Hi Alan, thank you for your quick answer. Please send me some example about this proxy configuration. Rgdrs, Radim
Hi,
Everything work OK, Ovislink send request to FreeRadius server, FreeRadius send Access-Request to IAS (mschapv2) IAS send Access-Accept, but Ovislink received Access-Challenge from FreeRadius, one two, three ... and on the end authetication failed.
proxied connection - by default you will probably have the default proxy attributes set - which will filter out required attributes for successful replies to be returned. you will need to add a new entry to 'trust' the IAS return values - and have more attributes allowed through.
alan
Hi all,
I found very much usefull information about this configuration on the internet. But I have still problem with this configuration. I need terminated PEAP locally on the Freeradius and redirect only mschapv2 to IAS server for authentication.
Authentication server: FreeRadius.net version: 1.1.7 Supplicant: Win XP SP2 (with PEAP) Authenticator: Ovislink WL-5460AP v2
- users.conf DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Proxy-To-Realm := Safeword
- proxy.conf realm Safeword { ??????? type = radius ??????? authhost??????? = <ip>:1645 ??????? accthost??????? = <ip>:1646 ??????? secret????????? = <secret> ??????? }
- eap.conf peap { ? ???????????? default_eap_type = mschapv2 ?????????????? proxy_tunneled_request_as_eap = no }
Everything work OK, Ovislink send request to FreeRadius server, FreeRadius send Access-Request to IAS (mschapv2) IAS send Access-Accept, but Ovislink received Access-Challenge from FreeRadius, one two, three ... and on the end authetication failed.
If I use user database on FreeRadius everything work OK. (Access-Request, Access-Accept) no problem.
Is it possible configure FreeRadius as only resend reply from IAS to Ovislink? Or I have problem with configuration.
If you want I send you configuration files and log from debug mode.
I want this configuration because I want use one time password authetication, but Safeword plugin on Active Directory doesn't understand PEAP protocol. Only one way is use FreeRadius as proxy.
Thank you for your help.
Rgdrs, Radim