Windows mobile unable to authenticate [FreeRadius+Active directory]

Burn Zero burnzerog at gmail.com
Fri Jun 16 10:44:31 CEST 2017


Hi,

FreeRadius version 3.0.13

We are using FreeRadius+Active directory setup in our environment to
authenticate users for the WIFI. The clients are authenticated using
server side cert + their Active directory credentials. This is working
properly except windows phone users.

Users who own windows phone are unable to authenticate via Freeradius.
Below is the debug error log when they try to connect WIFI.

(5829) Mon Jun  5 07:53:43 2017: Debug: eap: Calling submodule
eap_peap to process data
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: Continuing EAP-TLS
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: [eaptls verify] = ok
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: Done initial handshake
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: [eaptls process] = ok
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: Session established.
Decoding tunneled attributes
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: PEAP state send tlv success
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: Received EAP-TLV response
(5829) Mon Jun  5 07:53:43 2017: Debug: eap_peap: Client rejected our
response.  The password is probably incorrect
(5829) Mon Jun  5 07:53:43 2017: ERROR: eap_peap: We sent a success,
but the client did not agree
(5829) Mon Jun  5 07:53:43 2017: ERROR: eap: Failed continuing EAP
PEAP (25) session.  EAP sub-module failed
(5829) Mon Jun  5 07:53:43 2017: Debug: eap: Sending EAP Failure (code
4) ID 11 length 4
(5829) Mon Jun  5 07:53:43 2017: Debug: eap: Failed in EAP select

Does any one of you know what the problem is?

Thank in advance for the help.


More information about the Freeradius-Users mailing list