It seems like a little bit of the output got removed when I pasted it here. But you are correct - I discovered that I had only changed the eap section, not the peap section of eap.conf :-) Problem solved, but thanks anyway for your quick and correct solution! 14. Mai 2014 12:06 skrev "Matthew Newton" <mcn4@leicester.ac.uk> følgende:
On Wed, May 14, 2014 at 11:06:01AM +0200, Jan-Ivar Hansen wrote:
Below is the Freeradius -X output, but please let me know if there is any more info I should provide:
You really should send the whole output of radiusd -X (starting from the copyright notice) as the top bit provides information needed.
I'm guessing here, but in your eap.conf file (or mods-enabled/eap, if you're running v3) you need to set
peap { use_tunneled_reply = yes }
by default is is no, so unneeded attributes set in the inner tunnel are not propagated back to the outer (and therefore to the NAS).
Matthew
} # server inner-tunnel [peap] Got tunneled reply code 11 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "1074" Tunnel-Type:0 = VLAN Filter-Id = "ext_kenneth" EAP-Message = 0x010600221a0106001d10256bbeb94704e7c7167dca04979c1e626b656e6f6c73656e Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf91b84c8f91d9eac41ebdf4972430c9b [peap] Got tunneled reply RADIUS code 11 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "1074" Tunnel-Type:0 = VLAN Filter-Id = "ext_kenneth" EAP-Message = 0x010600221a0106001d10256bbeb94704e7c7167dca04979c1e626b656e6f6c73656e Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf91b84c8f91d9eac41ebdf4972430c9b [peap] Got tunneled Access-Challenge ++[eap] returns handled Sending Access-Challenge of id 209 to 10.200.30.210 port 32773 EAP-Message = 0x0106004b1900170301004064907aed054cfeccb100a980d466367158a766137fa38a3068cd4b89bb7ecba7a1b1c77482d4827899cf0ff2145ccfff18987b4c1e92a5268799359040077654 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x89791f5d8c7f06e31f4b857d445452c2 Finished request 59. Going to the next request Waking up in 4.8 seconds.
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html