On 17/01/12 16:24, Rui Ribeiro wrote:
Hi list,
Still setting up a freeradius for eduroam -- internally it is working fine EAP, TTLS and al, however when proxying/connecting to the eduroam, everything seems ok in freeradius logs, however, eapol_test finishes with an error (WARNING: PMK mismatch -- MPPE keys OK: 0 mismatch: 1 FAILURE).
I have seen this before, but I don't have the details to hand. If I recall, I decided it's a bug in eapol_test related to calculating the MSCHAP response. For usernames of the form "DOMAIN\user" all sides correctly removes the "DOMAIN\" before calculating the response. For usernames of the form "user@domain", eapol_test seems to include the @domain when calculating the response. At the server, it varies depending on whether you are using FreeRADIUS "internal" MSCHAP versus ntlm_auth. Basically: ignore it. I think it's a bug in eapol_test.