Well, that’s a shame, but thank you very much for the reply, I appreciate it. It’ll at least save me countless hours of fiddling around with the config to no avail.

Cheers,

Carl

From: Alan DeKok-2 [via FreeRadius] [mailto:[hidden email]]
Sent: Wednesday, April 13, 2011 1:09 AM
To: Carl Anderson
Subject: Re: EAP-PEAP-GTC User-Password never set

Carl Anderson wrote:
> So far the PEAP tunnel is created without a problem, but when it enters the
> EAP/gtc phase 2 it seems to only populate the User-Name attribute. The
> User-Password, Secret, PIN, and Offset values all expand as empty. As a
> result, phase 2 GTC authentication fails because the gtc module says it
> needs a Cleartext-Password. I feel as though I need to populate those
> attributes somewhere, but I have no idea where... or how exactly to do it.

  Read what you just wrote: the User-Password doesn't exist, and the gtc
module says it needs a Cleartext-Password.

  They're not the same.

  The GTC module requires a Cleartext-Password to authenticate the user,
as the "known good" password.  It doesn't exist, because you're using a
script.

  Your config is looking for a User-Password attribute to pass to the
script.  It doesn't exist becaue you're using GTC.

  In short, what you want to do isn't possible unless you modify the
source code to the server.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html