Actually is just for testing, will talk with the responsible entity next week, but with the festivities at the door, roaming through IAS would probably allow me to switch to freeradius sooner.
eduroam federation. I created a realm for our local domain, created a
DEFAULT proxy for users with other domains pointing to the IAS server, both
are as clients of each other, share the same secret, and also defined a
Remote access policy in IAS.
Tried already some alternatives, and inserted Reply-Message = "Yes", as
suggested on another post in the list.
Eh? Who suggested that?
Another freeradius<->IAS thread in this list.
Despite all the efforts, when talking with the IAS, I receive back the error
Proxy-State = 0x3137.
That's not an error; it's just a radius attribute.
In the debug logs, I have:
ad_recv: Access-Reject packet from host 10.10.66.18 port 1812, id=251,
length=24
Proxy-State = 0x3137
Any advice?
You will need to debug this on the IAS server, since it is sending (or
proxying) the reject. My guess is the policies in IAS are wrong.
Tried to see the IAS logs, they didn't much sense. Will have a look at system events.
------------------------------