Machine auth fails but user auth works

3 Dec 2015

      I have FreeRadius 3.0.4 and authenticate to AD. My user authentication works but machine auth fails with certificate errors. I was using the same Windows 10 machine to test both scenarios. I attached the debug logs in both tests. What could be the reasons for the machine auth problem?

Below are some of my configurations:
mods-available/mschap:
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{%{mschap:User-Name}:-00} --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --domain=%{%{mschap:NT-Domain}:-CFS.UOGUELPH.CA} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}"

mods-available/eap:
default_eap_type = peap
 peap {

                tls = tls-common

                default_eap_type = mschapv2

                copy_request_to_tunnel = yes
                use_tunneled_reply = yes

        #       proxy_tunneled_request_as_eap = yes

                virtual_server = "inner-tunnel"

        #       soh = yes

        #       soh_virtual_server = "soh-server"

        #       require_client_cert = yes
        }

        mschapv2 {

#               send_error = no
        }

proxy.conf:
realm LOCAL {
}
realm NULL{
}
realm uoguelph.ca {
}
realm DEFAULT {
        authhost = prod1-east.eduroam.ca:1812
        accthost = prod1-east.eduroam.ca:1813
        secret = 
        nostrip
}

Thanks!
Dennis Xu