Re: [FreeRADIUS 3.0.16] EAP methods

9 Feb 2018


      Thanks for your prompt responses.
...
2) WHY do you need to support as many EAP methods?  several of these
methods are used in totally different environments
Different organisations have different requirements or needs. We are just testing the supported methods.
...
1) how are you trying to test those methods (several of them need
relevant clients , provisioned codes etc)
Find an example below. I cannot figure out what I am missing / doing wrong / etc. Any hint will be appreciated.


v3.0.16

In v2.x, I had gpsk { }, pax { } & psk { } sections in eap.conf and all of them worked fine.
Doing the same in v3.x (default configuration), I get:
...
...
EAP-GPSK
Fri Feb 09 02:18:50 2018 : Debug:   # Instantiating module "eap" from file \freeradius-server-3.0.16\etc\raddb/mods-enabled/eap
Fri Feb 09 02:18:50 2018 : Debug:    # Linked to sub-module rlm_eap_md5
Fri Feb 09 02:18:50 2018 : Error: rlm_eap (EAP): Failed linking to structure in GPSK: "rlm_eap_gpsk": The specified procedure could not be found.
Fri Feb 09 02:18:50 2018 : Error: \freeradius-server-3.0.16\etc\raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"
...
...
EAP-PAX
Fri Feb 09 02:19:55 2018 : Debug:   # Instantiating module "eap" from file \freeradius-server-3.0.16\etc\raddb/mods-enabled/eap
Fri Feb 09 02:19:55 2018 : Debug:    # Linked to sub-module rlm_eap_md5
Fri Feb 09 02:19:55 2018 : Error: rlm_eap (EAP): Failed linking to structure in PAX: "rlm_eap_pax": The specified procedure could not be found.
Fri Feb 09 02:19:55 2018 : Error: \freeradius-server-3.0.16\etc\raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"
...
...
EAP-PSK
Fri Feb 09 02:21:06 2018 : Debug:   # Instantiating module "eap" from file \freeradius-server-3.0.16\etc\raddb/mods-enabled/eap
Fri Feb 09 02:21:06 2018 : Debug:    # Linked to sub-module rlm_eap_md5
Fri Feb 09 02:21:06 2018 : Error: rlm_eap (EAP): Failed linking to structure in PSK: "rlm_eap_psk": The specified procedure could not be found.
Fri Feb 09 02:21:06 2018 : Error: \freeradius-server-3.0.16\etc\raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"

and so on ....
...
...
Testing EAP-PSK in v3.x
** Server side

Fri Feb 09 03:06:59 2018 : Debug: (2) Received Access-Request Id 1 from 127.0.0.1:64742 to 0.0.0.0:1812 length 158
Fri Feb 09 03:06:59 2018 : Debug: (2)   User-Name = "pskuser"
Fri Feb 09 03:06:59 2018 : Debug: (2)   NAS-IP-Address = 127.0.0.1
Fri Feb 09 03:06:59 2018 : Debug: (2)   NAS-IPv6-Address = ::1
Fri Feb 09 03:06:59 2018 : Debug: (2)   Calling-Station-Id = "02-00-00-00-00-01"
Fri Feb 09 03:06:59 2018 : Debug: (2)   Framed-MTU = 1400
Fri Feb 09 03:06:59 2018 : Debug: (2)   NAS-Port-Type = Wireless-802.11
Fri Feb 09 03:06:59 2018 : Debug: (2)   Service-Type = Framed-User
Fri Feb 09 03:06:59 2018 : Debug: (2)   Connect-Info = "CONNECT 11Mbps 802.11b"
Fri Feb 09 03:06:59 2018 : Debug: (2)   EAP-Message = 0x02010006032f
Fri Feb 09 03:06:59 2018 : Debug: (2)   State = 0x641eb62e641fb2a35ddc070c83c8dc7e
Fri Feb 09 03:06:59 2018 : Debug: (2)   Message-Authenticator = 0xa5ea54dff2857cca06866b70fa6aa141
Fri Feb 09 03:06:59 2018 : Debug: (2) session-state: No cached attributes
Fri Feb 09 03:06:59 2018 : Debug: (2) # Executing section authorize from file \freeradius-server-3.0.16\etc\raddb/sites-enabled/default
Fri Feb 09 03:06:59 2018 : Debug: (2)   authorize {
Fri Feb 09 03:06:59 2018 : Debug: (2)     policy filter_username {
Fri Feb 09 03:06:59 2018 : Debug: (2)       if (&User-Name) {
Fri Feb 09 03:06:59 2018 : Debug: (2)       if (&User-Name)  -> TRUE
Fri Feb 09 03:06:59 2018 : Debug: (2)       if (&User-Name)  {
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ / /) {
Fri Feb 09 03:06:59 2018 : Debug: No matches
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ / /)  -> FALSE
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /@[^@]*@/ ) {
Fri Feb 09 03:06:59 2018 : Debug: No matches
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /\.\./ ) {
Fri Feb 09 03:06:59 2018 : Debug: No matches
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /\.\./ )  -> FALSE
Fri Feb 09 03:06:59 2018 : Debug: (2)         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
Fri Feb 09 03:06:59 2018 : Debug: No matches
Fri Feb 09 03:06:59 2018 : Debug: (2)         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /\.$/)  {
Fri Feb 09 03:06:59 2018 : Debug: No matches
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /\.$/)   -> FALSE
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /@\./)  {
Fri Feb 09 03:06:59 2018 : Debug: No matches
Fri Feb 09 03:06:59 2018 : Debug: (2)         if (&User-Name =~ /@\./)   -> FALSE
Fri Feb 09 03:06:59 2018 : Debug: (2)       } # if (&User-Name)  = notfound
Fri Feb 09 03:06:59 2018 : Debug: (2)     } # policy filter_username = notfound
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling preprocess (rlm_preprocess)
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from preprocess (rlm_preprocess)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [preprocess] = ok
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling chap (rlm_chap)
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from chap (rlm_chap)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [chap] = noop
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling mschap (rlm_mschap)
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from mschap (rlm_mschap)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [mschap] = noop
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling digest (rlm_digest)
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from digest (rlm_digest)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [digest] = noop
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling suffix (rlm_realm)
Fri Feb 09 03:06:59 2018 : Debug: (2) suffix: Checking for suffix after "@"
Fri Feb 09 03:06:59 2018 : Debug: (2) suffix: No '@' in User-Name = "pskuser", looking up realm NULL
Fri Feb 09 03:06:59 2018 : Debug: (2) suffix: No such realm "NULL"
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from suffix (rlm_realm)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [suffix] = noop
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling eap (rlm_eap)
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Peer sent EAP Response (code 2) ID 1 length 6
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: No EAP Start, assuming it's an on-going EAP conversation
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from eap (rlm_eap)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [eap] = updated
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling files (rlm_files)
Fri Feb 09 03:06:59 2018 : Debug: (2) files: users: Matched entry pskuser at line 74
Fri Feb 09 03:06:59 2018 : Debug: (2) files: ::: FROM 0 TO 0 MAX 0
Fri Feb 09 03:06:59 2018 : Debug: (2) files: ::: TO in 0 out 0
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from files (rlm_files)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [files] = ok
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling expiration (rlm_expiration)
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from expiration (rlm_expiration)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [expiration] = noop
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling logintime (rlm_logintime)
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from logintime (rlm_logintime)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [logintime] = noop
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: calling pap (rlm_pap)
Fri Feb 09 03:06:59 2018 : WARNING: (2) pap: Auth-Type already set.  Not setting to PAP
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authorize]: returned from pap (rlm_pap)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [pap] = noop
Fri Feb 09 03:06:59 2018 : Debug: (2)   } # authorize = updated
Fri Feb 09 03:06:59 2018 : Debug: (2) Found Auth-Type = eap
Fri Feb 09 03:06:59 2018 : Debug: (2) # Executing group from file \freeradius-server-3.0.16\etc\raddb/sites-enabled/default
Fri Feb 09 03:06:59 2018 : Debug: (2)   authenticate {
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authenticate]: calling eap (rlm_eap)
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Expiring EAP session with state 0x641eb62e641fb2a3
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Finished EAP session with state 0x641eb62e641fb2a3
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Previous EAP request found for state 0x641eb62e641fb2a3, released from the list
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Peer sent packet with method EAP NAK (3)
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Peer NAK'd asking for unsupported EAP type PSK (47), skipping...
Fri Feb 09 03:06:59 2018 : ERROR: (2) eap: No mutually acceptable types found
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Sending EAP Failure (code 4) ID 1 length 4
Fri Feb 09 03:06:59 2018 : Debug: (2) eap: Failed in EAP select
Fri Feb 09 03:06:59 2018 : Debug: (2)     modsingle[authenticate]: returned from eap (rlm_eap)
Fri Feb 09 03:06:59 2018 : Debug: (2)     [eap] = invalid
Fri Feb 09 03:06:59 2018 : Debug: (2)   } # authenticate = invalid
Fri Feb 09 03:06:59 2018 : Debug: (2) Failed to authenticate the user
Fri Feb 09 03:06:59 2018 : Debug: (2) Using Post-Auth-Type Reject
Fri Feb 09 03:06:59 2018 : Debug: (2) # Executing group from file \freeradius-server-3.0.16\etc\raddb/sites-enabled/default
Fri Feb 09 03:06:59 2018 : Debug: (2)   REJECT { ... } # empty sub-section is ignored
Fri Feb 09 03:06:59 2018 : Debug: (2) Delaying response for 1.000000 seconds
Fri Feb 09 03:06:59 2018 : Debug: Waking up in 0.2 seconds.
Fri Feb 09 03:06:59 2018 : Debug: Waking up in 0.7 seconds.
Fri Feb 09 03:07:00 2018 : Debug: (2) Sending delayed response
Fri Feb 09 03:07:00 2018 : Debug: (2) Sent Access-Reject Id 1 from 0.0.0.0:1812 to 127.0.0.1:64742 length 44
Fri Feb 09 03:07:00 2018 : Debug: (2)   EAP-Message = 0x04010004
Fri Feb 09 03:07:00 2018 : Debug: (2)   Message-Authenticator = 0x00000000000000000000000000000000
Fri Feb 09 03:07:00 2018 : Debug: Waking up in 3.9 seconds.
Fri Feb 09 03:07:04 2018 : Debug: (1) Cleaning up request packet ID 0 with timestamp +119
Fri Feb 09 03:07:04 2018 : Debug: (2) Cleaning up request packet ID 1 with timestamp +119
Fri Feb 09 03:07:04 2018 : Info: Ready to process requests


** Client Side

RADIUS packet matching with station
decapsulated EAP packet (code=1 id=1 len=22) from RADIUS server: EAP-Request-MD5 (4)
EAPOL: Received EAP-Packet frame
EAPOL: SUPP_BE entering state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Request id=1 method=4 vendor=0 vendorMethod=0
EAP: EAP entering state GET_METHOD
EAP: configuration does not allow: vendor 0 method 4
EAP: vendor 0 method 4 not allowed
CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK
EAP: Status notification: refuse proposed method (param=MD5)
EAP: Building EAP-Nak (requested type 4 vendor=0 method=0 not allowed)
EAP: allowed methods - hexdump(len=1): 2f
EAP: EAP entering state SEND_RESPONSE
EAP: EAP entering state IDLE
EAPOL: SUPP_BE entering state RESPONSE
EAPOL: txSuppRsp
WPA: eapol_test_eapol_send(type=0 len=6)
TX EAP -> RADIUS - hexdump(len=6): 02 01 00 06 03 2f
Encapsulating EAP message into a RADIUS packet
  Copied RADIUS State Attribute
Sending RADIUS message to authentication server
RADIUS message: code=1 (Access-Request) identifier=1 length=158
   Attribute 1 (User-Name) length=9
      Value: 'pskuser'
   Attribute 4 (NAS-IP-Address) length=6
      Value: 127.0.0.1
   Attribute 95 (NAS-IPv6-Address) length=18
      Value: ::1
   Attribute 31 (Calling-Station-Id) length=19
      Value: '02-00-00-00-00-01'
   Attribute 12 (Framed-MTU) length=6
      Value: 1400
   Attribute 61 (NAS-Port-Type) length=6
      Value: 19
   Attribute 6 (Service-Type) length=6
      Value: 2
   Attribute 77 (Connect-Info) length=24
      Value: 'CONNECT 11Mbps 802.11b'
   Attribute 79 (EAP-Message) length=8
      Value: 02010006032f
   Attribute 24 (State) length=18
      Value: 641eb62e641fb2a35ddc070c83c8dc7e
   Attribute 80 (Message-Authenticator) length=18
      Value: a5ea54dff2857cca06866b70fa6aa141
Next RADIUS client retransmit in 3 seconds
EAPOL: SUPP_BE entering state RECEIVE
Received 44 bytes from RADIUS server
Received RADIUS message
RADIUS message: code=3 (Access-Reject) identifier=1 length=44
   Attribute 79 (EAP-Message) length=6
      Value: 04010004
   Attribute 80 (Message-Authenticator) length=18
      Value: 0c103a09813e4aca0957105d343baa55
STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.06 sec

RADIUS packet matching with station
decapsulated EAP packet (code=4 id=1 len=4) from RADIUS server: EAP Failure
EAPOL: Received EAP-Packet frame
EAPOL: SUPP_BE entering state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Failure
EAP: Status notification: completion (param=failure)
EAP: EAP entering state FAILURE
CTRL-EVENT-EAP-FAILURE EAP authentication failed
EAPOL: SUPP_PAE entering state HELD
EAPOL: SUPP_BE entering state RECEIVE
EAPOL: SUPP_BE entering state FAIL
EAPOL: SUPP_BE entering state IDLE
eapol_sm_cb: result=0
EAPOL: EAP key not available
EAPOL: EAP Session-Id not available
WPA: Clear old PMK and PTK
MPPE keys OK: 0  mismatch: 1
FAILURE


v2.x


** Server side

rad_recv: Access-Request packet from host 127.0.0.1 port 61757, id=3, length=195
        User-Name = "pskuser"
        NAS-IP-Address = 127.0.0.1
        NAS-IPv6-Address = ::1
        Calling-Station-Id = "02-00-00-00-00-01"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Service-Type = Framed-User
        Connect-Info = "CONNECT 11Mbps 802.11b"
        EAP-Message = 0x0203002b2fc0c39ed028d6cc6382c785994d4eebac630000000196259ddb267c9dace28d1e3551092d58f9
        State = 0x276118081fbee0445ece86b1659f960f
        Message-Authenticator = 0xb088717464f5cabcd43dad71af3c3369
Fri Feb 09 03:28:15 2018 : Info: # Executing section authorize from file /freeradius-2.2.10/etc/raddb/sites-enabled/default
Fri Feb 09 03:28:15 2018 : Info: +group authorize {
Fri Feb 09 03:28:15 2018 : Info: ++[preprocess] = ok
Fri Feb 09 03:28:15 2018 : Info: ++[chap] = noop
Fri Feb 09 03:28:15 2018 : Info: ++[mschap] = noop
Fri Feb 09 03:28:15 2018 : Info: ++[digest] = noop
Fri Feb 09 03:28:15 2018 : Info: [suffix] No '@' in User-Name = "pskuser", looking up realm NULL
Fri Feb 09 03:28:15 2018 : Info: [suffix] Found realm "NULL"
Fri Feb 09 03:28:15 2018 : Info: [suffix] Adding Stripped-User-Name = "pskuser"
Fri Feb 09 03:28:15 2018 : Info: [suffix] Adding Realm = "NULL"
Fri Feb 09 03:28:15 2018 : Info: [suffix] Authentication realm is LOCAL.
Fri Feb 09 03:28:15 2018 : Info: ++[suffix] = ok
Fri Feb 09 03:28:15 2018 : Info: [eap] EAP packet type response id 3 length 43
Fri Feb 09 03:28:15 2018 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation
Fri Feb 09 03:28:15 2018 : Info: ++[eap] = updated
Fri Feb 09 03:28:15 2018 : Info: [files] users: Matched entry pskuser at line 79
Fri Feb 09 03:28:15 2018 : Info: ++[files] = ok
Fri Feb 09 03:28:15 2018 : Info: ++[expiration] = noop
Fri Feb 09 03:28:15 2018 : Info: ++[logintime] = noop
Fri Feb 09 03:28:15 2018 : Info: [pap] WARNING: Auth-Type already set.  Not setting to PAP
Fri Feb 09 03:28:15 2018 : Info: ++[pap] = noop
Fri Feb 09 03:28:15 2018 : Info: +} # group authorize = updated
Fri Feb 09 03:28:15 2018 : Info: Found Auth-Type = eap2
Fri Feb 09 03:28:15 2018 : Info: # Executing group from file /freeradius-2.2.10/etc/raddb/sites-enabled/default
Fri Feb 09 03:28:15 2018 : Info: +group authenticate {
Fri Feb 09 03:28:15 2018 : Info: [eap2] Request found, released from the list
CTRL-EVENT-EAP-SUCCESS 00:00:00:00:00:00
Fri Feb 09 03:28:15 2018 : Debug: ==> Success
Fri Feb 09 03:28:15 2018 : Info: [eap2] Freeing handler
Fri Feb 09 03:28:15 2018 : Info: ++[eap2] = ok
Fri Feb 09 03:28:15 2018 : Info: +} # group authenticate = ok
Fri Feb 09 03:28:15 2018 : Info: # Executing section post-auth from file /freeradius-2.2.10/etc/raddb/sites-enabled/default
Fri Feb 09 03:28:15 2018 : Info: +group post-auth {
Fri Feb 09 03:28:15 2018 : Info: ++[exec] = noop
Fri Feb 09 03:28:15 2018 : Info: +} # group post-auth = noop
Sending Access-Accept of id 3 to 127.0.0.1 port 61757
        MS-MPPE-Recv-Key = 0x53b9b245aff86a00ac7dce0bad4dde283654907b63970fb5a7754f13fca79ce5
        MS-MPPE-Send-Key = 0xd9bad885cbc42d32b265485e519504a11b1d35e8028a7b15b203d84e0006ef64
        EAP-Message = 0x03030004
        User-Name = "pskuser"
        Message-Authenticator = 0x00000000000000000000000000000000
Fri Feb 09 03:28:15 2018 : Info: Finished request 3.
Fri Feb 09 03:28:15 2018 : Debug: Going to the next request
Fri Feb 09 03:28:15 2018 : Debug: Waking up in 4.7 seconds.
Fri Feb 09 03:28:20 2018 : Info: Cleaning up request 0 ID 0 with timestamp +7
Fri Feb 09 03:28:20 2018 : Info: Cleaning up request 1 ID 1 with timestamp +7
Fri Feb 09 03:28:20 2018 : Info: Cleaning up request 2 ID 2 with timestamp +7
Fri Feb 09 03:28:20 2018 : Info: Cleaning up request 3 ID 3 with timestamp +7
Fri Feb 09 03:28:20 2018 : Info: Ready to process requests.


** Client side


RADIUS packet matching with station
MS-MPPE-Send-Key (sign) - hexdump(len=32): d9 ba d8 85 cb c4 2d 32 b2 65 48 5e 51 95 04 a1 1b 1d 35 e8 02 8a 7b 15 b2 03 d8 4e 00 06 ef 64
MS-MPPE-Recv-Key (crypt) - hexdump(len=32): 53 b9 b2 45 af f8 6a 00 ac 7d ce 0b ad 4d de 28 36 54 90 7b 63 97 0f b5 a7 75 4f 13 fc a7 9c e5
decapsulated EAP packet (code=3 id=3 len=4) from RADIUS server: EAP Success
EAPOL: Received EAP-Packet frame
EAPOL: SUPP_BE entering state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Success
EAP: Status notification: completion (param=success)
EAP: EAP entering state SUCCESS
CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
EAPOL: IEEE 802.1X for plaintext connection; no EAPOL-Key frames required
WPA: EAPOL processing complete
Cancelling authentication timeout
State: DISCONNECTED -> COMPLETED
EAPOL: SUPP_PAE entering state AUTHENTICATED
EAPOL: SUPP_BE entering state RECEIVE
EAPOL: SUPP_BE entering state SUCCESS
EAPOL: SUPP_BE entering state IDLE
eapol_sm_cb: result=1
EAPOL: Successfully fetched key (len=32)
PMK from EAPOL - hexdump(len=32): 53 b9 b2 45 af f8 6a 00 ac 7d ce 0b ad 4d de 28 36 54 90 7b 63 97 0f b5 a7 75 4f 13 fc a7 9c e5
No EAP-Key-Name received from server
WPA: Clear old PMK and PTK
EAP: deinitialize previously used EAP method (47, PSK) at EAP deinit
MPPE keys OK: 1  mismatch: 0
SUCCESS

Re: [FreeRADIUS 3.0.16] EAP methods

Sergio NNX