Hello Alan. "Almost" means the difference between passwords, directories and such. I suspected of the certificate and worked on it, but the error is still there. .... [eap] EAP packet type response id 1 length 23 [eap] No EAP Start, assuming it's an on-going EAP conversation << It should be a start, since it's the first message to arrive ++[eap] returns updated . . . Found Auth-Type = EAP # Executing group from file /etc/freeradius/sites-enabled/default +- entering group authenticate {...} [eap] EAP Identity [eap] processing type tls [tls] Initiate [tls] Start returned 1 ++[eap] returns handled Sending Access-Challenge of id 80 to 192.168.250.250 port 38895 EAP-Message = 0x010200061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x6f3ad5846f38cc2e96bfe99ed117c159 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.250.250 port 38895, id=80, length=264 Sending duplicate reply to client eduroam port 38895 - ID: 80 Sending Access-Challenge of id 80 to 192.168.250.250 port 38895 Waking up in 1.0 seconds. Cleaning up request 0 ID 80 with timestamp +11 WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING: !! EAP session for state 0x6f3ad5846f38cc2e did not finish! WARNING: !! Please read http://wiki.freeradius.org/Certificate_Compatibility WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Ready to process requests. So it never establishes an EAP-TLS to begin with. CA & certificates script: http://pastebin.com/tP1cH2Zx 2012/1/17 Alan DeKok <aland@deployingradius.com>
Alberto Martínez wrote:
Now I'm stuck with this known error: WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING: !! EAP session for state 0xcb306879cb32715a did not finish! WARNING: !! Please read http://wiki.freeradius.org/Certificate_Compatibility WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Well... that message is pretty clear.
while trying to authenticate from Windows *and Linux*. I can't find the problem, since the configuration is almost identical to the working one.
*ALMOST* ???
Perhaps that difference is causing the problem.
It would seem to be a reasonable (and rational) assumption.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Alberto Martínez Setién Servicio Informático Universidad de Deusto Avda. de las Universidades, 24 48007 - Bilbao (SPAIN) Phone: +34 - 94 413 90 00 Ext 2684 Fax: +34 - 94 413 91 01