Problem with EAP/TLS authentication
hi, i am in trouble in the configuration of my radius server, eap/tls and wifi clients, i dont know where is the error, if its in my conf or if its in my certificates... I run the freeradius version 1.0.4. When Wifi client running winXP sp2 try to connect the radius, i have this following error after (i think) a succesfull authentication: rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 eaptls_process returned 7 #error is here
rlm_eap_tls: Received unexpected tunneled data after successful handshake. rlm_eap: Handler failed in EAP/tls rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 9 modcall: group authenticate returns invalid for request 9 auth: Failed to validate the user.
Do you have any idea why it doesnt work? If i use the radtest command with a fake user, it works... Thanks for your help :) --------------- here is my eap.conf: eap { default_eap_type = tls timer_expire = 60 ignore_unknown_eap_types = yes tls { private_key_password = eripasse private_key_file = /etc/pki/ERITEST/private/ERITEST.srv.mail_key.pem certificate_file = /etc/pki/ERITEST/private/ERITEST.srv.mail_cert.pem CA_file = /etc/pki/ERITEST/eritestCA.pem random_file = /etc/pki/tls/random.rand fragment_size = 1024 } } -------------------------- and my users file "user" Auth-Type := EAP "test" Auth-Type := Local, User-Password =="test"
Guillaume <guillaume.chardin@gmail.com> wrote:
I run the freeradius version 1.0.4.
You should probably upgrade.
rlm_eap_tls: Received unexpected tunneled data after successful handshake.
I recall that's a problem with machine accounts, or some other Windows weirdness. See the list archives. Alan DeKok.
2006/3/6, Alan DeKok <aland@ox.org>:
Guillaume <guillaume.chardin@gmail.com> wrote:
I run the freeradius version 1.0.4.
You should probably upgrade.
rlm_eap_tls: Received unexpected tunneled data after successful handshake.
I recall that's a problem with machine accounts, or some other Windows weirdness. See the list archives.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OK thanks, but were can i consult list archives, is there a searching tool?
There is a link at the bottom of every message, on that page at the bottom is a link for searching the archives via google. Good Luck. -Bob Guillaume wrote:
2006/3/6, Alan DeKok <aland@ox.org>:
Guillaume <guillaume.chardin@gmail.com> wrote:
I run the freeradius version 1.0.4.
You should probably upgrade.
rlm_eap_tls: Received unexpected tunneled data after successful handshake.
I recall that's a problem with machine accounts, or some other Windows weirdness. See the list archives.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OK thanks, but were can i consult list archives, is there a searching tool?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Guillaume -
Robert Myers