On Feb 15, 2022, at 1:54 AM, Roger Eric <Eric.Roger1@ac-creteil.fr> wrote:
Hello,I have a problem with freeradius 3.0.17 with samba 4.9.5 under debian 10.
I would suggest using 3.0.25, which has a lot better debug output for EAP.
When I do thisradtest -t mschap eric.roger XXXXXXXX 127.0.0.1 0 testing123it worksSent Access-Request Id 251 from 0.0.0.0:46535 to 127.0.0.1:1812 length 136 User-Name = "eric.roger" MS-CHAP-Password = "Buckroger*1234*" NAS-IP-Address=172.16.1.232 NAS-Port = 0 Message-Authenticator = 0x00 Cleartext-Password="XXXXXXX" MS-CHAP-Challenge=0xe7b3443bc4983e22 MS-CHAP-Response=0x0001000000000000000000000000000000000000000000000000bfcdc7b44a760f05e5ce1d89ea0bc8a546bc7627fb3edd4Received Access-Accept Id 251 from 127.0.0.1:1812 to 127.0.0.1:46535 length 84 MS-CHAP-MPPE-Keys=0x0000000000000000bbee31eb54dd1eef75e78c302ccd2b09 MS-MPPE-Encryption-Policy=Encryption-Allowed MS-MPPE-Encryption-Types=RC4-40or128-bit-Allowed
That's completely unreadable. Please post clean output.
in Eap it does not work on android or windows 10. I post my log of freeradius -XXX
Don't do that. Follow the instructions in the documentation. We need "freeradius -X". Not anything else.
I don't see the error I use the base certificates to test snakeoil before putting my own. but I don't understand the problem. the server is joined to the domain and the radtest works? thank you very much for your help and if necessary other files I can send them Thank you Eric
Send READABLE debug output. Follow the instructions in the documentation. Alan DeKok.