hi, client not using correct cert for auth - or part of the required chain is missing (intermediate certs should all be on server too) alan On Fri, 18 Jan 2019 at 09:20, <slnarayanan@nitt.edu> wrote:
Hai to all,
We are using freeradius 3.0.13 version EAP=PEAP (MSCHAPV2)only in our network .Few day's back we configure the server.At the time mobile devices and windows 10 system are logged through our domain account.After two day's our mobile devices only login happen but windown 10 it is not logged .It is showing some TLS error.i have given the error below.We are not using any certificate(Server,Client) before and now also.i don't why the windows 10 system won't login. We don't want using and PAP or CHAP or MD5.We need only PEAP.If it is must for server certificate for using windows 10?or below windows 7? only required for certificate.Kindly suggest to me to resolve my issue.
Error code: Fri Jan 18 14:36:47 2019 : Auth: (319) Login incorrect (eap_peap: TLS Alert read:fatal:access denied): [user/] (from client team4 port 608 cli C8-3A-35-C8-10-28) Fri Jan 18 14:36:47 2019 : ERROR: (319) eap_peap: ERROR: TLS Alert read:fatal:access denied Fri Jan 18 14:36:20 2019 : Auth: (246) Login incorrect (eap_peap: TLS Alert read:fatal:unknown CA): [host/AJIALAN.octa.edu/] (from client team4 port 607 cli C8-3A-35-C8-10-28) Fri Jan 18 14:36:20 2019 : ERROR: (246) eap_peap: ERROR: Failed in __FUNCTION__ (SSL_read) Fri Jan 18 14:36:20 2019 : ERROR: (246) eap_peap: ERROR: TLS_accept: Failed in SSLv3 read client key exchange A Fri Jan 18 14:36:20 2019 : ERROR: (246) eap_peap: ERROR: TLS Alert read:fatal:unknown CA
Regards, S.Lakshmi narayanan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html