<div dir="ltr"><div>Hello</div><div> </div><div>I'm trying to use eapol_test to test freeradius EAP process.</div><div> </div><div>according to <a href="http://deployingradius.com/scripts/eapol_test/" target="_blank">http://deployingradius.com/scripts/eapol_test/</a></div>
<div> </div><div>I followed the steps to bring up FreeRadius Server version 2.1.12 and eapol_test (wpa_supplicant-2.0)in Ubuntu 10.04.But the authentication process was not success. </div><div>It was always Access-Reject result.</div>
<div>
</div><div>then i followed the website <a href="http://www.freesoftwaremagazine.com/articles/howto_incremental_setup_freeradius_server_eap_authentications" target="_blank">http://www.freesoftwaremagazine.com/articles/howto_incremental_setup_freeradius_server_eap_authentications</a></div>
<div> </div><div>i do the step 4 in the above website,but it still does not work.</div><div> </div><div> </div><div>do some radius configuration files(eg. eap.conf or radiusd.conf) need more modification ? Can anyone help me?Thanks!</div>
<div> </div><div> </div><div> </div><div>some important debug informations or file are below for eapol_test(PAP, user name is bob,his password is passbob,the secret is testing123,and the test is localhost environment):</div>
<div> </div><div> </div><div><strong><font style="background-color:rgb(255,0,0)">(freeradius server terminal)</font></strong></div><div> </div><div># radiusd -X</div><div> </div><div> ... adding new socket proxy address * port 48094<br>
Listening on authentication address * port 1812<br>Listening on accounting address * port 1813<br>Listening on command file /usr/local/var/run/radiusd/radiusd.sock<br>Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel<br>
Listening on proxy address * port 1814<br>Ready to process requests.<br>rad_recv: Access-Request packet from host 127.0.0.1 port 44726, id=0, length=126<br> User-Name = "anonymous"<br> NAS-IP-Address = 127.0.0.1<br>
Calling-Station-Id = "02-00-00-00-00-01"<br> Framed-MTU = 1400<br> NAS-Port-Type = Wireless-802.11<br> Connect-Info = "CONNECT 11Mbps 802.11b"<br> EAP-Message = 0x0200000e01616e6f6e796d6f7573<br> Message-Authenticator = 0x2f6860f96c26a5453d21db9125aff4e8<br>
# Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>++[digest] returns noop<br>
[suffix] No '@' in User-Name = "anonymous", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 0 length 14<br>[eap] No EAP Start, assuming it's an on-going EAP conversation<br>
++[eap] returns updated<br>++[files] returns noop<br>[sql] expand: %{User-Name} -> anonymous<br>[sql] sql_set_user escaped user --> 'anonymous'<br>rlm_sql (sql): Reserving sql socket id: 4<br>[sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'anonymous' ORDER BY id<br>
[sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'anonymous' ORDER BY priority<br>
rlm_sql (sql): Released sql socket id: 4<br>[sql] User anonymous not found<br>++[sql] returns notfound<br>++[expiration] returns noop<br>++[logintime] returns noop<br>[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.<br>
++[pap] returns noop<br>Found Auth-Type = EAP<br># Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] EAP Identity<br>[eap] processing type md5<br>rlm_eap_md5: Issuing Challenge<br>
++[eap] returns handled<br>Sending Access-Challenge of id 0 to 127.0.0.1 port 44726<br> EAP-Message = 0x01010016041031c544638527529b08c013be38035e82<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0xb81e5489b81f50a4b2d4f9c388430583<br>
Finished request 0.<br>Going to the next request<br>Waking up in 4.9 seconds.<br>rad_recv: Access-Request packet from host 127.0.0.1 port 44726, id=1, length=136<br> User-Name = "anonymous"<br> NAS-IP-Address = 127.0.0.1<br>
Calling-Station-Id = "02-00-00-00-00-01"<br> Framed-MTU = 1400<br> NAS-Port-Type = Wireless-802.11<br> Connect-Info = "CONNECT 11Mbps 802.11b"<br> EAP-Message = 0x020100060315<br> State = 0xb81e5489b81f50a4b2d4f9c388430583<br>
Message-Authenticator = 0xbd1047623d98324569e98d518045db81<br># Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>
++[mschap] returns noop<br>++[digest] returns noop<br>[suffix] No '@' in User-Name = "anonymous", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 1 length 6<br>
[eap] No EAP Start, assuming it's an on-going EAP conversation<br>++[eap] returns updated<br>++[files] returns noop<br>[sql] expand: %{User-Name} -> anonymous<br>[sql] sql_set_user escaped user --> 'anonymous'<br>
rlm_sql (sql): Reserving sql socket id: 3<br>[sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'anonymous' ORDER BY id<br>
[sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'anonymous' ORDER BY priority<br>
rlm_sql (sql): Released sql socket id: 3<br>[sql] User anonymous not found<br>++[sql] returns notfound<br>++[expiration] returns noop<br>++[logintime] returns noop<br>[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.<br>
++[pap] returns noop<br>Found Auth-Type = EAP<br># Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP NAK<br>
[eap] NAK asked for unsupported type EAP-TTLS<br>[eap] No common EAP types found.<br>[eap] Failed in EAP select<br>++[eap] returns invalid<br>Failed to authenticate the user.<br>Using Post-Auth-Type Reject<br># Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>
+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> anonymous<br>attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Delaying reject of request 1 for 1 seconds<br>
Going to the next request<br>Waking up in 0.9 seconds.<br>Sending delayed reject for request 1<br>Sending Access-Reject of id 1 to 127.0.0.1 port 44726<br> EAP-Message = 0x04010004<br> Message-Authenticator = 0x00000000000000000000000000000000<br>
Waking up in 3.9 seconds.<br>Cleaning up request 0 ID 0 with timestamp +3<br>Waking up in 1.0 seconds.<br>Cleaning up request 1 ID 1 with timestamp +3<br>Ready to process requests.<br></div><div><strong><font style="background-color:rgb(255,0,0)">(eapol_test terminal)</font></strong></div>
<div> </div><div># eapol_test -c eapol_test.conf.pap -s testing123<br>Reading configuration file 'eapol_test.conf.peap'<br>Line: 4 - start of a new network block<br>key_mgmt: 0x1<br>eap methods - hexdump(len=16): 00 00 00 00 15 00 00 00 00 00 00 00 00 00 00 00<br>
identity - hexdump_ascii(len=3):<br> 62 6f 62 bob <br>anonymous_identity - hexdump_ascii(len=9):<br> 61 6e 6f 6e 79 6d 6f 75 73 anonymous <br>
password - hexdump_ascii(len=7):<br> 70 61 73 73 62 6f 62 passbob <br>phase2 - hexdump_ascii(len=8):<br> 61 75 74 68 3d 50 41 50 auth=PAP <br>
Priority group 0<br>
id=0 ssid=''<br>Authentication server <a href="http://127.0.0.1:1812" target="_blank">127.0.0.1:1812</a><br>RADIUS local address: <a href="http://127.0.0.1:34535" target="_blank">127.0.0.1:34535</a><br>EAPOL: SUPP_PAE entering state DISCONNECTED<br>
EAPOL: KEY_RX entering state NO_KEY_RECEIVE<br>EAPOL: SUPP_BE entering state INITIALIZE<br>EAP: EAP entering state DISABLED<br>EAPOL: External notification - portValid=0<br>EAPOL: External notification - portEnabled=1<br>
EAPOL: SUPP_PAE entering state CONNECTING<br>EAPOL: SUPP_BE entering state IDLE<br>EAP: EAP entering state INITIALIZE<br>EAP: EAP entering state IDLE<br>Sending fake EAP-Request-Identity<br>EAPOL: Received EAP-Packet frame<br>
EAPOL: SUPP_PAE entering state RESTART<br>EAP: EAP entering state INITIALIZE<br>EAP: EAP entering state IDLE<br>EAPOL: SUPP_PAE entering state AUTHENTICATING<br>EAPOL: SUPP_BE entering state REQUEST<br>EAPOL: getSuppRsp<br>
EAP: EAP entering state RECEIVED<br>EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0<br>EAP: EAP entering state IDENTITY<br>CTRL-EVENT-EAP-STARTED EAP authentication started<br>EAP: EAP-Request Identity data - hexdump_ascii(len=0):<br>
EAP: using anonymous identity - hexdump_ascii(len=9):<br> 61 6e 6f 6e 79 6d 6f 75 73 anonymous <br>EAP: EAP entering state SEND_RESPONSE<br>EAP: EAP entering state IDLE<br>EAPOL: SUPP_BE entering state RESPONSE<br>
EAPOL: txSuppRsp<br>WPA: eapol_test_eapol_send(type=0 len=14)<br>TX EAP -> RADIUS - hexdump(len=14): 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73<br>Encapsulating EAP message into a RADIUS packet<br>Learned identity from EAP-Response-Identity - hexdump(len=9): 61 6e 6f 6e 79 6d 6f 75 73<br>
Sending RADIUS message to authentication server<br>RADIUS message: code=1 (Access-Request) identifier=0 length=126<br> Attribute 1 (User-Name) length=11<br> Value: 'anonymous'<br> Attribute 4 (NAS-IP-Address) length=6<br>
Value: 127.0.0.1<br> Attribute 31 (Calling-Station-Id) length=19<br> Value: '02-00-00-00-00-01'<br> Attribute 12 (Framed-MTU) length=6<br> Value: 1400<br> Attribute 61 (NAS-Port-Type) length=6<br>
Value: 19<br> Attribute 77 (Connect-Info) length=24<br> Value: 'CONNECT 11Mbps 802.11b'<br> Attribute 79 (EAP-Message) length=16<br> Value: 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73<br> Attribute 80 (Message-Authenticator) length=18<br>
Value: c6 18 63 bf 04 9d aa 99 df 2b e6 ae dc 9a 4f 62<br>Next RADIUS client retransmit in 3 seconds<br>EAPOL: SUPP_BE entering state RECEIVE<br>Received 80 bytes from RADIUS server<br>Received RADIUS message<br>RADIUS message: code=11 (Access-Challenge) identifier=0 length=80<br>
Attribute 79 (EAP-Message) length=24<br> Value: 01 01 00 16 04 10 71 fc 64 70 75 ac c6 10 c6 0a 4d e8 01 aa 41 ee<br> Attribute 80 (Message-Authenticator) length=18<br> Value: d4 96 61 25 98 3c f3 94 58 65 88 46 9e fd 94 03<br>
Attribute 24 (State) length=18<br> Value: f1 f3 cc a8 f1 f2 c8 96 aa 0e f0 55 a4 56 38 89<br>STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec</div><div>RADIUS packet matching with station<br>
decapsulated EAP packet (code=1 id=1 len=22) from RADIUS server: EAP-Request-MD5 (4)<br>EAPOL: Received EAP-Packet frame<br>EAPOL: SUPP_BE entering state REQUEST<br>EAPOL: getSuppRsp<br>EAP: EAP entering state RECEIVED<br>
EAP: Received EAP-Request id=1 method=4 vendor=0 vendorMethod=0<br>EAP: EAP entering state GET_METHOD<br>EAP: configuration does not allow: vendor 0 method 4<br>EAP: vendor 0 method 4 not allowed<br>CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK<br>
EAP: Status notification: refuse proposed method (param=MD5)<br>EAP: Building EAP-Nak (requested type 4 vendor=0 method=0 not allowed)<br>EAP: allowed methods - hexdump(len=1): 15<br>EAP: EAP entering state SEND_RESPONSE<br>
EAP: EAP entering state IDLE<br>EAPOL: SUPP_BE entering state RESPONSE<br>EAPOL: txSuppRsp<br>WPA: eapol_test_eapol_send(type=0 len=6)<br>TX EAP -> RADIUS - hexdump(len=6): 02 01 00 06 03 15<br>Encapsulating EAP message into a RADIUS packet<br>
Copied RADIUS State Attribute<br>Sending RADIUS message to authentication server<br>RADIUS message: code=1 (Access-Request) identifier=1 length=136<br> Attribute 1 (User-Name) length=11<br> Value: 'anonymous'<br>
Attribute 4 (NAS-IP-Address) length=6<br> Value: 127.0.0.1<br> Attribute 31 (Calling-Station-Id) length=19<br> Value: '02-00-00-00-00-01'<br> Attribute 12 (Framed-MTU) length=6<br> Value: 1400<br>
Attribute 61 (NAS-Port-Type) length=6<br> Value: 19<br> Attribute 77 (Connect-Info) length=24<br> Value: 'CONNECT 11Mbps 802.11b'<br> Attribute 79 (EAP-Message) length=8<br> Value: 02 01 00 06 03 15<br>
Attribute 24 (State) length=18<br> Value: f1 f3 cc a8 f1 f2 c8 96 aa 0e f0 55 a4 56 38 89<br> Attribute 80 (Message-Authenticator) length=18<br> Value: 67 47 36 e8 38 3e 60 c6 cd 13 e5 02 76 cb 50 f8<br>Next RADIUS client retransmit in 3 seconds<br>
EAPOL: SUPP_BE entering state RECEIVE<br>Received 44 bytes from RADIUS server<br>Received RADIUS message<br>RADIUS message: code=3 (Access-Reject) identifier=1 length=44<br> Attribute 79 (EAP-Message) length=6<br> Value: 04 01 00 04<br>
Attribute 80 (Message-Authenticator) length=18<br> Value: ff 62 f1 59 12 84 99 e4 65 8a 03 00 53 97 b9 6b<br>STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.00 sec</div>
<div>RADIUS packet matching with station<br>decapsulated EAP packet (code=4 id=1 len=4) from RADIUS server: EAP Failure<br>EAPOL: Received EAP-Packet frame<br>EAPOL: SUPP_BE entering state REQUEST<br>EAPOL: getSuppRsp<br>
EAP: EAP entering state RECEIVED<br>EAP: Received EAP-Failure<br>EAP: Status notification: completion (param=failure)<br>EAP: EAP entering state FAILURE<br>CTRL-EVENT-EAP-FAILURE EAP authentication failed<br>EAPOL: SUPP_PAE entering state HELD<br>
EAPOL: SUPP_BE entering state RECEIVE<br>EAPOL: SUPP_BE entering state FAIL<br>EAPOL: SUPP_BE entering state IDLE<br>eapol_sm_cb: success=0<br>EAPOL: EAP key not available<br>MPPE keys OK: 0 mismatch: 1<br>FAILURE<br>root@lsc-desktop:/opt/wpa_supplicant-2.0/wpa_supplicant# eapol_test -c eapol_test.conf.peap -s testing123<br>
Reading configuration file 'eapol_test.conf.peap'<br>Line: 4 - start of a new network block<br>key_mgmt: 0x1<br>eap methods - hexdump(len=16): 00 00 00 00 15 00 00 00 00 00 00 00 00 00 00 00<br>identity - hexdump_ascii(len=3):<br>
62 6f 62 bob <br>anonymous_identity - hexdump_ascii(len=9):<br> 61 6e 6f 6e 79 6d 6f 75 73 anonymous <br>password - hexdump_ascii(len=7):<br>
70 61 73 73 62 6f 62 passbob <br>phase2 - hexdump_ascii(len=8):<br> 61 75 74 68 3d 50 41 50 auth=PAP <br>Priority group 0<br> id=0 ssid=''<br>
Authentication server <a href="http://127.0.0.1:1812" target="_blank">127.0.0.1:1812</a><br>RADIUS local address: <a href="http://127.0.0.1:44726" target="_blank">127.0.0.1:44726</a><br>EAPOL: SUPP_PAE entering state DISCONNECTED<br>
EAPOL: KEY_RX entering state NO_KEY_RECEIVE<br>
EAPOL: SUPP_BE entering state INITIALIZE<br>EAP: EAP entering state DISABLED<br>EAPOL: External notification - portValid=0<br>EAPOL: External notification - portEnabled=1<br>EAPOL: SUPP_PAE entering state CONNECTING<br>EAPOL: SUPP_BE entering state IDLE<br>
EAP: EAP entering state INITIALIZE<br>EAP: EAP entering state IDLE<br>Sending fake EAP-Request-Identity<br>EAPOL: Received EAP-Packet frame<br>EAPOL: SUPP_PAE entering state RESTART<br>EAP: EAP entering state INITIALIZE<br>
EAP: EAP entering state IDLE<br>EAPOL: SUPP_PAE entering state AUTHENTICATING<br>EAPOL: SUPP_BE entering state REQUEST<br>EAPOL: getSuppRsp<br>EAP: EAP entering state RECEIVED<br>EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0<br>
EAP: EAP entering state IDENTITY<br>CTRL-EVENT-EAP-STARTED EAP authentication started<br>EAP: EAP-Request Identity data - hexdump_ascii(len=0):<br>EAP: using anonymous identity - hexdump_ascii(len=9):<br> 61 6e 6f 6e 79 6d 6f 75 73 anonymous <br>
EAP: EAP entering state SEND_RESPONSE<br>EAP: EAP entering state IDLE<br>EAPOL: SUPP_BE entering state RESPONSE<br>EAPOL: txSuppRsp<br>WPA: eapol_test_eapol_send(type=0 len=14)<br>TX EAP -> RADIUS - hexdump(len=14): 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73<br>
Encapsulating EAP message into a RADIUS packet<br>Learned identity from EAP-Response-Identity - hexdump(len=9): 61 6e 6f 6e 79 6d 6f 75 73<br>Sending RADIUS message to authentication server<br>RADIUS message: code=1 (Access-Request) identifier=0 length=126<br>
Attribute 1 (User-Name) length=11<br> Value: 'anonymous'<br> Attribute 4 (NAS-IP-Address) length=6<br> Value: 127.0.0.1<br> Attribute 31 (Calling-Station-Id) length=19<br> Value: '02-00-00-00-00-01'<br>
Attribute 12 (Framed-MTU) length=6<br> Value: 1400<br> Attribute 61 (NAS-Port-Type) length=6<br> Value: 19<br> Attribute 77 (Connect-Info) length=24<br> Value: 'CONNECT 11Mbps 802.11b'<br> Attribute 79 (EAP-Message) length=16<br>
Value: 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73<br> Attribute 80 (Message-Authenticator) length=18<br> Value: 2f 68 60 f9 6c 26 a5 45 3d 21 db 91 25 af f4 e8<br>Next RADIUS client retransmit in 3 seconds<br>
EAPOL: SUPP_BE entering state RECEIVE<br>Received 80 bytes from RADIUS server<br>Received RADIUS message<br>RADIUS message: code=11 (Access-Challenge) identifier=0 length=80<br> Attribute 79 (EAP-Message) length=24<br>
Value: 01 01 00 16 04 10 31 c5 44 63 85 27 52 9b 08 c0 13 be 38 03 5e 82<br>
Attribute 80 (Message-Authenticator) length=18<br> Value: b9 f5 cb c9 84 1d 02 3c 4f 4e 6e ef b2 d8 a7 dd<br> Attribute 24 (State) length=18<br> Value: b8 1e 54 89 b8 1f 50 a4 b2 d4 f9 c3 88 43 05 83<br>STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec</div>
<div>RADIUS packet matching with station<br>decapsulated EAP packet (code=1 id=1 len=22) from RADIUS server: EAP-Request-MD5 (4)<br>EAPOL: Received EAP-Packet frame<br>EAPOL: SUPP_BE entering state REQUEST<br>EAPOL: getSuppRsp<br>
EAP: EAP entering state RECEIVED<br>EAP: Received EAP-Request id=1 method=4 vendor=0 vendorMethod=0<br>EAP: EAP entering state GET_METHOD<br>EAP: configuration does not allow: vendor 0 method 4<br>EAP: vendor 0 method 4 not allowed<br>
CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK<br>EAP: Status notification: refuse proposed method (param=MD5)<br>EAP: Building EAP-Nak (requested type 4 vendor=0 method=0 not allowed)<br>EAP: allowed methods - hexdump(len=1): 15<br>
EAP: EAP entering state SEND_RESPONSE<br>EAP: EAP entering state IDLE<br>EAPOL: SUPP_BE entering state RESPONSE<br>EAPOL: txSuppRsp<br>WPA: eapol_test_eapol_send(type=0 len=6)<br>TX EAP -> RADIUS - hexdump(len=6): 02 01 00 06 03 15<br>
Encapsulating EAP message into a RADIUS packet<br> Copied RADIUS State Attribute<br>Sending RADIUS message to authentication server<br>RADIUS message: code=1 (Access-Request) identifier=1 length=136<br> Attribute 1 (User-Name) length=11<br>
Value: 'anonymous'<br> Attribute 4 (NAS-IP-Address) length=6<br> Value: 127.0.0.1<br> Attribute 31 (Calling-Station-Id) length=19<br> Value: '02-00-00-00-00-01'<br> Attribute 12 (Framed-MTU) length=6<br>
Value: 1400<br> Attribute 61 (NAS-Port-Type) length=6<br> Value: 19<br> Attribute 77 (Connect-Info) length=24<br> Value: 'CONNECT 11Mbps 802.11b'<br> Attribute 79 (EAP-Message) length=8<br> Value: 02 01 00 06 03 15<br>
Attribute 24 (State) length=18<br> Value: b8 1e 54 89 b8 1f 50 a4 b2 d4 f9 c3 88 43 05 83<br> Attribute 80 (Message-Authenticator) length=18<br> Value: bd 10 47 62 3d 98 32 45 69 e9 8d 51 80 45 db 81<br>Next RADIUS client retransmit in 3 seconds<br>
EAPOL: SUPP_BE entering state RECEIVE<br>Received 44 bytes from RADIUS server<br>Received RADIUS message<br>RADIUS message: code=3 (Access-Reject) identifier=1 length=44<br> Attribute 79 (EAP-Message) length=6<br> Value: 04 01 00 04<br>
Attribute 80 (Message-Authenticator) length=18<br> Value: 03 3b 7f f7 84 de 2c 69 6c 2f fe 4c fd 4e 92 f0<br>STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.00 sec</div>
<div>RADIUS packet matching with station<br>decapsulated EAP packet (code=4 id=1 len=4) from RADIUS server: EAP Failure<br>EAPOL: Received EAP-Packet frame<br>EAPOL: SUPP_BE entering state REQUEST<br>EAPOL: getSuppRsp<br>
EAP: EAP entering state RECEIVED<br>EAP: Received EAP-Failure<br>EAP: Status notification: completion (param=failure)<br>EAP: EAP entering state FAILURE<br>CTRL-EVENT-EAP-FAILURE EAP authentication failed<br>EAPOL: SUPP_PAE entering state HELD<br>
EAPOL: SUPP_BE entering state RECEIVE<br>EAPOL: SUPP_BE entering state FAIL<br>EAPOL: SUPP_BE entering state IDLE<br>eapol_sm_cb: success=0<br>EAPOL: EAP key not available<br>MPPE keys OK: 0 mismatch: 1<br>FAILURE<br></div>
<div> </div><div><strong><font style="background-color:rgb(255,0,0)">eapol_test.conf.pap file:</font></strong></div><div><strong><font style="background-color:rgb(255,0,0)"></font></strong> </div><div>#<br># eapol_test -c eapol_test.conf.pap -s testing123<br>
#<br>network={<br> key_mgmt=WPA-EAP<br> eap=TTLS<br> identity="bob"<br> anonymous_identity="anonymous"<br> password="passbob"<br> phase2="auth=PAP"</div>
<div> #<br> # Uncomment the following to perform server certificate validation.<br> # ca_cert = /usr/local/etc/raddb/certs/ca.pem <br>}</div><div> </div><div> </div><div>two more question :</div><div> </div><div>
1.during the above process ,my /usr/local/var/log/radius.log is empty.why?</div><div> </div><div>2.the user is bob,but in the radiusd -X debug information, it is < User-Name = "anonymous">.But if i uncomment the <anonymous_identity="anonymous">in the <font style="background-color:rgb(255,0,0)"><strong>eapol_test.conf.pap file, </strong></font><font style="background-color:rgb(255,255,255)" color="#000000">it will change to be < User-Name = "bob">,so why?</font></div>
<div><font color="#000000"></font> </div><div><font color="#000000">Thanks a lot !</font></div>
</div>