Alan, Your answer's very appreciated! We were concerned that we might have missed something. Unknown users not being able to connect is, well, a good thing! FreeRadius is doing its job. thanks again /mh On Tue, Jul 25, 2023 at 2:25 PM Alan DeKok <aland@deployingradius.com> wrote:
On Jul 25, 2023, at 11:54 AM, Matt H <meh1963@gmail.com> wrote:
I'm seeing an odd message in /var/log/radius/radius.log - freeradius 3.0.20
Fri Jul 21 11:07:24 2023 : ERROR: (106416) eap_peap: ERROR: TLS Alert read:fatal:unknown CA
That means one client tried to connect, but it wasn't configured with the correct CA.
I would expect that EAP would be failing; it's not, apparently, as users are able to connect and auth (WPA2-Enterprise).
The error message also means that unknown users cannot connect. Which is fine.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Death before dishonour, Nothing before coffee