Dear Alan, Thank you very much. It seems to have worked. Here is the output I'm getting right now. (8) authenticate { (8) eap: Expiring EAP session with state 0xb2a2c22cb2abd872 (8) eap: Finished EAP session with state 0xb2a2c22cb2abd872 (8) eap: Previous EAP request found for state 0xb2a2c22cb2abd872, released from the list (8) eap: Peer sent packet with method EAP MSCHAPv2 (26) (8) eap: Calling submodule eap_mschapv2 to process data (8) eap_mschapv2: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel (8) eap_mschapv2: authenticate { (8) mschap: Found NT-Password (8) mschap: Creating challenge hash with username: zeeshan.chaudary (8) mschap: Client is using MS-CHAPv2 (8) mschap: Adding MS-CHAPv2 MPPE keys (8) [mschap] = ok (8) } # authenticate = ok (8) MSCHAP Success Again. Thankyou BR/Mustafa ________________________________ From: Freeradius-Users <freeradius-users-bounces+mustafa.mujahid=outlook.com@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Thursday, March 9, 2017 5:52 AM To: FreeRadius users mailing list Subject: Re: eap_peap: fatal access_denied error On Mar 9, 2017, at 8:44 AM, mustafa mujahid <mustafa.mujahid@outlook.com> wrote:
Please see below complete Debug. (it's pretty long)
It's a little opaque, but the problem is here:
(8) # Executing group from file /etc/raddb/sites-enabled/inner-tunnel (8) authenticate { (8) eap: Expiring EAP session with state 0x102bfd681022e731 (8) eap: Finished EAP session with state 0x102bfd681022e731 (8) eap: Previous EAP request found for state 0x102bfd681022e731, released from the list (8) eap: Peer sent packet with method EAP MSCHAPv2 (26) (8) eap: Calling submodule eap_mschapv2 to process data (8) eap_mschapv2: Auth-Type sub-section not found. Ignoring.
It looks like you edited the configuration files and broke them. Don't do that. The eap_mschapv2 module calls "Auth-Type mschap" in order to do the actual MS-CHAP calculations. If that subsection isn't found... eap_mschapv2 can't work. Use 3.0.13. And start with the default configuration files. It works. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html FreeRADIUS -- users' list info<http://www.freeradius.org/list/users.html> www.freeradius.org Users' List Information. The freeradius-users mailing list is for users of the FreeRADIUS server not Cistron's server! There are a few house-rules to which we'd like ...