hello;<br><br>I have to run freeradius with 802.1X protocol : EAP/TLS.<br>i did all my possible but i had no chance to connect my client (wpa_supplicant with the server).. My AP is also well configured..<br><br>here i'll send you the debug I have from freeradius and the client... freeradius detect a signal but there is no connection with EAP/TLS..<br>
<br>please, help me to now the problem.. i'm too late..<br><br>thank you .<br><br><b>the outpu of freeradius when trying to connect the client:</b><br><br>root@xxxxt:/usr/local/etc/raddb# radiusd -X -A<br>Starting - reading configuration files ...<br>
reread_config: reading radiusd.conf<br>Config: including file: /usr/local/etc/raddb/proxy.conf<br>Config: including file: /usr/local/etc/raddb/clients.conf<br>Config: including file: /usr/local/etc/raddb/snmp.conf<br>
Config: including file: /usr/local/etc/raddb/eap.conf<br>Config: including file: /usr/local/etc/raddb/sql.conf<br> main: prefix = "/usr/local"<br> main: localstatedir = "/usr/local/var"<br> main: logdir = "/usr/local/var/log/radius"<br>
main: libdir = "/usr/local/lib"<br> main: radacctdir = "/usr/local/var/log/radius/radacct"<br> main: hostname_lookups = no<br> main: snmp = no<br> main: max_request_time = 30<br> main: cleanup_delay = 5<br>
main: max_requests = 1024<br> main: delete_blocked_requests = 0<br> main: port = 0<br> main: allow_core_dumps = no<br> main: log_stripped_names = no<br> main: log_file = "/usr/local/var/log/radius/radius.log"<br>
main: log_auth = no<br> main: log_auth_badpass = no<br> main: log_auth_goodpass = no<br> main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid"<br> main: user = "(null)"<br> main: group = "(null)"<br>
main: usercollide = no<br> main: lower_user = "no"<br> main: lower_pass = "no"<br> main: nospace_user = "no"<br> main: nospace_pass = "no"<br> main: checkrad = "/usr/local/sbin/checkrad"<br>
main: proxy_requests = yes<br> proxy: retry_delay = 5<br> proxy: retry_count = 3<br> proxy: synchronous = no<br> proxy: default_fallback = yes<br> proxy: dead_time = 120<br> proxy: post_proxy_authorize = no<br> proxy: wake_all_if_all_dead = no<br>
security: max_attributes = 200<br> security: reject_delay = 1<br> security: status_server = no<br> main: debug_level = 0<br>read_config_files: reading dictionary<br>read_config_files: reading naslist<br>Using deprecated naslist file. Support for this will go away soon.<br>
read_config_files: reading clients<br>read_config_files: reading realms<br>radiusd: entering modules setup<br>Module: Library search path is /usr/local/lib<br>Module: Loaded exec <br> exec: wait = yes<br> exec: program = "(null)"<br>
exec: input_pairs = "request"<br> exec: output_pairs = "(null)"<br> exec: packet_type = "(null)"<br>rlm_exec: Wait=yes but no output defined. Did you mean output=none?<br>Module: Instantiated exec (exec) <br>
Module: Loaded expr <br>Module: Instantiated expr (expr) <br>Module: Loaded PAP <br> pap: encryption_scheme = "crypt"<br> pap: auto_header = yes<br>Module: Instantiated pap (pap) <br>Module: Loaded CHAP <br>Module: Instantiated chap (chap) <br>
Module: Loaded MS-CHAP <br> mschap: use_mppe = yes<br> mschap: require_encryption = no<br> mschap: require_strong = no<br> mschap: with_ntdomain_hack = no<br> mschap: passwd = "(null)"<br> mschap: ntlm_auth = "(null)"<br>
Module: Instantiated mschap (mschap) <br>Module: Loaded System <br> unix: cache = no<br> unix: passwd = "(null)"<br> unix: shadow = "(null)"<br> unix: group = "(null)"<br> unix: radwtmp = "/usr/local/var/log/radius/radwtmp"<br>
unix: usegroup = no<br> unix: cache_reload = 600<br>Module: Instantiated unix (unix) <br>Module: Loaded eap <br> eap: default_eap_type = "tls"<br> eap: timer_expire = 60<br> eap: ignore_unknown_eap_types = no<br>
eap: cisco_accounting_username_bug = no<br> tls: rsa_key_exchange = no<br> tls: dh_key_exchange = yes<br> tls: rsa_key_length = 512<br> tls: dh_key_length = 512<br> tls: verify_depth = 0<br> tls: CA_path = "(null)"<br>
tls: pem_file_type = yes<br> tls: private_key_file = "/usr/local/etc/raddb/certs/serveur.pem"<br> tls: certificate_file = "/usr/local/etc/raddb/certs/serveur.pem"<br> tls: CA_file = "/usr/local/etc/raddb/certs/root.pem"<br>
tls: private_key_password = "whatever"<br> tls: dh_file = "/usr/local/etc/raddb/certs/dh"<br> tls: random_file = "/usr/local/etc/raddb/certs/random"<br> tls: fragment_size = 1024<br> tls: include_length = yes<br>
tls: check_crl = no<br> tls: check_cert_cn = "%{User-Name}"<br> tls: cipher_list = "(null)"<br> tls: check_cert_issuer = "(null)"<br>rlm_eap_tls: Loading the certificate file as a chain<br>rlm_eap: Loaded and initialized type tls<br>
mschapv2: with_ntdomain_hack = no<br>rlm_eap: Loaded and initialized type mschapv2<br>Module: Instantiated eap (eap) <br>Module: Loaded preprocess <br> preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups"<br>
preprocess: hints = "/usr/local/etc/raddb/hints"<br> preprocess: with_ascend_hack = no<br> preprocess: ascend_channels_per_line = 23<br> preprocess: with_ntdomain_hack = no<br> preprocess: with_specialix_jetstream_hack = no<br>
preprocess: with_cisco_vsa_hack = no<br> preprocess: with_alvarion_vsa_hack = no<br>Module: Instantiated preprocess (preprocess) <br>Module: Loaded realm <br> realm: format = "suffix"<br> realm: delimiter = "@"<br>
realm: ignore_default = no<br> realm: ignore_null = no<br>Module: Instantiated realm (suffix) <br>Module: Loaded files <br> files: usersfile = "/usr/local/etc/raddb/users"<br> files: acctusersfile = "/usr/local/etc/raddb/acct_users"<br>
files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"<br> files: compat = "no"<br>Module: Instantiated files (files) <br>Module: Loaded Acct-Unique-Session-Id <br> acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"<br>
Module: Instantiated acct_unique (acct_unique) <br>Module: Loaded detail <br> detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"<br> detail: detailperm = 384<br> detail: dirperm = 493<br>
detail: locking = no<br>Module: Instantiated detail (detail) <br>Module: Loaded radutmp <br> radutmp: filename = "/usr/local/var/log/radius/radutmp"<br> radutmp: username = "%{User-Name}"<br> radutmp: case_sensitive = yes<br>
radutmp: check_with_nas = yes<br> radutmp: perm = 384<br> radutmp: callerid = yes<br>Module: Instantiated radutmp (radutmp) <br>Listening on authentication *:1812<br>Listening on accounting *:1813<br>Ready to process requests.<br>
rad_recv: Accounting-Request packet from host <a href="http://192.168.0.228:2159">192.168.0.228:2159</a>, id=12, length=156<br> Acct-Session-Id = "00000019-00000043"<br> Acct-Status-Type = Start<br> Acct-Authentic = Local<br>
User-Name = "001b770fdb97"<br> NAS-IP-Address = 127.0.0.1<br> NAS-Port = 2<br> Called-Station-Id = "00-1E-2A-C6-61-58:xxxx"<br> Calling-Station-Id = "00-1B-77-0F-DB-97"<br> NAS-Port-Type = Wireless-802.11<br>
Connect-Info = "CONNECT 54Mbps 802.11g"<br> Processing the preacct section of radiusd.conf<br>modcall: entering group preacct for request 0<br> modcall[preacct]: module "preprocess" returns noop for request 0<br>
rlm_acct_unique: Hashing 'NAS-Port = 2,Client-IP-Address = 192.168.0.228,NAS-IP-Address = 127.0.0.1,Acct-Session-Id = "00000019-00000043",User-Name = "001b770fdb97"'<br>rlm_acct_unique: Acct-Unique-Session-ID = "2454d13eda8ab416".<br>
modcall[preacct]: module "acct_unique" returns ok for request 0<br> rlm_realm: No '@' in User-Name = "001b770fdb97", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br>
modcall[preacct]: module "suffix" returns noop for request 0<br> modcall[preacct]: module "files" returns noop for request 0<br>modcall: leaving group preacct (returns ok) for request 0<br> Processing the accounting section of radiusd.conf<br>
modcall: entering group accounting for request 0<br>radius_xlat: '/usr/local/var/log/radius/radacct/<a href="http://192.168.0.228/detail-20090321">192.168.0.228/detail-20090321</a>'<br>rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/<a href="http://192.168.0.228/detail-20090321">192.168.0.228/detail-20090321</a><br>
modcall[accounting]: module "detail" returns ok for request 0<br> modcall[accounting]: module "unix" returns ok for request 0<br>radius_xlat: '/usr/local/var/log/radius/radutmp'<br>radius_xlat: '001b770fdb97'<br>
modcall[accounting]: module "radutmp" returns ok for request 0<br>modcall: leaving group accounting (returns ok) for request 0<br>Sending Accounting-Response of id 12 to 192.168.0.228 port 2159<br>Finished request 0<br>
Going to the next request<br>--- Walking the entire request list ---<br>Cleaning up request 0 ID 12 with timestamp 49c53da1<br>Nothing to do. Sleeping until we see a request.<br><br><b>the output of client:</b><br>phare@phare:~$ sudo wpa_supplicant -Dwext -iwlan0 -c /etc/wpa_supplicant/wpa_supplicant.conf <br>
Associated with 00:1e:2a:c6:61:58<br>Authentication with 00:1e:2a:c6:61:58 timed out.<br>CTRL-EVENT-SCAN-RESULTS <br>CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys<br>ioctl[SIOCSIWENCODEEXT]: No such file or directory<br>
CTRL-EVENT-SCAN-RESULTS <br>CTRL-EVENT-SCAN-RESULTS <br><br>