Hi Martin, Thanks for your reply.Everything you mentioned is configured in eap.conf file.Still i am facing the problem. Plz let me know how to proceed to fix it. With thanks... Apangshu On 6/11/07, freeradius-users-request@lists.freeradius.org < freeradius-users-request@lists.freeradius.org> wrote:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: help in setting up PEAP in freeRADIUS with winXp supplicant (Martin Gadbois) 2. Re: Freeradius as a secondary (Jeff) 3. Re: Big "VSA + Proxy" problem (Guilherme Franco)
----------------------------------------------------------------------
Message: 1 Date: Mon, 11 Jun 2007 09:28:27 -0400 From: Martin Gadbois <martin.gadbois@colubris.com> Subject: Re: help in setting up PEAP in freeRADIUS with winXp supplicant To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <466D4DFB.1020704@colubris.com> Content-Type: text/plain; charset=UTF-8
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Apangshu Saha wrote:
rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 5 rlm_eap: EAP Identity rlm_eap: No such EAP type mschapv2 rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 5 modcall: leaving group authenticate (returns invalid) for request 5 auth: Failed to validate the user. PEAP: Tunneled authentication was rejected. rlm_eap_peap: FAILURE
Do you have mschap enabled in your eap.conf?
eap { default_eap_type = peap timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no
md5 { }
tls { ... }
ttls { ... } peap { ... }
mschapv2 { }
}
- -- ============== +---------------------------------------------+ Martin Gadbois | "Please answer by yes or no. | Sr. SW Designer | Uncooperative user waste precious CPU time" | Colubris Networks Inc. | -- The Andromeda Strain, M. Crichton, 1969 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGbU379Y3/iTTCEDkRAhz+AJkBQD2iH/pJHGSFwVdBnNcFAMdILACgomOf vZhC4ftJ7IjYZXP+1oTcjQI= =YvGQ -----END PGP SIGNATURE-----
------------------------------
Message: 2 Date: Mon, 11 Jun 2007 10:28:37 -0400 From: Jeff <jeffa@jahelpdesk.com> Subject: Re: Freeradius as a secondary To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <20070611142837.c0c38dfd@ns1.jahelpdesk.com> Content-Type: text/plain; charset="us-ascii"
Ok new issue thats eluding me I uninstalled version 1. then installed version 2
anyway. i resetup the configs and made sure my services file is 1645 radius and 1646 for acct as before anyway when i do a auth with ntradping all connects aok when i do anykind of an accouting request, stop start update i get error 10054 which i read may mean check the port which it apperas i am set aok unless i am missing something
NEXT Nothing is going into the radacct dir for detail file either or is it being created
Also when i do a /etc/init.d/freeradius start or restart everything is aok when i do a /etc/init.d/freeradius reload I see in the radius log that its saying there is errors in the radius config
Anyway anyone have any ideas? _____
From: Peter Nixon [mailto:listuser@peternixon.net] To: FreeRadius users mailing list [mailto: freeradius-users@lists.freeradius.org] Sent: Sun, 10 Jun 2007 19:43:58 -0400 Subject: Re: Freeradius as a secondary
On Sun 10 Jun 2007, Jeff wrote:
I am using the version installed through software update on opensuse
You may wish to use my updated packages at: http://software.opensuse.org/download/network:/aaa/
Just add is as a software repository in YaST. (ie. http://software.opensuse.org/download/network:/aaa/openSUSE_10.2/)
Cheers
--
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html