Intel Proset Wireless Client does not process RFC3580 Attributes.
FreeRADIUS Version 1.1.3-r0.1.2 (Upgrade to 1.1.7 is Pending) I am running FreeRADIUS to authenticate wireless users on a bunch of Cisco AP1231's. My wireless supplicants are running a combination of the standard Windows XP client which works fine and the Intel Proset Client which is causing problems. The Radius setup is for PEAP/MSChapv2 and each user has the following attributes assigned. Tunnel-Type = "VLAN" Tunnel-Medium-Type = "IEEE-802" Tunnel-Private-Group-ID = "X" (Where X is the assigned VLAN Number) The Proset Clients do manage to eventually authenticate, but the above attributes do not appear to get processed. I think this is happening because the Proset Client sends the User-Name as "anonymous" and as there is no "anonymous" user defined, the attributes do not get applied. How do I get the User-Name to be sent correctly? Thanks in advance. Terry Pelley Network Analyst Business and Learning Technologies Ottawa-Carleton District School Board terry.pelley@ocdsb.ca
Read instructions in eap.conf. You most likely need to set: use_tunneled_reply = yes in peap section. Ivan Kalik Kalik Informatika ISP Dana 18/9/2007, "Terry Pelley" <Terry.Pelley@ocdsb.ca> piše:
FreeRADIUS Version 1.1.3-r0.1.2 (Upgrade to 1.1.7 is Pending)
I am running FreeRADIUS to authenticate wireless users on a bunch of Cisco AP1231's. My wireless supplicants are running a combination of the standard Windows XP client which works fine and the Intel Proset Client which is causing problems.
The Radius setup is for PEAP/MSChapv2 and each user has the following attributes assigned.
Tunnel-Type = "VLAN" Tunnel-Medium-Type = "IEEE-802" Tunnel-Private-Group-ID = "X" (Where X is the assigned VLAN Number)
The Proset Clients do manage to eventually authenticate, but the above attributes do not appear to get processed. I think this is happening because the Proset Client sends the User-Name as "anonymous" and as there is no "anonymous" user defined, the attributes do not get applied.
How do I get the User-Name to be sent correctly?
Thanks in advance.
Terry Pelley Network Analyst Business and Learning Technologies Ottawa-Carleton District School Board
terry.pelley@ocdsb.ca
Thank you, That worked perfectly. FreeRadius users mailing list <freeradius-users@lists.freeradius.org> writes:
Read instructions in eap.conf. You most likely need to set:
use_tunneled_reply = yes
in peap section.
Ivan Kalik Kalik Informatika ISP
Terry Pelley Network Analyst Business and Learning Technologies Ottawa-Carleton District School Board
participants (2)
-
Terry Pelley -
tnt@kalik.co.yu