在2010-05-26 16:50:15，"Alan Buxey" <A.L.M.Buxey@lboro.ac.uk> 写道： >Hi, >> Anyone who knows this problem can help to check about the problem? >> Thanks! > >your server hasnt been built with full EAP support - the debug says so (read the >lines about PEAP/TTLS etc - installed the openssl-devel stuff and rebuild. however, I installed it under my ubuntu. Why the debug says that? I think it is because I use EAPMD5 here to test. root@ubuntu:/home/fang/Desktop# !385 apt-get install libssl-dev Reading package lists... Done Building dependency tree Reading state information... Done libssl-dev is already the newest version. 0 upgraded, 0 newly installed, 0 to remove and 1025 not upgraded. besides, I installed the openssl. I use the command: ./configure --with-experimental-module to generate the Makefile. If libssl-dev is missing, then this step can't be done.
you should have a file called attrs.access_challenge in your $RADDB directory. this gets used. ensure the call within your handler part calls that file and not something else.
please notice this link:http://lists.freeradius.org/pipermail/freeradius-users/2010-May/msg00588.htm... weiwei fang wrote:
As in RFC2865, this attribute "Framed-MTU = 1500" should not returned in the access-challenge packet.
however, I can still get it in the access-challenge packet. I don't know why?
So... what does debug mode say?
If I should add something in the raddb/sites-available/attrs.access_challenge file?
No. Alan DeKok. As a new user, I left the attrs.access_challenge file as it is: # # Configuration file for the rlm_attr_filter module. # Please see rlm_attr_filter(5) manpage for more information. # # $Id$ # # This configuration file is used to remove almost all of the # attributes From an Access-Challenge message. The RFC's say # that an Access-Challenge packet can contain only a few # attributes. We enforce that here. # DEFAULT EAP-Message =* ANY, State =* ANY, Message-Authenticator =* ANY, Reply-Message =* ANY, Proxy-State =* ANY, Session-Timeout =* ANY, Idle-Timeout =* ANY
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html