PEAP mschapv2 E= 691 R=0 code is correct?
Hi. At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped, but, FR3.x is not popup. below is debug -- Released connection (2) Fri Sep 25 19:55:58 2020 : Debug: (6) modsingle[post-auth]: returned from sql (rlm_sql) Fri Sep 25 19:55:58 2020 : Debug: (6) [sql] = ok Fri Sep 25 19:55:58 2020 : Debug: (6) if (reply:MS-CHAP-Error =~ /E=691 R=0/) { Fri Sep 25 19:55:58 2020 : Debug: No matches Fri Sep 25 19:55:58 2020 : Debug: (6) if (reply:MS-CHAP-Error =~ /E=691 R=0/) -> FALSE Fri Sep 25 19:55:58 2020 : Debug: (6) modsingle[post-auth]: calling attr_filter.access_reject (rlm_attr_filter) Fri Sep 25 19:55:58 2020 : Debug: %{User-Name} Fri Sep 25 19:55:58 2020 : Debug: Parsed xlat tree: Fri Sep 25 19:55:58 2020 : Debug: attribute --> User-Name Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EXPAND %{User-Name} Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: --> user01 Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Matched entry DEFAULT at line 1 Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Cleartext-Password" allowed by 0 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=02fa5a91d12763de0ebb5702753e7402 V=3 M=Authentication rejected" allowed by MS-CHAP-Error =* "" Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=3ffb7931c560572bb7e802f970f89497 V=3 M=Authentication failed" allowed by MS-CHAP-Error =* "" Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EAP-Message = 0x04060004 allowed by EAP-Message =* 0x Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "EAP-Message" allowed by 1 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Message-Authenticator = 0x00000000000000000000000000000000 allowed by Message-Authenticator =* 0x Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Message-Authenticator" allowed by 1 rules, disallowed by 0 rules -- Thanks
On Sep 25, 2020, at 7:49 AM, 엔트로링크(주) <dhpark21@naver.com> wrote:
At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped, but, FR3.x is not popup. below is debug
Post ALL of the debug. The documentation says to do that. http://wiki.freeradius.org/list-help What you posted is a tiny portion of the debug, and is useless. Alan DeKok.
atteched full log files; Thanks -----Original Message----- From: "Alan DeKok"<aland@deployingradius.com> To: "FreeRadius users mailing list"<freeradius-users@lists.freeradius.org>; Cc: Sent: 2020-09-25 (금) 20:56:12 (GMT+09:00) Subject: Re: PEAP mschapv2 E= 691 R=0 code is correct? On Sep 25, 2020, at 7:49 AM,
At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped, but, FR3.x is not popup. below is debug
Post ALL of the debug. The documentation says to do that. http://wiki.freeradius.org/list-help What you posted is a tiny portion of the debug, and is useless. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
엔트로링크(주)