EAP-TTLS and PEAP auth problem ... sorry!!

Gandalf the Gray gtheg1 at yahoo.com
Tue Jul 5 11:21:39 CEST 2005


I changed the settings of the AP, allowing Aironet
Extensions and the result is a little different, now
TLS is performed, but it still doesn't work fine...


rad_recv: Access-Request packet from host
192.168.127.36:21646, id=158, length=145
        User-Name = "fresh"
        Framed-MTU = 1400
        Called-Station-Id = "00-12-D9-B3-26-90"
        Calling-Station-Id = "00-50-FC-F1-7A-91"
        Message-Authenticator =
0x44ebb1858de22fda1162620cce508446
        EAP-Message = 0x020400061900
        NAS-Port-Type = Wireless-802.11
        NAS-Port = 364
        State = 0x730ee4d85739cac2db03508048550566
        Service-Type = Framed-User
        NAS-IP-Address = 192.168.127.36
        NAS-Identifier = "appi"
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 6
  modcall[authorize]: module "preprocess" returns ok
for request 6
  modcall[authorize]: module "mschap" returns noop for
request 6
    rlm_realm: No '@' in User-Name = "fresh", skipping
NULL due to config.
  modcall[authorize]: module "suffix" returns noop for
request 6
  rlm_eap: EAP packet type response id 4 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP
conversation
  modcall[authorize]: module "eap" returns updated for
request 6
    users: Matched entry DEFAULT at line 152
  modcall[authorize]: module "files" returns ok for
request 6
modcall: group authorize returns updated for request 6
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 6
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/peap
  rlm_eap: processing type peap
  rlm_eap_peap: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  rlm_eap_peap: EAPTLS_HANDLED
  modcall[authenticate]: module "eap" returns handled
for request 6
modcall: group authenticate returns handled for
request 6
Sending Access-Challenge of id 158 to
192.168.127.36:21646
        EAP-Message =
0x010502f71900170d3036303132343133323630375a30819f310b30090603550406130243413111300f0603550408130850726f76696e63653112301006035504071309536f6d65204369747931153013060355040a130c4f7267616e697a6174696f6e31123010060355040b13096c6f63616c686f7374311b301906035504031312436c69656e742063657274696669636174653121301f06092a864886f70d0109011612636c69656e74406578616d706c652e636f6d30819f300d06092a864886f70d010101050003818d0030818902818100d4c5b19724f164acf1ffb189db1c8fbff4f14396ea7cb1e90f78d69451725377895dfe52ccb99b41e8
        EAP-Message =
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
        EAP-Message =
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
        Message-Authenticator =
0x00000000000000000000000000000000
        State = 0xaf2e1d273a634f616e56bde68cbf0106
Finished request 6
Going to the next request
Waking up in 6 seconds...



		
__________________________________ 
Yahoo! Mail 
Stay connected, organized, and protected. Take the tour: 
http://tour.mail.yahoo.com/mailtour.html 




More information about the Freeradius-Users mailing list