EAP/TLS connection problem..
Hello All, I can seem to connect to the radius server, this is the error code: Anyone has a clue on what It could be? ........................................ Ready to process requests. User-Name = "Linux1" NAS-IP-Address = 10.0.0.197 Called-Station-Id = "00-20-a2-64-c3-b1:devnet" Calling-Station-Id = "00-0e-33-fe-3a-36;devnet" NAS-Identifier = "MVG-1" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020a000b014c696e757831 Message-Authenticator = 0x68a4345956d14cfdd678854f4c955ac7 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "Linux1", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 10 length 11 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound users: Matched entry Linux1 at line 219 expand: Hello, %{User-Name} -> Hello, Linux1 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 ++[eap] returns handled Reply-Message = "Hello, Linux1" EAP-Message = 0x010b00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x84a6103884ad1d7df7f1c190d83cc59f Finished request 16. ........................................ The wpa_supplican.conf loks like this: network={ ssid="devnet" scan_ssid=1 key_mgmt=WPA-EAP pairwise=CCMP TKIP group=CCMP TKIP auth_alg=OPEN proto=RSN eap=TLS identity="Linux1" ca_cert="/Certs/ca.pem" client_cert="/Certs/client.pem" private_key="/Certs/client.pem" private_key_passwd="secret" } ........................................
Johan Nyman wrote:
I can seem to connect to the radius server, this is the error code: ... Anyone has a clue on what It could be?
Nope. You seem to have edited the debug output a lot, and have deleted any information that could be used to understand what's going on. Alan DeKok.
Hello Alan, I have not edited the debug "a lot"! What information, from what .log files do you want/need? Perhaps you are referring to another debug file? That information I posted is directly from the "Radiusd -X" console. Thanks for help, Best regards, Johan -----Original Message----- From: freeradius-users-bounces+johan=mediavisiongroup.se@lists.freeradius.org [mailto:freeradius-users-bounces+johan=mediavisiongroup.se@lists.freeradius. org] On Behalf Of Alan DeKok Sent: den 29 april 2008 17:37 To: FreeRadius users mailing list Subject: SPAM-LOW: Re: EAP/TLS connection problem.. Johan Nyman wrote:
I can seem to connect to the radius server, this is the error code: ... Anyone has a clue on what It could be?
Nope. You seem to have edited the debug output a lot, and have deleted any information that could be used to understand what's going on. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Johan Nyman wrote:
I have not edited the debug "a lot"!
You posted a small portion of the debug output. There is a lot more available during an EAP-TLS session.
What information, from what .log files do you want/need?
The output of radiusd -X?
Perhaps you are referring to another debug file?
That information I posted is directly from the "Radiusd -X" console.
Yes, I know that. Please understand that posting a *tiny* portion of it doesn't help. Posting *all* of it helps. Alan DeKok.
That information I posted is directly from the "Radiusd -X" console.
Then your supplicant didn't respond to the initial challenge. Why? You should ask that on the supplicant list. Usual cause is no CA certificate on the user machine. Ivan Kalik Kalik Informatika ISP
participants (3)
-
Alan DeKok -
Ivan Kalik -
Johan Nyman