After server rebuild the PEAP against Windows AD is not working any more!
Hi experts, I'm getting really frustrated on this... I had the server rebuilt with REHL 5 and FreeRadius2.1.7. It was running REHL 4 with FreeRadius2.1.6. It looks like the server will send the last "challenge" and the client won't reply anymore... The ntlm_auth part should be working right because when I do "radtest 'gtcorp\\dzhao' <password> localhost 0 test123" it works fine... Sending Access-Request of id 119 to 127.0.0.1 port 1812 User-Name = "gtcorp\\dzhao" User-Password = "<password>" NAS-IP-Address = 10.26.105.105 NAS-Port = 0 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=119, length=41 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3" Tunnel-Preference:0 = 0 However it's not working when I have a laptop plugged in doing PEAP/802.1x with the same user account... The debug output is attached. Please help!! Thanks!!! Difan Zhao, M.Eng Network Engineer Guest-Tek Interactive Entertainment Inc. Email: difan.zhao@guest-tek.com Office: +1 (403) 509 1010 ext 3048 Cell: +1 (403) 689 7514 www.guest-tek.com INTERNET | MEDIA | VOICE The contents of this email are confidential and intended for the recipient only. If you have received this email in error, please notify us, and destroy all copies.
Difan Zhao wrote:>
I’m getting really frustrated on this… I had the server rebuilt with REHL 5 and FreeRadius2.1.7. It was running REHL 4 with FreeRadius2.1.6. It looks like the server will send the last “challenge” and the client won’t reply anymore…
If you're using Samba, it's a samba bug. See the comments in eap.conf. Alan DeKok.
Hi Alan, Thank you for the info! I downgraded the samba to 3.0.33 and it works fine now! Thanks, Difan Zhao, M.Eng Network Engineer Guest-Tek Interactive Entertainment Inc. www.guest-tek.com Email: difan.zhao@guest-tek.com Office: +1 (403) 509 1010 ext 3048 Cell: +1 (403) 689 7514 http://www.guest-tek.com/images/Guest-Tek%20-%20Formal_files/Logo.jpg INTERNET | MEDIA | VOICE http://www.guest-tek.com/images/Guest-Tek%20-%20Formal_files/image004.jp g The contents of this email are confidential and intended for the recipient only. If you have received this email in error, please notify us, and destroy all copies. -----Original Message----- From: freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradius.org [mailto:freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradi us.org] On Behalf Of Alan DeKok Sent: September-11-10 12:18 AM To: FreeRadius users mailing list Subject: Re: After server rebuild the PEAP against Windows AD is not workingany more! Difan Zhao wrote:>
I'm getting really frustrated on this... I had the server rebuilt with REHL 5 and FreeRadius2.1.7. It was running REHL 4 with FreeRadius2.1.6. It looks like the server will send the last "challenge" and the client won't reply anymore...
If you're using Samba, it's a samba bug. See the comments in eap.conf. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Difan Zhao