Hi, I'm using the Version 2. I've successfully changed the default eap type. Now I'm trying to change the inner auth because I need pap as default. I've tried to change the inner auth for ttls but then this happens: ttls { default_eap_type = "pap" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } rlm_eap_ttls: Unknown EAP type pap rlm_eap: Failed to initialize type ttls /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module "eap". /usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section. I've tried to change the inner auth for peap as well, but same problem as before: peap { default_eap_type = "pap" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no } rlm_eap_peap: Unknown EAP type pap rlm_eap: Failed to initialize type peap /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module "eap". /usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section. Why it doesn't recognize pap? Thank you. Luca
On Apr 20, 2017, at 5:55 AM, LUCA <sfire@hotmail.it> wrote:
I'm using the Version 2. I've successfully changed the default eap type. Now I'm trying to change the inner auth because I need pap as default.
PAP isn't an EAP type. Stop trying to do the impossible. It's clear you don't know how things work, which is fine. Everyone started somewhere. The problem is that you're not really listening to the answers people give you. You want to do something, and you don't see a need to *understand* how the system works. You need to spend more time understanding how things work, and thinking about it. Don't just force the server to do what you want. It won't work. Alan DeKok.
If you *must* use PAP as an inner authentication type for EAP, use GTC (Generic Token Card), which is an EAP inner authentication type (EAP-GTC). It will, through the GTC option, give you PAP authentication in the inner tunnel and make the EAP configuration happy. Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. On 20/04/2017, 10:55, "Freeradius-Users on behalf of LUCA" <freeradius-users-bounces+stefan.paetow=jisc.ac.uk@lists.freeradius.org on behalf of sfire@hotmail.it> wrote:
Hi,
I'm using the Version 2. I've successfully changed the default eap type. Now I'm trying to change the inner auth because I need pap as default. I've tried to change the inner auth for ttls but then this happens:
ttls { default_eap_type = "pap" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } rlm_eap_ttls: Unknown EAP type pap rlm_eap: Failed to initialize type ttls /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module "eap". /usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section.
I've tried to change the inner auth for peap as well, but same problem as before:
peap { default_eap_type = "pap" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no } rlm_eap_peap: Unknown EAP type pap rlm_eap: Failed to initialize type peap /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module "eap". /usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section.
Why it doesn't recognize pap? Thank you.
Luca - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
LUCA -
Stefan Paetow