<span class="gmail_quote"></span><div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div>
<div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">> Did you generate the certificates that are mentioned
there? The one's that ship with the server > are expired, you have to
generate your own certificate.</font></span></div></div></div></blockquote><div><br>I generated the certificates myself, these are working fine. I can use md5 no problem, but peap complains about mschapv2.<br></div><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div><div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">> What version of FreeRADIUS. Version
1.1.1 fixed alot
of little PEAP things.</font></span></div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">> Version 1.1.3 of course is what you should be
running.</font></span></div></div></div></blockquote><div><br>Using the latest version 1.1.3, compiled with all options enabled.<br> </div><font><font><font face="Arial"><font color="#0000ff"><font size="2">> A<span>lso, it looks like your actual problem is that you have
re-written the eap section... and missed > >a
Paren<br><br>They are all there, checked this morning, nothing missing.<br><br></span></font></font></font></font></font><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><div>
<div><font><font><font face="Arial"><font color="#0000ff"><font size="2"><span></span></font></font></font></font></font> </div>
<div><font><font><font face="Arial"><font color="#0000ff"><font size="2"><span>> This is Mine. In yours you have included mschapv2
inside of PEAP. It is its own section,</span></font></font></font></font></font></div></div></div></blockquote><div> <font><font><font face="Arial"><font color="#0000ff"><font size="2"><span> > outside of the PEAP
section.<br><br>I did have it like this originally, and it still didn't work.<br><br>Any ideas appreciated.<br></span></font></font></font></font></font></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><div><div><br></div>
<blockquote style="border-left: 2px solid rgb(0, 0, 255); padding-left: 5px; margin-left: 5px; margin-right: 0px;">
<div dir="ltr" align="left" lang="en-us">
<hr>
<font face="Tahoma" size="2"><b>From:</b>
freeradius-users-bounces+mking=<a href="mailto:bridgew.edu@lists.freeradius.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">bridgew.edu@lists.freeradius.org</a>
[mailto:<a href="mailto:freeradius-users-bounces+mking=bridgew.edu@lists.freeradius.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">freeradius-users-bounces+mking=bridgew.edu@lists.freeradius.org
</a>] <b>On
Behalf Of </b>Ian Walker<br><b>Sent:</b> Friday, September 01, 2006 8:36
AM<br><b>To:</b> <a href="mailto:freeradius-users@lists.freeradius.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">freeradius-users@lists.freeradius.org</a><br><b>Subject:</b>
Problems getting eap-mschapv2 working.<br></font><br></div></blockquote></div><div><span class="e" id="q_10d69a7981eb6047_3">
<div></div>Been trying to get eap working with peap/mschapv2 but it doesn't
seem to work.<br><br>This is my radiusd.conf file:<br><br>
<pre>prefix = /usr/local<br>exec_prefix = ${prefix}<br>sysconfdir = ${prefix}/etc<br>localstatedir = /var/run<br>sbindir = ${exec_prefix}/sbin<br>logdir = /var/log<br>raddbdir = ${sysconfdir}/raddb<br>radacctdir = ${logdir}/radacct
<br>confdir = ${raddbdir}<br>run_dir = ${localstatedir}/radiusd<br>log_file = ${logdir}/radius.log<br>libdir = ${exec_prefix}/lib<br>pidfile = ${run_dir}/radiusd.pid<br>max_request_time = 30<br>delete_blocked_requests = no
<br>cleanup_delay = 5<br>max_requests = 1024<br>bind_address = *<br>port = 0<br>hostname_lookups = no<br>allow_core_dumps = no<br>regular_expressions = yes<br>extended_expressions = yes<br>log_stripped_names = no<br>log_auth = no
<br>log_auth_badpass = no<br>log_auth_goodpass = no<br>usercollide = no<br>lower_user = no<br>lower_pass = no<br>nospace_user = no<br>nospace_pass = no<br>checkrad = ${sbindir}/checkrad<br>security {<br> max_attributes = 200
<br> reject_delay = 1<br> status_server = no<br>}<br><br>$INCLUDE ${confdir}/clients.conf<br><br>thread pool {<br> start_servers = 5<br> max_servers = 32<br> min_spare_servers = 3<br> max_spare_servers = 10<br> max_requests_per_server = 0
<br>}<br><br>modules {<br> eap {<br> default_eap_type = md5<br> timer_expire = 60<br> md5 {<br> }<br> tls {<br> private_key_password = <br> private_key_file = /usr/local/etc/raddb/new.cert.key<br> certificate_file = /usr/local/etc/raddb/new.cert.cert
<br> CA_file = /usr/local/etc/raddb/cacert.pem<br> dh_file = /dev/urandom<br> random_file = /dev/urandom<br> fragment_size = 1024<br> include_length = yes<br> }<br> peap {<br> default_eap_type = mschapv2<br>
mschapv2 {<br> authtype = mschapv2<br> use_mppe = yes<br> require_encryption = yes<br> require_strong = yes<br> }<br> }<br> }<br><br> files {<br> usersfile = ${confdir}/users<br> compat = no<br> }<br> exec cerb {
<br> wait = yes<br> program = "/usr/local/bin/cerbauth -e freeradius"<br> input_pairs = request<br> output_pairs = reply<br> }<br> preprocess {<br> }<br>}<br><br>authorize {<br> preprocess<br> eap<br> files<br>
}<br><br>authenticate {<br><br> Auth-Type eap {<br> eap<br> }<br><br> Auth-Type CERB {<br> cerb<br> }<br>}<br></pre><br>as you can see, I'm currently working with md5 and this works
perfectly well. But when I set the client and configure the server to
default for peap/tls, then it fails saying:<br><br>"No such EAP type mschapv2"
<br><br>I believe if I can get passed this, that my system will authenticate
with peap/mschapv2 successfully.<br><br>Hope you can
help.<br><br>Regards<br><br><br>Ian<br></span></div><div></div>
</div><br>-<br>List info/subscribe/unsubscribe? See <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a>
<br><br></blockquote></div><br>