<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt">Hi Alan, Mak:<br>
I tried the patch on both freeRADIUS 1.1.2 and freeRADIUS 1.1.3 - had
seen similar problems with wpa-supplicant and freeRADIUS with
EAP-TTLS/MS-CHAPv2 and hence had to enable wpa_workaround flag to get
past the issue... (which was incorrect)<br>
<br>
But Mak's patch resolves the issue and now I can get EAP-TTLS/MS-CHAPv2
to work successfully without the workaround. I would suggest this patch
go in as high-priority fix as part of the next release as it resolves
the existing issues with the inner phase-2 mschapv2.<br>
Thx.<br>
<br>
Regards,<br>
Mohammed.<br>
<br>
<br>
<hr style="width: 100%; height: 2px;"><br>
<br>
<br>
<b>Mak Moussa</b>
<a href="mailto:freeradius-users%40lists.freeradius.org?Subject=Any%20luck%20with%20802.1x%20authentication%20using%20TTLS%20with%20MSCHAPv2%20%3F%20&In-Reply-To=20061012124419.C52F416E34%40mail.nitros9.org" title="Any luck with 802.1x authentication using TTLS with MSCHAPv2 ? ">mmoussa at mmoussa.com
</a><br>
<i>Thu Oct 12 19:06:59 CEST 2006</i>
<ul>
<li>Previous message: <a href="https://list.xs4all.nl/pipermail/freeradius-users/2006-October/057407.html">Any luck with 802.1x authentication using TTLS with MSCHAPv2 ?
</a></li><li>Next message: <a href="https://list.xs4all.nl/pipermail/freeradius-users/2006-October/057239.html">rewriting Frame-IP-Netmask
</a></li><li> <b>Messages sorted by:</b>
<a href="https://list.xs4all.nl/pipermail/freeradius-users/2006-October/date.html#57419">[ date ]</a>
<a href="https://list.xs4all.nl/pipermail/freeradius-users/2006-October/thread.html#57419">[ thread ]</a>
<a href="https://list.xs4all.nl/pipermail/freeradius-users/2006-October/subject.html#57419">[ subject ]</a>
<a href="https://list.xs4all.nl/pipermail/freeradius-users/2006-October/author.html#57419">[ author ]</a>
</li>
</ul>
<SPAN style="width:100%;height:2px;border-bottom:1px solid rgb(212,208,200); border-top:1px solid rgb(128,128,128);background-color:black;overflow:hidden; margin:8px 0px;"></SPAN>
<!--/htdig_noindex-->
<!--beginarticle-->
<pre>Thanks to Alan Buxey for reattaching the files in a tgz file.<br>Resending again.<br><br>Mak<br><br>-----Original Message-----<br>From: freeradius-users-bounces+mmoussa=<a href="http://lists.freeradius.org/mailman/listinfo/freeradius-users">mmoussa.com at lists.freeradius.org</a><br>[mailto:freeradius-users-bounces+mmoussa=<a href="http://lists.freeradius.org/mailman/listinfo/freeradius-users">mmoussa.com at lists.freeradius.org</a>]<br>On Behalf Of Alan DeKok<br>Sent: Thursday, October 12, 2006 5:44 AM<br>To: FreeRadius users mailing list<br>Subject: Re: Any luck with 802.1x authentication using TTLS with MSCHAPv2 ? <br><br>"Mak Moussa" <<a href="http://lists.freeradius.org/mailman/listinfo/freeradius-users">mmoussa at mmoussa.com</a>> wrote:<br>><i> He tested the patch successfully using v1.1.3 on Linux and both<br></i>TTLS-mschap<br>><i> and TTLS-mschav2 authentications worked fine.<br></i>><i> I tested the patch using v1.1.2 on Freebsd 5.3 and got
the same successful<br></i>><i> authentications.<br></i><br> Great.<br><br>><i> Please review the attached patch for any additional improvements as<br></i>needed.<br><br> Hmm...<br><br>><i> Content-Disposition: attachment;<br></i>><i> filename="winmail.dat"<br></i><br> Could you attach the files in a *standard* format<br>(i.e. non-Outlook), or put them on a web page?<br><br> Alan DeKok.<br>--<br> <a href="http://deployingradius.com/">http://deployingradius.com</a> - The web site of the book<br> <a href="http://deployingradius.com/blog/">http://deployingradius.com/blog/</a> - The blog</pre>
<br>
</div><br></body></html>