Tag Info

New answers tagged

5

You're better off doing this at layer 7 versus layer 2 or 3. Devices can have their MAC changed as well as their IP address. (It's harder for a user to change their MAC but it's still possible.) If you've got people changing IP addresses to get around restrictions it's only a matter of time before they'll be changing MAC addresses, too. There are a couple ...


0

You may use ebtables to filter packets by MAC address with wrong IP, like: ebtables -N USER ebtables -A FORWARD -p ip -i eth0 -j USER ebtables -P USER DROP ebtables -A USER -p ip --ip-src 192.168.0.52 -s 00:52:2c:be:ac:2a -j ACCEPT ebtables -A USER -p ip --ip-src 192.168.0.23 -s 01:51:2d:be:pc:1b -j ACCEPT Here we allow user with MAC 00:52:2c:be:ac:2a ...


0

Might be useful to someone... I just had a similar situation (I only needed Basic Authentication). While some clients (Windows) were prompting to login, other (Windows Phone) did not prompt and could open the site as if no security was enabled. What I needed to do was to disable Anonimous Authentication on this site.


0

Alternatives: (in order of easiest and most reliable to not really what you are asking) Install vmware Fusion on your MAC. Use fusion to create a VM for Windows 8.1 and then you can connect with the hyper-v tools in MS. Install a windows 8.1 workstation on your Hyper-V as a virtual machine to manage the actual hyper-v (this is a little more difficult) and ...


0

In /etc/ssh/sshd_config, set LogLevel to DEBUG3, then service sshd restart tail -F /var/log/secure > /root/tmp.txt: this is a useful way of getting only the logs relating to the test; although you'll get a few old lines beforehand. It will appear to hang (you can put it in the background if you like) Attempt to auth again (presumably it will fail). Kill ...


0

Check to see if selinux is running with sestatus Turn it off (temporarily) with setenforce 0 If you are then allowed to login, you have two options: You can turn it off permanently by editing: /etc/sysconfg/selinux I cant remember exactly what this file looks like, but IIRC its very simple. OR, you can ensure the selinux context is set correctly ...


0

Using daloradius as front end on radius is ok as per my testing. Also you need to configure the cisco switch to accept the query from the radius server. The logs on the cisco switch will tell if you are connected or not. Verified working for mac based authentication.


0

Is selinux on? Check /var/log/messages to check it out. If selinux is not the problem. Try stop sshd service and start it on console: user@server# /usr/sbin/sshd -d



Top 50 recent answers are included