<br><font size=2 face="sans-serif">Hello</font>
<br>
<br><font size=2 face="sans-serif">My server is now accepting the eap authentication,
but is sending after this accept an access challenge to the client. It
seems that the client "ignores" the access challenge sent by
the server !!</font>
<br><font size=2 face="sans-serif">Any idea ??</font>
<br><font size=2 face="sans-serif">Fabien</font>
<br>
<br><font size=2 face="sans-serif">rad_recv: Access-Request packet from
host 10.166.42.30:1024, id=3, length=159</font>
<br><font size=2 face="sans-serif"> User-Name
= "sierre08015"</font>
<br><font size=2 face="sans-serif"> NAS-IP-Address
= 10.166.42.30</font>
<br><font size=2 face="sans-serif"> NAS-Port
= 1</font>
<br><font size=2 face="sans-serif"> Called-Station-Id
= "00-14-C2-BB-FF-70:test"</font>
<br><font size=2 face="sans-serif"> Calling-Station-Id
= "00-1F-3C-13-1A-1F"</font>
<br><font size=2 face="sans-serif"> Framed-MTU
= 1400</font>
<br><font size=2 face="sans-serif"> NAS-Port-Type
= Wireless-802.11</font>
<br><font size=2 face="sans-serif"> Connect-Info
= "CONNECT 0Mbps 802.11g"</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0x02070010017369657272653038303135</font>
<br><font size=2 face="sans-serif"> Message-Authenticator
= 0x44d8e63aaf78d1dd710924a013bfe7ba</font>
<br><font size=2 face="sans-serif"> Processing the authorize section
of radiusd.conf</font>
<br><font size=2 face="sans-serif">modcall: entering group authorize for
request 3</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "preprocess"
returns ok for request 3</font>
<br><font size=2 face="sans-serif"> rlm_eap: EAP packet type response
id 7 length 16</font>
<br><font size=2 face="sans-serif"> rlm_eap: No EAP Start, assuming
it's an on-going EAP conversation</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "eap"
returns updated for request 3</font>
<br><font size=2 face="sans-serif"> users: Matched entry sierre08015
at line 97</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "files"
returns ok for request 3</font>
<br><font size=2 face="sans-serif">modcall: leaving group authorize (returns
updated) for request 3</font>
<br><font size=2 face="sans-serif"> rad_check_password: Found
Auth-Type EAP</font>
<br><font size=2 face="sans-serif">auth: type "EAP"</font>
<br><font size=2 face="sans-serif"> Processing the authenticate section
of radiusd.conf</font>
<br><font size=2 face="sans-serif">modcall: entering group authenticate
for request 3</font>
<br><font size=2 face="sans-serif"> rlm_eap: EAP Identity</font>
<br><font size=2 face="sans-serif"> rlm_eap: processing type tls</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: Requiring client
certificate</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: Initiate</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: Start returned 1</font>
<br><font size=2 face="sans-serif"> modcall[authenticate]: module
"eap" returns handled for request 3</font>
<br><font size=2 face="sans-serif">modcall: leaving group authenticate
(returns handled) for request 3</font>
<br><font size=2 face="sans-serif">Sending Access-Challenge of id 3 to
10.166.42.30 port 1024</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0x010800060d20</font>
<br><font size=2 face="sans-serif"> Message-Authenticator
= 0x00000000000000000000000000000000</font>
<br><font size=2 face="sans-serif"> State =
0x70d9ca888398794265f013f1ea86a3b8</font>
<br><font size=2 face="sans-serif">Finished request 3</font>
<br><font size=2 face="sans-serif">Going to the next request</font>
<br><font size=2 face="sans-serif">--- Walking the entire request list
---</font>
<br><font size=2 face="sans-serif">Waking up in 6 seconds...</font>
<br><font size=2 face="sans-serif">rad_recv: Access-Request packet from
host 10.166.42.30:1024, id=4, length=241</font>
<br><font size=2 face="sans-serif"> User-Name
= "sierre08015"</font>
<br><font size=2 face="sans-serif"> NAS-IP-Address
= 10.166.42.30</font>
<br><font size=2 face="sans-serif"> NAS-Port
= 1</font>
<br><font size=2 face="sans-serif"> Called-Station-Id
= "00-14-C2-BB-FF-70:test"</font>
<br><font size=2 face="sans-serif"> Calling-Station-Id
= "00-1F-3C-13-1A-1F"</font>
<br><font size=2 face="sans-serif"> Framed-MTU
= 1400</font>
<br><font size=2 face="sans-serif"> NAS-Port-Type
= Wireless-802.11</font>
<br><font size=2 face="sans-serif"> Connect-Info
= "CONNECT 0Mbps 802.11g"</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0x020800500d800000004616030100410100003d030149ae3f67c2530394de05ba7fb9c39413db6dd4d884994527880e0543a428dee400001600040005000a000900640062000300060013001200630100</font>
<br><font size=2 face="sans-serif"> State =
0x70d9ca888398794265f013f1ea86a3b8</font>
<br><font size=2 face="sans-serif"> Message-Authenticator
= 0x56372f6bfce57e79360ae0c757da625b</font>
<br><font size=2 face="sans-serif"> Processing the authorize section
of radiusd.conf</font>
<br><font size=2 face="sans-serif">modcall: entering group authorize for
request 4</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "preprocess"
returns ok for request 4</font>
<br><font size=2 face="sans-serif"> rlm_eap: EAP packet type response
id 8 length 80</font>
<br><font size=2 face="sans-serif"> rlm_eap: No EAP Start, assuming
it's an on-going EAP conversation</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "eap"
returns updated for request 4</font>
<br><font size=2 face="sans-serif"> users: Matched entry sierre08015
at line 97</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "files"
returns ok for request 4</font>
<br><font size=2 face="sans-serif">modcall: leaving group authorize (returns
updated) for request 4</font>
<br><font size=2 face="sans-serif"> rad_check_password: Found
Auth-Type EAP</font>
<br><font size=2 face="sans-serif">auth: type "EAP"</font>
<br><font size=2 face="sans-serif"> Processing the authenticate section
of radiusd.conf</font>
<br><font size=2 face="sans-serif">modcall: entering group authenticate
for request 4</font>
<br><font size=2 face="sans-serif"> rlm_eap: Request found, released
from the list</font>
<br><font size=2 face="sans-serif"> rlm_eap: EAP/tls</font>
<br><font size=2 face="sans-serif"> rlm_eap: processing type tls</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: Authenticate</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: processing TLS</font>
<br><font size=2 face="sans-serif">rlm_eap_tls: Length Included</font>
<br><font size=2 face="sans-serif"> eaptls_verify returned 11</font>
<br><font size=2 face="sans-serif"> (other): before/accept
initialization</font>
<br><font size=2 face="sans-serif"> TLS_accept: before/accept
initialization</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: <<< TLS
1.0 Handshake [length 0041], ClientHello</font>
<br><font size=2 face="sans-serif"> TLS_accept: SSLv3 read
client hello A</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: >>> TLS
1.0 Handshake [length 004a], ServerHello</font>
<br><font size=2 face="sans-serif"> TLS_accept: SSLv3 write
server hello A</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: >>> TLS
1.0 Handshake [length 02ad], Certificate</font>
<br><font size=2 face="sans-serif"> TLS_accept: SSLv3 write
certificate A</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: >>> TLS
1.0 Handshake [length 00a3], CertificateRequest</font>
<br><font size=2 face="sans-serif"> TLS_accept: SSLv3 write
certificate request A</font>
<br><font size=2 face="sans-serif"> TLS_accept: SSLv3 flush
data</font>
<br><font size=2 face="sans-serif"> TLS_accept:error in SSLv3
read client certificate A</font>
<br><font size=2 face="sans-serif">In SSL Handshake Phase</font>
<br><font size=2 face="sans-serif">In SSL Accept mode</font>
<br><font size=2 face="sans-serif"> eaptls_process returned 13</font>
<br><font size=2 face="sans-serif"> modcall[authenticate]: module
"eap" returns handled for request 4</font>
<br><font size=2 face="sans-serif">modcall: leaving group authenticate
(returns handled) for request 4</font>
<br><font size=2 face="sans-serif">Sending Access-Challenge of id 4 to
10.166.42.30 port 1024</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0x010903b30d80000003a9160301004a02000046030149ae3f6712908d3b767909434474e04763782e4799f5ba8fa55677e4cc5ebb69201f975e44af3ffdd4256b3608b4501983469357e875c2d3df0e562e297d56618300040016030102ad0b0002a90002a60002a33082029f30820208020900d79b076a9c2a726f300d06092a864886f70d0101050500308193310b3009060355040613024348311430120603550408130b537769747a65726c616e64310f300d06035504071306536965727265311d301b060355040a13144e6f76656c697320506c616e7420536965727265311630140603550403130d526164697573205365727665723126302406</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0x092a864886f70d01090116177369657272657261643130406e6f76656c69732e636f6d301e170d3039303131323139323733375a170d3039303231313139323733375a308193310b3009060355040613024348311430120603550408130b537769747a65726c616e64310f300d06035504071306536965727265311d301b060355040a13144e6f76656c697320506c616e7420536965727265311630140603550403130d526164697573205365727665723126302406092a864886f70d01090116177369657272657261643130406e6f76656c69732e636f6d30819f300d06092a864886f70d010101050003818d0030818902818100ec5d7c0b616c84</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 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</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0xc8ad4170e9d80b47b6e9ae2a82cc577076dec8b316030100a30d00009b0301020500950093308190310b3009060355040613024348311430120603550408130b537769747a65726c616e64310f300d0603550407130653696572726531163014060355040a130d4e6f76656c697320506c616e74311730150603550403130e46616269656e204372657474617a3129302706092a864886f70d010901161a66616269656e2e6372657474617a406e6f76656c69732e636f6d0e000000</font>
<br><font size=2 face="sans-serif"> Message-Authenticator
= 0x00000000000000000000000000000000</font>
<br><font size=2 face="sans-serif"> State =
0xcad27a06a3667c11a3c87b3e41faa858</font>
<br><font size=2 face="sans-serif">Finished request 4</font>
<br><font size=2 face="sans-serif">Going to the next request</font>
<br><font size=2 face="sans-serif">Waking up in 6 seconds...</font>
<br><font size=2 face="sans-serif">rad_recv: Access-Request packet from
host 10.166.42.30:1024, id=5, length=167</font>
<br><font size=2 face="sans-serif"> User-Name
= "sierre08015"</font>
<br><font size=2 face="sans-serif"> NAS-IP-Address
= 10.166.42.30</font>
<br><font size=2 face="sans-serif"> NAS-Port
= 1</font>
<br><font size=2 face="sans-serif"> Called-Station-Id
= "00-14-C2-BB-FF-70:test"</font>
<br><font size=2 face="sans-serif"> Calling-Station-Id
= "00-1F-3C-13-1A-1F"</font>
<br><font size=2 face="sans-serif"> Framed-MTU
= 1400</font>
<br><font size=2 face="sans-serif"> NAS-Port-Type
= Wireless-802.11</font>
<br><font size=2 face="sans-serif"> Connect-Info
= "CONNECT 0Mbps 802.11g"</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0x020900060d00</font>
<br><font size=2 face="sans-serif"> State =
0xcad27a06a3667c11a3c87b3e41faa858</font>
<br><font size=2 face="sans-serif"> Message-Authenticator
= 0x57367206865668163c2155289735fb84</font>
<br><font size=2 face="sans-serif"> Processing the authorize section
of radiusd.conf</font>
<br><font size=2 face="sans-serif">modcall: entering group authorize for
request 5</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "preprocess"
returns ok for request 5</font>
<br><font size=2 face="sans-serif"> rlm_eap: EAP packet type response
id 9 length 6</font>
<br><font size=2 face="sans-serif"> rlm_eap: No EAP Start, assuming
it's an on-going EAP conversation</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "eap"
returns updated for request 5</font>
<br><font size=2 face="sans-serif"> users: Matched entry sierre08015
at line 97</font>
<br><font size=2 face="sans-serif"> modcall[authorize]: module "files"
returns ok for request 5</font>
<br><font size=2 face="sans-serif">modcall: leaving group authorize (returns
updated) for request 5</font>
<br><font size=2 face="sans-serif"> rad_check_password: Found
Auth-Type EAP</font>
<br><font size=2 face="sans-serif">auth: type "EAP"</font>
<br><font size=2 face="sans-serif"> Processing the authenticate section
of radiusd.conf</font>
<br><font size=2 face="sans-serif">modcall: entering group authenticate
for request 5</font>
<br><font size=2 face="sans-serif"> rlm_eap: Request found, released
from the list</font>
<br><font size=2 face="sans-serif"> rlm_eap: EAP/tls</font>
<br><font size=2 face="sans-serif"> rlm_eap: processing type tls</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: Authenticate</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: processing TLS</font>
<br><font size=2 face="sans-serif">rlm_eap_tls: Received EAP-TLS ACK message</font>
<br><font size=2 face="sans-serif"> rlm_eap_tls: ack handshake fragment
handler</font>
<br><font size=2 face="sans-serif"> eaptls_verify returned 1</font>
<br><font size=2 face="sans-serif"> eaptls_process returned 13</font>
<br><font size=2 face="sans-serif"> modcall[authenticate]: module
"eap" returns handled for request 5</font>
<br><font size=2 face="sans-serif">modcall: leaving group authenticate
(returns handled) for request 5</font>
<br><font size=2 face="sans-serif">Sending Access-Challenge of id 5 to
10.166.42.30 port 1024</font>
<br><font size=2 face="sans-serif"> EAP-Message
= 0x010a000a0d8000000000</font>
<br><font size=2 face="sans-serif"> Message-Authenticator
= 0x00000000000000000000000000000000</font>
<br><font size=2 face="sans-serif"> State =
0x850de87f7a3c97df745f110aed8ce38e</font>
<br><font size=2 face="sans-serif">Finished request 5</font>
<br><font size=2 face="sans-serif">Going to the next request</font>
<br><font size=2 face="sans-serif">Waking up in 6 seconds...<br>
</font><font size=3><br>
</font>
<p><font size=2 color=#990000 face="Arial"><b>NOVELIS</b></font><font size=3 face="Arial"><br>
</font><font size=1 face="Arial"><br>
Fabien Crettaz<br>
IT System and Infrastructure<br>
Novelis Automotive, Painted & Specialities<br>
<br>
Novelis Switzerland SA<br>
CH - 3960 Sierre, Switzerland<br>
phone: +41 (0)27 457 7164 <br>
fax: +41 (0)27 457 7105 </font><font size=1 color=blue face="Arial"><u><br>
</u></font><a href=mailto:fabien.crettaz@novelis.com><font size=1 color=blue face="Arial"><u>e-mail:
fabien.crettaz@novelis.com</u></font></a><font size=1 color=blue face="Arial"><u><br>
</u></font><a href=http://www.novelis.ch/><font size=1 color=blue face="Arial"><u>http://www.novelis.ch</u></font></a><font size=1 face="Arial"><br>
</font><font size=5 color=#008000 face="Webdings"><b><br>
P</b></font><font size=3 face="Arial"><b> </b></font><font size=1 color=#008000 face="Arial"><b>Please
consider the environment before printing this email.</b></font><font size=3 face="Arial">
</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b><tnt@kalik.net></b>
</font>
<br><font size=1 face="sans-serif">Sent by: freeradius-users-bounces+fabien.crettaz=novelis.com@lists.freeradius.org</font>
<p><font size=1 face="sans-serif">03.03.2009 16:50</font>
<table border>
<tr valign=top>
<td bgcolor=white>
<div align=center><font size=1 face="sans-serif">Please respond to<br>
FreeRadius users mailing list <freeradius-users@lists.freeradius.org></font></div></table>
<br>
<td width=59%>
<table width=100%>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td><font size=1 face="sans-serif">"FreeRadius users mailing list"
<freeradius-users@lists.freeradius.org></font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td><font size=1 face="sans-serif">Re: eap-tls configuration not running...</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><tt><font size=2>>Thanks for you response, what should I set as
Auth-Type, as 'Auth-Type :=<br>
>eap' is not recommended (cf. coment in eap.conf) ?<br>
<br>
You don't set anything. Server will set what it needs. It "just works".<br>
<br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<br>
-<br>
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br>
<br>
</font></tt>
<br>