If you *must* use PAP as an inner authentication type for EAP, use GTC (Generic Token Card), which is an EAP inner authentication type (EAP-GTC). It will, through the GTC option, give you PAP authentication in the inner tunnel and make the EAP configuration happy. Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. On 20/04/2017, 10:55, "Freeradius-Users on behalf of LUCA" <freeradius-users-bounces+stefan.paetow=jisc.ac.uk@lists.freeradius.org on behalf of sfire@hotmail.it> wrote:
Hi,
I'm using the Version 2. I've successfully changed the default eap type. Now I'm trying to change the inner auth because I need pap as default. I've tried to change the inner auth for ttls but then this happens:
ttls { default_eap_type = "pap" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } rlm_eap_ttls: Unknown EAP type pap rlm_eap: Failed to initialize type ttls /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module "eap". /usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section.
I've tried to change the inner auth for peap as well, but same problem as before:
peap { default_eap_type = "pap" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no } rlm_eap_peap: Unknown EAP type pap rlm_eap: Failed to initialize type peap /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module "eap". /usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section.
Why it doesn't recognize pap? Thank you.
Luca - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html