<meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div class=WordSection1><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I’m running freeradius 2.1.9-1. I will run the debug test when I get home later<o:p></o:p></span></p><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The funny thing is, it could be just 1 small setting that I missed. This is a pain.<o:p></o:p></span></p><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I have a Windows Vista/7 clients connecting to a cisco e3000 wireless router (WPA2 Enterprise) authenticating to > freeradius 2.1.9-1 > authenticating to 389-DS-1.2.1-1(fedora directory service). <o:p></o:p></span></p><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">DO you have any sample configs that work with a setup as mentioned above?<o:p></o:p></span></p><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p><p class=MsoNormal><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p><p class=MsoNormal><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Phil Mayers [via FreeRadius] [mailto:<a href="/user/SendEmail.jtp?type=node&node=3236921&i=0" target="_top" rel="nofollow">[hidden email]</a>] <br><b>Sent:</b> Tuesday, October 26, 2010 4:41 AM<br><b>To:</b> midnightsteel<br><b>Subject:</b> Re: Wireless WPA2 enterprise Radius authentication<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>On 10/26/2010 03:59 AM, midnightsteel wrote: <o:p></o:p></p><div><p class=MsoNormal><div class='shrinkable-quote'><br>> <br>> Has anyone gotten Freeradius 2.x and LDAP (OpenLDAP, FDS, etc...) to properly <br>> authenticate users? <br>> <br>> I get the following in my radius log <br>> <br>> Auth: Login incorrect: [wii/<via Auth-Type = EAP>] (from client access port <br>> 0 via TLS tunnel) <br>> Auth: Login incorrect: [wii/<via Auth-Type = EAP>] (from client access port <br>> 14 cli 78e400881f19) <br>> <br>> <br>> This is driving me crazy. I can authenticate users from the radius serve to <br>> ldap but not from the access point to radius to ldap <br>> <br>> If anyone has gotten it to work please post the example config files that <br>> you used. Im open to answer any questions that you may have about my <br>> configs. <br>> <br>> Access point using WPA2-Enterprise>> Freeradius 2.x>> 389-DS(Fedora LDAP) <br>> <o:p></o:p></p></div><p class=MsoNormal style="margin-bottom:12.0pt"></div>Yes, people have used LDAP to authenticate 802.1x. <br><br>Run the server in debug mode (I should get a keyboard macro to type <br>this) and look at the output: <br><br>radiusd -X | tee logfile <br><br>...as you make an authentication attempt. Chances are if you read that <br>debug output (as suggested in the README) you'll see the problem. If not <br>post the full debug output here. <br><br>In brief: <br><br> 1. Your ldap server needs to contain the password hash(es) appropriate <br>for your method of authentication(s) - or better yet the plaintext - and <br>the freeradius binddn must be able to see them <br><br> 2. The attribute names should match ldap.attrmap, or you should update is <br><br>You said "FreeRadius 2.x". That's a bit vague. What is the actual version? <br>- <br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_top" rel="nofollow" link="external">http://www.freeradius.org/list/users.html</a><br><br><o:p></o:p></p><div class=MsoNormal align=center style="text-align:center"><hr size=1 width="100%" noshade style="color:#CCCCCC" align=center></div><div><p class=MsoNormal><span style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:#666666">View message @ <a href="http://freeradius.1045715.n5.nabble.com/Wireless-WPA2-enterprise-Radius-authentication-tp3236494p3236704.html?by-user=t" target="_top" rel="nofollow" link="external">http://freeradius.1045715.n5.nabble.com/Wireless-WPA2-enterprise-Radius-authentication-tp3236494p3236704.html</a> <br>To unsubscribe from Wireless WPA2 enterprise Radius authentication, <a href="http://freeradius.1045715.n5.nabble.com/template/TplServlet.jtp?tpl=unsubscribe_by_code&node=3236494&code=bWlkbmlnaHRzdGVlbEBtc24uY29tfDMyMzY0OTR8LTEyNDk0NTUwNjY=&by-user=t" target="_top" rel="nofollow" link="external">click here</a>. <o:p></o:p></span></p></div><p class=MsoNormal><o:p> </o:p></p></div>
<br><hr align="left" width="300">
View this message in context: <a href="http://freeradius.1045715.n5.nabble.com/Wireless-WPA2-enterprise-Radius-authentication-tp3236494p3236921.html">RE: Wireless WPA2 enterprise Radius authentication</a><br>
Sent from the <a href="http://freeradius.1045715.n5.nabble.com/FreeRadius-User-f2740693.html">FreeRadius - User mailing list archive</a> at Nabble.com.<br>