No EAP Start, assuming it's an on-going EAP conversation
Hello, - I will look into that book you recommended Alan - "OReilly book on OpenSSLL" thanks! - But for right now do you have any clues on what I could/do test, look at to fix this: - I have a Linux client trying to connect to the Free Radius, and on the client side I am getting this error message: "CTRL-EVENT-EAP-FAILURE EAP authentication failed" - And on the Free radius console I have this information is shown: Called-Station-Id = "00-20-a6-64-c3-b1:MVG-Personal" Calling-Station-Id = "00-0f-cb-f9-3b-f9;MVG-Personal" NAS-Identifier = "MVG-1" State = 0x73e4f46973e6f0393091c54faaf880fd Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020200060315 Message-Authenticator = 0x330b306447495e1a49cd5c7cfe5c1c6d +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "easy", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound users: Matched entry easy at line 90 expand: Hello, %{User-Name} -> Hello, easy ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop rlm_pap: Found existing Auth-Type, not changing it. ++[pap] returns noop rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 ++[eap] returns handled Reply-Message = "Hello, easy" EAP-Message = 0x010300061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x73e4f46972e7e1393091c54faaf880fd Finished request 1. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 153 with timestamp +279 Cleaning up request 1 ID 154 with timestamp +279 Ready to process requests. - And the client don't get/receive an IP address, guessing it has something to do with EAP authentication "No EAP Start". Thanks for help, Best regards, Johan Nyman
hi, post the full debug log. that would help. you arent doing something crazy in eg users file such as a plain Access-Accept are you? as for addresses - the laptop would get its address via DHCP - you're running a dhcp server on that network the client gets put on? alan
participants (2)
-
A.L.M.Buxey@lboro.ac.uk -
Johan Nyman