<HTML><HEAD>
<META content="text/html; charset=iso-8859-15" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16671"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV>Pretty new to FR as well but from what it looks like to me is your using Workstation login not user login. The portion</DIV>
<DIV> </DIV>
<DIV>[suffix] No <A href="mailto:'@'">'@'</A> in User-Name = "host/W400210.interoute.com", looking up<BR>realm NULL<BR>[suffix] No such realm "NULL"<BR>++[suffix] returns noop<BR>[eap] EAP packet type response id 198 length 31<BR>[eap] No EAP Start, assuming it's an on-going EAP conversation<BR>++[eap] returns updated<BR>++[files] returns noop<BR>++[expiration] returns noop<BR>++[logintime] returns noop<BR>[pap] WARNING! No "known good" password found for the user. Authentication<BR>may fail because of this.<BR>++[pap] returns noop<BR>Found Auth-Type = EAP<BR></DIV>
<DIV> </DIV>
<DIV> looks like your supplicant is sending workstation logins and your LDAP server is rejecting them. I don't know though, I am not a big log reader, I skim over them to find the error, I really need to get into them more:)</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>
<DIV>Brett Littrell</DIV>
<DIV>Network Manager</DIV>
<DIV>MUSD</DIV>
<DIV>CISSP, CCSP, CCVP, MCNE</DIV><BR><BR>>>> On Wednesday, February 16, 2011 at 1:38 AM, in message <1297849120978-3387353.post@n5.nabble.com>, lucky79 <lukas.hofrichtr@interoute.com> wrote:<BR></DIV>
<TABLE style="MARGIN: 0px 0px 0px 15px; FONT-SIZE: 1em" border=0 bgColor=#f3f3f3>
<TBODY>
<TR>
<TD>
<DIV style="BORDER-LEFT: #050505 1px solid; PADDING-LEFT: 7px"><BR>Hi Alan,<BR><BR>Thanks for quick reply<BR><BR>I have read the log several times however nothing points me to the right<BR>direction...thats why I posted a question here...<BR><BR>when I use username@domain.com I get access-reject as ntlm authentication<BR>fails so from this point its working ok I guess. Also I dont think its a<BR>certificate problem as I've got same results with linux / windows 7 clients.<BR><BR>>From the debug I see ntlm authentication went OK then EAP session does not<BR>finish, but why this is happening? Do you think I am really facing the<BR>certificate compatibility problem? Even its working fine with freeradius<BR>1.1.7? I've tried to create a new one but same results...<BR>Or have I missed anything else? Sorry FR 2.x.x is still new to me<BR><BR>Thanks<BR>Lukas<BR>-- <BR>View this message in context: <A href="http://freeradius.1045715.n5.nabble.com/Freeradius2-1-3-Fedora9-PEAP-AD-problem-tp2780544p3387353.html">http://freeradius.1045715.n5.nabble.com/Freeradius2-1-3-Fedora9-PEAP-AD-problem-tp2780544p3387353.html</A><BR>Sent from the FreeRadius - User mailing list archive at Nabble.com.<BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR></DIV></TD></TR></TBODY></TABLE></BODY></HTML>