<html><head/><body><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /></head><body>This is the client telling you it doesn't trust your server ca. Setup the client correctly.<br><br><div class="gmail_quote">Danny Kurniawan <danny.kurniawan@fairchildsemi.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<font face="tahoma,sans-serif">Hi All,<br /><br />I have some intermittent issue with our Radius auth.<br />OS : SLES 11<br />Radius 2.1.1<br /><br />We get the cert from GlobalSign and use it at the 2 Radius server. So Server A and Server B use the same cert.<br />
in Server B, ometimes it works fine to authenticate and sometimes its failed but everything fine in Server A. <br /><br />Fri Feb 22 18:31:39 2013 : Auth: Login OK: [sdholakia2] (from client AllWirelessAP port 0 via TLS tunnel)<br />
Fri Feb 22 18:31:39 2013 : Auth: Login OK: [sdholakia2] (from client AllWirelessAP port 0 cli A0-88-B4-0F-C3-D8)<br /><b>Fri Feb 22 18:36:30 2013 : Error: TLS Alert read:fatal:unknown CA<br />Fri Feb 22 18:36:30 2013 : Error: TLS_accept:failed in SSLv3 read client certificate A<br />
Fri Feb 22 18:36:30 2013 : Error: rlm_eap: SSL error error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca<br />Fri Feb 22 18:36:30 2013 : Error: SSL: SSL_read failed inside of TLS (-1), TLS session fails.</b><br />
Fri Feb 22 18:36:30 2013 : Auth: Login incorrect: [800200sq] (from client AllWirelessAP port 0 cli A0-88-B4-58-BA-8C)<br />Fri Feb 22 18:37:34 2013 : Auth: Login OK: [800200sq] (from client AllWirelessAP port 0 via TLS tunnel)<br />
Fri Feb 22 18:37:34 2013 : Auth: Login OK: [800200sq] (from client AllWirelessAP port 0 cli A0-88-B4-0F-C3-D8)<br /><br />Any idea what should i check for that error?<br /><br />Thanks<br clear="all" /></font></blockquote></div><br>
-- <br>
Sent from my mobile device, please excuse brevity and typos.</body></html></body></html>