Well, that's a shame, but thank you very much for the reply, I appreciate it. It'll at least save me countless hours of fiddling around with the config to no avail. Cheers, Carl From: Alan DeKok-2 [via FreeRadius] [mailto:ml-node+4299802-2066596580-197783@n5.nabble.com] Sent: Wednesday, April 13, 2011 1:09 AM To: Carl Anderson Subject: Re: EAP-PEAP-GTC User-Password never set Carl Anderson wrote:
So far the PEAP tunnel is created without a problem, but when it enters the EAP/gtc phase 2 it seems to only populate the User-Name attribute. The User-Password, Secret, PIN, and Offset values all expand as empty. As a result, phase 2 GTC authentication fails because the gtc module says it needs a Cleartext-Password. I feel as though I need to populate those attributes somewhere, but I have no idea where... or how exactly to do it.
Read what you just wrote: the User-Password doesn't exist, and the gtc module says it needs a Cleartext-Password. They're not the same. The GTC module requires a Cleartext-Password to authenticate the user, as the "known good" password. It doesn't exist, because you're using a script. Your config is looking for a User-Password attribute to pass to the script. It doesn't exist becaue you're using GTC. In short, what you want to do isn't possible unless you modify the source code to the server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _____ If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/EAP-PEAP-GTC-User-Password-never-set -tp4298997p4299802.html To unsubscribe from EAP-PEAP-GTC User-Password never set, click here <http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsu bscribe_by_code&node=4298997&code=Y3dhbmRlcnNvbjMzQGdtYWlsLmNvbXw0Mjk4OTk3fD g2ODYwMDMyOQ==> . -- View this message in context: http://freeradius.1045715.n5.nabble.com/EAP-PEAP-GTC-User-Password-never-set... Sent from the FreeRadius - User mailing list archive at Nabble.com.