<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1528" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>My users don't use windows xp "zero configuration"
service for wifi. They use Ralink Configurator with profiles.</FONT></DIV>
<DIV><FONT face=Arial size=2>Auth EAP/PEAP.</FONT></DIV>
<DIV><FONT face=Arial size=2>Sometimes after reboot AP or 'unhibernate' Windows
XP freeradius logs packets with no User-Name attribute:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>rad_recv: Access-Request packet from host
10.10.10.9:2048, id=115,
length=155<BR> NAS-IP-Address =
10.10.10.9<BR> NAS-Port =
0<BR> Called-Station-Id =
"00304f41e217"<BR> Calling-Station-Id
= "000e2e74b798"<BR> NAS-Identifier =
"Realtek Access Point. 8181"<BR>
Framed-MTU = 1400<BR> NAS-Port-Type =
Wireless-802.11<BR> Service-Type =
Framed-User<BR> Connect-Info =
"CONNECT 11Mbps 802.11b"<BR>
EAP-Message = 0x0200000501<BR>
Message-Authenticator = 0xebaa8690af8e44f2aa18020db98b43a2<BR> Processing
the authorize section of radiusd.conf<BR>modcall: entering group authorize for
request 340<BR> modcall[authorize]: module "preprocess" returns ok for
request 340<BR>radius_xlat:
'/usr/local/var/log/radius/radacct/10.10.10.9/auth-detail-20060304'<BR>rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to
/usr/local/var/log/radius/radacct/10.10.10.9/auth-detail-20060304<BR>
modcall[authorize]: module "auth_log" returns ok for request 340<BR>
modcall[authorize]: module "chap" returns noop for request 340<BR>
modcall[authorize]: module "mschap" returns noop for request
340<BR> rlm_realm: Proxy reply, or no User-Name.
Ignoring.<BR> modcall[authorize]: module "suffix" returns noop for request
340<BR> rlm_eap: EAP packet type response id 0 length 5<BR>!!!!!!
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation<BR>
modcall[authorize]: module "eap" returns updated for request 340<BR>
modcall[authorize]: module "files" returns notfound for request 340<BR>!!!!!!
rlm_sql (sql): zero length username not permitted<BR> modcall[authorize]:
module "sql" returns invalid for request 340<BR>modcall: leaving group authorize
(returns invalid) for request 340<BR>!!!!!! Invalid user: [<no User-Name
attribute>] (from client AP9 port 0 cli 000e2e74b798)<BR>Delaying request 340
for 1 seconds<BR></FONT></DIV>
<DIV><FONT face=Arial size=2>And user must restart computer to connect to
AP...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>It is possible to set freeradius not to check
User-Name? I use User-Name for logging purposes only. freeradius gets login and
password from PEAP and authorize even if User-Name is anything.</FONT></DIV>
<DIV><FONT face=Arial size=2>What should I do?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Norbert</FONT></DIV>
<DIV><FONT face=Arial size=2> </DIV></FONT>
<DIV><FONT face=Arial size=2> </DIV></FONT></BODY></HTML>