hello, i'am trying to use radius authenticate and authorise users by EAP/TTLS from XP and Linux ( Debian), i'am using only a « users » like database. i'am reading the documentation : http://wiki.freeradius.org i've imported root.pem both Windows XP and Linux ... the server no sends response, why??
You are not reading the debug log correctly. The server IS sending a challenge. The NAS (or supplicant) then does not continue with the next EAP packet. yes it's exactly,
Odds are you don't have the root certificates configured correctly. I'am using openssl-0.9.7 to generate the certificats, and i'am importing root.pem to Linux
and this log by Windows XP ...
The same thing.
It's a certificate problem. The supplicants have decided that they don't like the servers certificate. They then stop doing EAP.
can'i use the certificats existing in the freeradius-1.1.7 ? it's sufficient.
Look at the logs on the supplicant to see why they're stopping EAP.
by linux, I put this wireshark -i eth0 but any response by windows, I'va this start Request, Identity Response,MS-EAP-Authentication Response, NAK (response only) Request, EAP-TTLS Client Hello Request, EAP-TTLS Response, EAP-TTLS Server Hello, Certificate, Server Hello Done Continuation Data Start Failure
Alan DeKok. - thanks List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Découvrez le Blog heroic Fantaisy d'Eragon! http://eragon-heroic-fantasy.spaces.live.com/