as the protocol instead of "sftp" with the remaining information the same (it doesn't work, it gets the same error message afterwards).
The IP address and login information works (corroborated by the fact that I can log in from the terminal from the Mac Mini) so the only issue is with the finder capabilities for establishing the connection. I have looked for apple related documentation or How Tos but I haven't found anything useful.
I don't want to use any third party app or tweak because of the sensitive information that is going to be transfered, I would like to be using strictly the tools from the OS.
If you need any more information please let me know, any help is deeply appreciated.

I have the same issue although i kind of fixed it. I have two admin accounts and one of the account's safari did the same thing as yours, except, it was the startpage and everypage i tried to visit. I reseted safari, as in the erase all data safari in the toolbar, safari-Reset Safari... But safari still didn't work. I logged out and went to my other account and opened safari. Now it works fine on both accounts. This meant safari had to logout before actually working better. I have this a few times these days.

Trying to setup a WLAN on an 877W

Hi,
I'm just trying to setup a small office with a WLAN on a 877w. I've managed to get the encryption sorted (I think) but I still can't get them on the network. They won't pickup DHCP addresses and if I set the laptops up on static addresses they still can't ping the router.
I think I need to setup VLANs and bridging, but to be honest I don't understand what needs to be done. Can someone more knowledgeable than me take a look at the config (attached) and point me in the right direction?
This is just for a small office with 2 laptops. I am more than happy to have all interfaces in 1 vlan.
Any questions please let me know,
TIA,
Al

Following link may help you
http://www.cisco.com/en/US/prod/collateral/routers/ps380/ps6200/prod_qas0900aecd8028a982.html

Trying to setup a RADIUS connection with challenge response

Similar Messages

Maybe you are looking for