<br><br><div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">just do google everything is there</blockquote>
<div><br>Pradeep <br></div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Date: Fri, 7 Jul 2006 09:32:17 -0500<br>From: "Jin Fan" <
<a href="mailto:jfan@cwlab.com">jfan@cwlab.com</a>><br>Subject: RE: 802.1x authentication<br>To: "FreeRadius users mailing list"<br> <<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org
</a>><br>Message-ID:<br> <<a href="mailto:F26421BAB0F1D146BABD4977D6159084012CA1B0@ctiexch.ctinet.com">F26421BAB0F1D146BABD4977D6159084012CA1B0@ctiexch.ctinet.com</a>><br>Content-Type: text/plain; charset="iso-8859-1"
<br><br>Hi, all:<br><br>To further describe my challenge, here is debugging output from freeradius. One line says, "rlm_eap: Failed in EAP select". I must have set up eap wrong. Could anyone help me out here? Btw, in the following example, user "TRPZEDU\\jfan" tries to authenticate through
802.1x. Thanks.<br><br>Jin<br><br>rad_recv: Access-Request packet from host <a href="http://192.168.3.26:20000">192.168.3.26:20000</a>, id=89, length=157<br> NAS-Port-Id = "1/1"<br> Calling-Station-Id = "00-0B-BE-D4-50-46"
<br> Called-Station-Id = "00-0B-0E-13-74-C0:hotspot"<br> Service-Type = Framed-User<br> User-Name = "TRPZEDU\\jfan"<br> State = 0xdcfe3f22dc8680c7b0e05b3d498b6090<br> EAP-Message = 0x020200060319
<br> NAS-Identifier = "Trapeze"<br> NAS-Port-Type = Wireless-802.11<br> NAS-IP-Address = <a href="http://192.168.3.26">192.168.3.26</a><br> Message-Authenticator = 0xc846da111c9f48b4a5570fff318767a2
<br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 6<br> modcall[authorize]: module "preprocess" returns ok for request 6<br> modcall[authorize]: module "chap" returns noop for request 6
<br> modcall[authorize]: module "mschap" returns noop for request 6<br> rlm_realm: No '@' in User-Name = "TRPZEDU\jfan", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "suffix" returns noop for request 6
<br> rlm_eap: EAP packet type response id 2 length 6<br> rlm_eap: No EAP Start, assuming it's an on-going EAP conversation<br> modcall[authorize]: module "eap" returns updated for request 6<br> users: Matched entry DEFAULT at line 152
<br> users: Matched entry DEFAULT at line 171<br> users: Matched entry TRPZEDU\jfan at line 228<br> modcall[authorize]: module "files" returns ok for request 6<br>radius_xlat: 'TRPZEDU\\jfan'<br>rlm_sql (sql): sql_set_user escaped user --> 'TRPZEDU\\jfan'
<br>radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'TRPZEDU=5C=5C=5C=5Cjfan' ORDER BY id'<br>rlm_sql (sql): Reserving sql socket id: 3<br>rlm_sql (sql): User TRPZEDU\\jfan not found in radcheck
<br>radius_xlat: 'SELECT <a href="http://radgroupcheck.id">radgroupcheck.id</a>,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'TRPZEDU=5C=5C=5C=5Cjfan' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY <a href="http://radgroupcheck.id">radgroupcheck.id</a>'<br>radius_xlat: 'SELECT <a href="http://radgroupreply.id">radgroupreply.id</a>,radgroupreply.GroupName,radgroupreply.Attribute
,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'TRPZEDU=5C=5C=5C=5Cjfan' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY <a href="http://radgroupreply.id">radgroupreply.id
</a>'<br>rlm_sql (sql): User TRPZEDU\\jfan not found in radgroupcheck<br>rlm_sql (sql): User not found<br>rlm_sql (sql): Released sql socket id: 3<br> modcall[authorize]: module "sql" returns notfound for request 6
<br>modcall: group authorize returns updated for request 6<br> rad_check_password: Found Auth-Type EAP<br>auth: type "EAP"<br> Processing the authenticate section of radiusd.conf<br>modcall: entering group authenticate for request 6
<br> rlm_eap: Request found, released from the list<br> rlm_eap: EAP NAK<br> rlm_eap: EAP-NAK asked for EAP-Type/peap<br> rlm_eap: No such EAP type peap<br> rlm_eap: Failed in EAP select<br> modcall[authenticate]: module "eap" returns invalid for request 6
<br>modcall: group authenticate returns invalid for request 6<br>auth: Failed to validate the user.<br>Delaying request 6 for 1 seconds<br>Finished request 6<br>Going to the next request<br>Waking up in 1 seconds...<br>--- Walking the entire request list ---
<br>Waking up in 1 seconds...<br>--- Walking the entire request list ---<br>Sending Access-Reject of id 89 to <a href="http://192.168.3.26:20000">192.168.3.26:20000</a><br> EAP-Message = 0x04020004<br> Message-Authenticator = 0x00000000000000000000000000000000
<br> Trapeze-VLAN-Name = "vlan10"<br>Waking up in 4 seconds...<br>--- Walking the entire request list ---<br>Cleaning up request 5 ID 88 with timestamp 44ae6d5d<br>Cleaning up request 6 ID 89 with timestamp 44ae6d5d
<br>Nothing to do. Sleeping until we see a request.<br><br><br>________________________________<br><br>From: freeradius-users-bounces+jfan=<a href="mailto:cwlab.com@lists.freeradius.org">cwlab.com@lists.freeradius.org</a>
on behalf of Jin Fan<br>Sent: Thu 7/6/2006 5:22 PM<br>To: FreeRadius users mailing list<br>Subject: 802.1x authentication<br><br><br><br>Hi, All:<br><br> I need some pointers on how to set up 802.1x (PEAP/MSCHAP v.2
)<br>authentication in freeradius. Generating certificates? Modifying<br>configurations?<br><br>Jin<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html
</a><br><br><br>-------------- next part --------------<br>A non-text attachment was scrubbed...<br>Name: not available<br>Type: application/ms-tnef<br>Size: 7486 bytes<br>Desc: not available<br>Url : <a href="https://list.xs4all.nl/pipermail/freeradius-users/attachments/20060707/9c97739f/attachment.bin">
https://list.xs4all.nl/pipermail/freeradius-users/attachments/20060707/9c97739f/attachment.bin</a><br><br>------------------------------<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">
http://www.freeradius.org/list/users.html</a><br><br><br>End of Freeradius-Users Digest, Vol 15, Issue 19<br>************************************************<br></blockquote></div><br><br clear="all"><br>-- <br>Regards<br>
Pradeep Singh<br>+91-9320216000