On Oct 31, 2015, at 5:40 AM, Pretlove, Tim <T.Pretlove@liverpool.ac.uk> wrote:
I fairly new at Freeradius and I have been upgrading our version 2 servers to version 3.0.10 and I have what I believe is a configuration issue.
The user is correctly rejected by eap/MSCHAP but it continues into eap/PEAP where I get the error
Sat Oct 31 09:08:24 2015 : Info: (11) eap_peap: The users session was previously rejected: returning reject (again.)
Those messages say "Info". Not "Error".
How do I avoid dropping into the peap section if the user is rejected further up the chain?
You don't. It's doing PEAP as expected. The message is there for people who read only the last few lines of the debug output. It tells them to read the PREVIOUS messages to see the error. Alan DeKok.