Dear Alan! Working means the devices are successfully connected - so the connection not depending on the strenght of the tunnel encryption (if duo authentication disabled). Somenthing should be different - I have a feeling that Duo and Freeradius uses the same resources and this cause the problem. Tomorrow I'll move the Duo to a new server and we'll see if the problem stays or not. On 5 January 2017 at 00:35, Alan DeKok <aland@deployingradius.com> wrote:
On Jan 4, 2017, at 6:17 PM, Dudás Péter <peter.pdudas@gmail.com> wrote:
I don't see any difference in the reply - checked the logs.
Then the NAS should do the same thing in both cases.
With this I was able to login from and Android phone. MPPE encryption type I changed to Required (at module mschap) - but as you can see it is working with that as well.
Please be clear about "working". There are multiple pieces involved.
If the Access-Accepts are the same in both cases, then the NAS should behave the same in both cases.
And there is no way that adding a simple program to be executed will make the NAS misbehave.
Something else is going wrong. Find that, and the problem will be fixed.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html