Hi,

First time using FR 3, after configuring to authenticate with AD the debug that gets spat out appears quite long. I am just making sure this is normal, expected behaviour and if not what I have done wrong..

I've attached the radiusd -X output of one client (iPad) connecting. Config items should all be default except things like mods-available/mschap, mods-available/eap, as per http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOW... ..

whats the problem? the RADIUS server sent back Access-Accept - the client should be allowed to go online. the debug is the corretc length...you are using PEAP and therefore you get this hello : hello, send your ID heres my ID : okay heres my ID (cert sent) (after validating cert) okay lets do EAP : lets do PEAP okay... (EAP sessions establishes) , heres my inner ID : okay.. lets do MSCHAPv2 (MSCHAPv2 challenge response proceeds) the expected values are found : okay Access-Accept and heres some MPPE stuff for your NAS some steps require multiple pakcets - each one is logged in debug mode in total..you can actually read what thr server is doing step by step in full debug mode - that is the return code of every module that the packet goes through (and the complete packet contents for each step) . PEAP takes around 12 packets in round trip... if you have a single client you can look for the 'ready to receive' lines to see each start/stop point...and if you use Wireshark you can see the whole conversation in simple packet swap mode. once you get used to skimming through/reading them it takes less effort (and you can start to remove non required modules to clear things up - and sometimes speed things up) alan

On 10 Nov 2014, at 05:27, Patrick Gawthorne <pgawthorne@pacluth.qld.edu.au> wrote:

First time using FR 3, after configuring to authenticate with AD the debug that gets spat out appears quite long. I am just making sure this is normal, expected behaviour and if not what I have done wrong..

It looks normal to me! :-) With Regards Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.