eap_peap: fatal access_denied error

mustafa mujahid mustafa.mujahid at outlook.com
Sat Mar 11 15:51:40 CET 2017


Dear Alan,

  Thank you very much. It seems to have worked. Here is the output I'm getting right now.

(8)     authenticate {
(8) eap: Expiring EAP session with state 0xb2a2c22cb2abd872
(8) eap: Finished EAP session with state 0xb2a2c22cb2abd872
(8) eap: Previous EAP request found for state 0xb2a2c22cb2abd872, released from the list
(8) eap: Peer sent packet with method EAP MSCHAPv2 (26)
(8) eap: Calling submodule eap_mschapv2 to process data
(8) eap_mschapv2: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
(8) eap_mschapv2:   authenticate {
(8) mschap: Found NT-Password
(8) mschap: Creating challenge hash with username: zeeshan.chaudary
(8) mschap: Client is using MS-CHAPv2
(8) mschap: Adding MS-CHAPv2 MPPE keys
(8)     [mschap] = ok
(8)   } # authenticate = ok
(8) MSCHAP Success

Again. Thankyou


BR/Mustafa

________________________________
From: Freeradius-Users <freeradius-users-bounces+mustafa.mujahid=outlook.com at lists.freeradius.org> on behalf of Alan DeKok <aland at deployingradius.com>
Sent: Thursday, March 9, 2017 5:52 AM
To: FreeRadius users mailing list
Subject: Re: eap_peap: fatal access_denied error

On Mar 9, 2017, at 8:44 AM, mustafa mujahid <mustafa.mujahid at outlook.com> wrote:
>
> Please see below complete Debug. (it's pretty long)

  It's a little opaque, but the problem is here:

> (8)   # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
> (8)     authenticate {
> (8) eap: Expiring EAP session with state 0x102bfd681022e731
> (8) eap: Finished EAP session with state 0x102bfd681022e731
> (8) eap: Previous EAP request found for state 0x102bfd681022e731, released from the list
> (8) eap: Peer sent packet with method EAP MSCHAPv2 (26)
> (8) eap: Calling submodule eap_mschapv2 to process data
> (8) eap_mschapv2: Auth-Type sub-section not found.  Ignoring.

  It looks like you edited the configuration files and broke them.  Don't do that.

  The eap_mschapv2 module calls "Auth-Type mschap" in order to do the actual MS-CHAP calculations.  If that subsection isn't found... eap_mschapv2 can't work.

  Use 3.0.13.  And start with the default configuration files.  It works.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRADIUS -- users' list info<http://www.freeradius.org/list/users.html>
www.freeradius.org
Users' List Information. The freeradius-users mailing list is for users of the FreeRADIUS server not Cistron's server! There are a few house-rules to which we'd like ...



More information about the Freeradius-Users mailing list