Hi Alan,

Thanks for pointing out what I am doing wrong. Being a newbie to the whole field of AAA, can you give me a few pointers where/what I can read up to configure EAP for the TLS method (rather than MD5)? I appreciate your help.

Best Regards,
Sumedh Sathaye


Inactive hide details for Alan DeKok ---05/13/2010 01:05:59 AM---Sumedh Sathaye wrote: > Run-log from "radiusd -X" is also inclAlan DeKok ---05/13/2010 01:05:59 AM---Sumedh Sathaye wrote: > Run-log from "radiusd -X" is also included at the end of this message.


From:

Alan DeKok <aland@deployingradius.com>

To:

FreeRadius users mailing list <freeradius-users@lists.freeradius.org>

Date:

05/13/2010 01:05 AM

Subject:

Re: Configuration trouble (2.1.8 for use with WiMAX)

Sent by:

freeradius-users-bounces+sathaye=us.ibm.com@lists.freeradius.org





Sumedh Sathaye wrote:
> Run-log from "radiusd -X" is also included at the end of this message.
> Here is the message that indicates that EAP is not computing MSK and EMSK:
> [wimax] No EAP-MSK or EAP-EMSK.  Cannot create WiMAX keys.

 You're using an EAP method that doesn't provide the MSK.  Use
something mandated by the WiMAX spec instead of EAP-MD5.

 e.g. EAP-TLS, PEAP, or TTLS.

 Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html