Thanks Josh.... there were many differences! but key is probably: default_eap_type = peap instead of: default_eap_type = mschapv2 Am gonna start a 3.0.9 install from scratch to be sure... Thanks, Mohamed. On Sat, Jul 25, 2015 at 6:13 PM, Josh Miller <jmills5901@gmail.com> wrote:
And are you absolutely sure there is no configuration difference between the two servers?
From the log you posted, it appears the 3.0.9 server is attempting an EAP-MD5 instead of MSCHAPv2 where they are likely configured in their supplicant.
3.0.9 Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Calling submodule eap_md5 to process data
vs
3.0.8 Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Calling eap_mschapv2 to process EAP data
I would double-check all the configs, it appears that there is a difference between the 2 boxes.
On Sat, Jul 25, 2015 at 2:51 PM, Mohamed Lrhazi-2 [via FreeRADIUS] < ml-node+s1045715n5735571h11@n5.nabble.com> wrote:
On Sat, Jul 25, 2015 at 5:31 PM, Josh Miller <[hidden email] <http:///user/SendEmail.jtp?type=node&node=5735571&i=0>> wrote:
Supplicant is a term that describes the application that is used to create the wired/wireless network connection.
Some examples are:
1. Native Windows 7 or 8 Wireless Supplicant 2. Intel Proset Wireless Supplicant 3. Aruba Networks has a Windows supplicant specifically for creating PEAP-GTC connections for Windows clients.
I think you get the idea.
Thanks Josh, Alan.
I do not know much about the users... I just noticed that when I started sending traffic to 3.0.9 instances, these rejections started showing up in the log... so I tested further and found that indeed, the same user would fail on 3.0.9, then I would remove 3.0.9 from the pool, and baam, their next attempt would be routed to 3.0.8 instance, and would succeed right away!
Mohamed. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------ If you reply to this email, your message will be added to the discussion below:
http://freeradius.1045715.n5.nabble.com/3-0-9-eap-Failed-continuing-EAP-MD5-...
To unsubscribe from FreeRADIUS, click here < http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsub...
. NAML < http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro...
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html