On 15 Mar 2016, at 15:41, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 15 Mar 2016, at 15:14, Jonathan Gazeley <Jonathan.Gazeley@bristol.ac.uk> wrote:
I've been migrating our RADIUS estate from 2.2.9 and 3.0.11 to 3.1.x, built from git. Thanks to help from this list last week I've got eduroam working successfully. I'm now struggling to get another SSID (machine authentication for domain-joined Windows PCs) to work.
I can see that it is printing the warning:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! EAP session 0x2ab6bf0 did not finish! !! !! See http://wiki.freeradius.org/guide/Certificate_Compatibility !! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Doesn't look like a certificate problem. Looks like inner EAP method negotiation failing (client doesn't respond).
Any idea what machine auth actually is. Is it something weird like EAP-TLS in EAP-TLS? Could be an MTU issue if that's the case. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2