On Tue, Feb 09, 2016 at 05:46:27PM -0500, Doug Berman wrote:
as a client to the radius server. What's frustrating is sometimes I'm able to use 802.1x EAP/PEAP just fine on my MAC and other times, it fails. I've looked through the radius debug and I can't find anything that stands out that calls my attention. Snipits for the file "users" and "clients.conf" and the debug is below. Any help would be greatly appreciated.
Try and capture the output of radiusd -X when it fails. The debug output isn't of much use because it all (from the FreeRADIUS side anyway) succeeded just fine. If it's just you using it, just run it in -X outputting to a file until it breaks so you can capture the debug. If the broken auth still says Access-Accept in the debug, you need to be looking elsewhere for the problem.
[eap] EAP Identity [eap] processing type md5 rlm_eap_md5: Issuing Challenge
However, save yourself one round trip. Change the default eap type in the eap module configuration from md5 to peap.
Sending Access-Accept of id 102 to 192.168.1.29 port 56313
You should also install and use version 3.0.11. Version 2 is end of life now, so there's no point starting out and learning on something obsolete. 2.1.12 is ancient. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>