help in setting up PEAP in freeRADIUS with winXp
Hi Martin, Thanks for your reply.Everything you mentioned is configured in eap.conf file.Still i am facing the problem. Plz let me know how to proceed to fix it. With thanks... Apangshu On 6/11/07, freeradius-users-request@lists.freeradius.org < freeradius-users-request@lists.freeradius.org> wrote:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: help in setting up PEAP in freeRADIUS with winXp supplicant (Martin Gadbois) 2. Re: Freeradius as a secondary (Jeff) 3. Re: Big "VSA + Proxy" problem (Guilherme Franco)
----------------------------------------------------------------------
Message: 1 Date: Mon, 11 Jun 2007 09:28:27 -0400 From: Martin Gadbois <martin.gadbois@colubris.com> Subject: Re: help in setting up PEAP in freeRADIUS with winXp supplicant To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <466D4DFB.1020704@colubris.com> Content-Type: text/plain; charset=UTF-8
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Apangshu Saha wrote:
rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 5 rlm_eap: EAP Identity rlm_eap: No such EAP type mschapv2 rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 5 modcall: leaving group authenticate (returns invalid) for request 5 auth: Failed to validate the user. PEAP: Tunneled authentication was rejected. rlm_eap_peap: FAILURE
Do you have mschap enabled in your eap.conf?
eap { default_eap_type = peap timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no
md5 { }
tls { ... }
ttls { ... } peap { ... }
mschapv2 { }
}
- -- ============== +---------------------------------------------+ Martin Gadbois | "Please answer by yes or no. | Sr. SW Designer | Uncooperative user waste precious CPU time" | Colubris Networks Inc. | -- The Andromeda Strain, M. Crichton, 1969 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGbU379Y3/iTTCEDkRAhz+AJkBQD2iH/pJHGSFwVdBnNcFAMdILACgomOf vZhC4ftJ7IjYZXP+1oTcjQI= =YvGQ -----END PGP SIGNATURE-----
------------------------------
Message: 2 Date: Mon, 11 Jun 2007 10:28:37 -0400 From: Jeff <jeffa@jahelpdesk.com> Subject: Re: Freeradius as a secondary To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <20070611142837.c0c38dfd@ns1.jahelpdesk.com> Content-Type: text/plain; charset="us-ascii"
Ok new issue thats eluding me I uninstalled version 1. then installed version 2
anyway. i resetup the configs and made sure my services file is 1645 radius and 1646 for acct as before anyway when i do a auth with ntradping all connects aok when i do anykind of an accouting request, stop start update i get error 10054 which i read may mean check the port which it apperas i am set aok unless i am missing something
NEXT Nothing is going into the radacct dir for detail file either or is it being created
Also when i do a /etc/init.d/freeradius start or restart everything is aok when i do a /etc/init.d/freeradius reload I see in the radius log that its saying there is errors in the radius config
Anyway anyone have any ideas? _____
From: Peter Nixon [mailto:listuser@peternixon.net] To: FreeRadius users mailing list [mailto: freeradius-users@lists.freeradius.org] Sent: Sun, 10 Jun 2007 19:43:58 -0400 Subject: Re: Freeradius as a secondary
On Sun 10 Jun 2007, Jeff wrote:
I am using the version installed through software update on opensuse
You may wish to use my updated packages at: http://software.opensuse.org/download/network:/aaa/
Just add is as a software repository in YaST. (ie. http://software.opensuse.org/download/network:/aaa/openSUSE_10.2/)
Cheers
--
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Apangshu Saha wrote:
Hi Martin, Thanks for your reply.Everything you mentioned is configured in eap.conf file.Still i am facing the problem.
If the server says "no such EAP type mschapv2", then the module isn't defined, or the server isn't reading same configuration file you're looking at.
Plz let me know how to proceed to fix it.
Stop editing the default configuration file to break it. Start with the default configuration file, and make gradual changes until you have the configuration you want. Or, run the server in debugging mode as suggested in the README, FAQ, INSTALL, and nearly daily on this list. It will tell you which configuration file it's reading, and which modules it is loading. If it isn't loading the "mschapv2" module, then the debug output will not have any references to "mschapv2". That would explain why PEAP isn't working. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan Dekok -
Apangshu Saha