<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>FYI -as this was odd though you would like to know<br><BR><br><BR>Given the debug out put and packet collection results
the anomouls behavior during radius authentication of wifi users was in your mind and mine - clearly
the fault of the access-point (either in configuration or "hardware").
The radius servers were conversely clearly not at fault.<BR><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p>Cisco
TAC eventually agreed and sent a replacement - the replacement worked perfectly
with the same configuration and without alteration to the radius server
settings - meaning odd behavior was "hardware" failure.<BR><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p>Thanks to those who thought on this<BR><br><br><div>> Date: Mon, 27 May 2013 09:20:53 -0400<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: Testing failure during setup<br>> <br>> Elizabeth Fife wrote:<br>> > I am ready for an earbending likely from Alan but for the record I have<br>> > read the debug and done as much searching as my brain can handle before<br>> > this post<br>> <br>> You'll not that I get cranky when people *don't* follow instructions.<br>> You have followed them. So clearly you're a wonderful person.<br>> <br>> > I have the added each machine as a client of the other for testing in<br>> > clients.conf they both have the shared secret aaabbb<br>> <br>> Which should work.<br>> <br>> In short, the server gets an Access-Request and processes it. The<br>> client doesn't like the reply.<br>> <br>> Both Access-Request and Access-Challenge contain<br>> Message-Authenticator. The server processes the Access-Request *only*<br>> when the Message-Authenticator is correct. Which in turn depends on the<br>> shared secret.<br>> <br>> So the shared secret is the same on both ends.<br>> <br>> But, the client doesn't like the reply from the server. Which has a<br>> Message-Authenticator created using the same secret.<br>> <br>> I'm not really sure what to suggest here. This kind of thing should<br>> *never* happen.<br>> <br>> Did you install both servers from apt-get?<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br></div> </div></body>
</html>