<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt">Re hello:<br><br>Now i am trying to authenticate via PEAP a user existing onmy sql database:<br><br>the output is too long, mailing list parameters won't accept it. i post part of the output that seem to give the point of misconfiguration. if it is not sufficient, please let me know, and i will find a way to put somewher the whole output of RADIUD -X. thank you.<br><br><br><br>----------------------------------------<br>auth: type "EAP"<br>+- entering group authenticate<br> rlm_eap: Request found, released from the list<br> rlm_eap: EAP/mschapv2<br> rlm_eap: processing type mschapv2<br>+- entering group MS-CHAP<br> rlm_mschap: Told to do MS-CHAPv2 for maman with NT-Password<br> expand: --username=%{mschap:User-Name} ->
--username=maman<br> mschap2: dc<br> expand: --challenge=%{mschap:Challenge:-00} -> --challenge=42199e911fc846b6<br> expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=f597ba61948e2ca2d0d108962a8d4d933e2eceba92acfe27<br>Exec-Program output: Logon failure (0xc000006d)<br>Exec-Program-Wait: plaintext: Logon failure (0xc000006d)<br>Exec-Program: returned: 1<br> rlm_mschap: External script failed.<br> rlm_mschap: FAILED: MS-CHAP2-Response is incorrect<br>++[mschap] returns reject<br> rlm_eap: Freeing handler<br>++[eap] returns reject<br>auth: Failed to validate the user.<br>Login incorrect: [maman/<via Auth-Type = EAP>] (from client Ap8500 port 2 cli 00-12-F0-0C-97-61 via TLS tunnel)<br>} # server (null)<br> PEAP: Got tunneled reply RADIUS code 3<br> MS-CHAP-Error = "\007E=691
R=1"<br> EAP-Message = 0x04070004<br> Message-Authenticator = 0x00000000000000000000000000000000<br> PEAP: Processing from tunneled session code 0x81da268 3<br> MS-CHAP-Error = "\007E=691 R=1"<br> EAP-Message = 0x04070004<br> Message-Authenticator = 0x00000000000000000000000000000000<br> PEAP: Tunneled authentication was rejected.<br> rlm_eap_peap: FAILURE<br>++[eap] returns handled<br>Sending Access-Challenge of id 32 to 10.10.44.246 port 1030<br> EAP-Message = 0x010800261900170301001b87ea6c21d531f819e4f7aa4107a0597deda9fd0e2abda3a5196a2d<br> Message-Authenticator = 0x00000000000000000000000000000000<br>
State = 0x15d6165412de0f4c4e5f14457cfcd56a<br>Finished request 237.<br>Going to the next request<br>Waking up in 4.8 seconds.<br>rad_recv: Access-Request packet from host 10.10.44.246 port 1030, id=33, length=194<br> User-Name = "maman"<br> NAS-IP-Address = 10.10.44.246<br> NAS-Port = 2<br> Called-Station-Id = "00-1C-F0-08-FB-FA:PEAP"<br> Calling-Station-Id = "00-12-F0-0C-97-61"<br> Framed-MTU = 1400<br> NAS-Port-Type = Wireless-802.11<br> Connect-Info = "CONNECT 54Mbps 802.11g"<br> EAP-Message =
0x020800261900170301001b7f8d9a1114a91aa324b023d74676e1d5613e1824df38b29b776f9a<br> State = 0x15d6165412de0f4c4e5f14457cfcd56a<br> Message-Authenticator = 0x05c147f8e161153a89766257956164c0<br>+- entering group authorize<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br> rlm_realm: No '@' in User-Name = "maman", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br>++[suffix] returns noop<br> rlm_eap: EAP packet type response id 8 length 38<br> rlm_eap: Continuing tunnel setup.<br>++[eap] returns ok<br> rad_check_password: Found Auth-Type EAP<br>auth: type "EAP"<br>+- entering group authenticate<br> rlm_eap: Request found, released from the list<br> rlm_eap: EAP/peap<br> rlm_eap: processing type peap<br> rlm_eap_peap: Authenticate<br>
rlm_eap_tls: processing TLS<br> eaptls_verify returned 7<br> rlm_eap_tls: Done initial handshake<br> eaptls_process returned 7<br> rlm_eap_peap: EAPTLS_OK<br> rlm_eap_peap: Session established. Decoding tunneled attributes.<br> rlm_eap_peap: Received EAP-TLV response.<br> rlm_eap_peap: Had sent TLV failure. User was rejected earlier in this session.<br> rlm_eap: Handler failed in EAP/peap<br> rlm_eap: Failed in EAP select<br>++[eap] returns invalid<br>auth: Failed to validate the user.<br>Login incorrect: [maman/<via Auth-Type = EAP>] (from client Ap8500 port 2 cli 00-12-F0-0C-97-61)<br> Found Post-Auth-Type Reject<br>+- entering group REJECT<br> expand: %{User-Name} -> maman<br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Sending Access-Reject of id 33 to 10.10.44.246
port 1030<br> EAP-Message = 0x04080004<br> Message-Authenticator = 0x00000000000000000000000000000000<br>Finished request 238.<br>Going to the next request<br>Waking up in 4.8 seconds.<br>Cleaning up request 230 ID 25 with timestamp +80150<br>Cleaning up request 231 ID 26 with timestamp +80150<br>Cleaning up request 232 ID 27 with timestamp +80150<br>Cleaning up request 233 ID 28 with timestamp +80150<br>Cleaning up request 234 ID 29 with timestamp +80150<br>Cleaning up request 235 ID 30 with timestamp +80150<br>Cleaning up request 236 ID 31 with timestamp +80150<br>Cleaning up request 237 ID 32 with timestamp +80150<br>Cleaning up request 238 ID 33 with timestamp +80150<br>Ready to process
requests.<br> <br>--------------------------------------<br></div><br>
<hr size="1">
Envoyé avec <a href="http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html">Yahoo! Mail</a>.<br>Une boite mail plus intelligente. </a></body></html>