3.0.9: eap: Failed continuing EAP MD5 (4) session. EAP sub-module failed

Mohamed Lrhazi Mohamed.Lrhazi at georgetown.edu
Sat Jul 25 19:03:22 CEST 2015


Hello,

Any idea why 3.0.9 would reject an ldap user with the above error, while
3.0.8 would successfully authenticate them? The two servers have the same
config files.

I looked at the debug output and could not see a difference.. just an error:

for the same user, hence same password hash fetched from same LDAP server:

3.0.9
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Expiring EAP session with
state 0x776c1e12716407f0
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Finished EAP session with
state 0xb5c7569eb4cb5280
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Previous EAP request found
for state 0xb5c7569eb4cb5280, released from the list
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Peer sent packet with method
EAP MD5 (4)
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Calling submodule eap_md5 to
process data
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap_md5: Cleartext-Password is
required for EAP-MD5 authentication
Sat Jul 25 12:47:51 2015 : ERROR: (1088) eap: Failed continuing EAP MD5 (4)
session.  EAP sub-module failed
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Sending EAP Failure (code 4)
ID 12 length 4
Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Failed in EAP select
Sat Jul 25 12:47:51 2015 : Debug: (1088)       modsingle[authenticate]:
returned from eap (rlm_eap) for request 1088
Sat Jul 25 12:47:51 2015 : Debug: (1088)       [eap] = invalid
Sat Jul 25 12:47:51 2015 : Debug: (1088)     } # authenticate = invalid
Sat Jul 25 12:47:51 2015 : Debug: (1088)   Failed to authenticate the user



3.0.8:
Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Expiring EAP session with
state 0x6843779268417367
Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Finished EAP session with
state 0xa5b14de2a4bd57e0
Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Previous EAP request found
for state 0xa5b14de2a4bd57e0, released from the list
Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Peer sent method MSCHAPv2 (26)
Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: EAP MSCHAPv2 (26)
Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Calling eap_mschapv2 to
process EAP data
Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Freeing handler
Sat Jul 25 12:52:12 2015 : Debug: (2534)       modsingle[authenticate]:
returned from eap (rlm_eap) for request 2534
Sat Jul 25 12:52:12 2015 : Debug: (2534)       [eap] = ok
Sat Jul 25 12:52:12 2015 : Debug: (2534)     } # authenticate = ok


Thanks,
Mohamed.


More information about the Freeradius-Users mailing list