I'm trying to build a radius server with PEAP-mschap but it's not working because an ssl error: short Log below: modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry teste at line 59 modcall[authorize]: module "files" returns ok for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0613], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 rlm_eap_peap: EAPTLS_HANDLED modcall[authenticate]: module "eap" returns handled for request 1 modcall: leaving group authenticate (returns handled) for request 1 Sending Access-Challenge of id 1 to 10.0.0.245 port 1056 Idle-Timeout = 10 Any ideas???? --------------------------------- Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento!
No. You have no client cerftificate so there is nothing to be read. That's normal. But PEAP conversation stopping in the middle with an Access-Challenge is another matter - described in FAQ, eap.conf, ... Ivan Kalik Kalik Informatika ISP Dana 19/2/2008, "Eduardo Lima" <duwise2003@yahoo.com.br> piše:
I'm trying to build a radius server with PEAP-mschap but it's not working because an ssl error:
short Log below:
modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry teste at line 59 modcall[authorize]: module "files" returns ok for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0613], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 rlm_eap_peap: EAPTLS_HANDLED modcall[authenticate]: module "eap" returns handled for request 1 modcall: leaving group authenticate (returns handled) for request 1 Sending Access-Challenge of id 1 to 10.0.0.245 port 1056 Idle-Timeout = 10
Any ideas????
--------------------------------- Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento!
Eduardo Lima wrote:
I'm trying to build a radius server with PEAP-mschap but it's not working because an ssl error:
No. The error is "0", meaning "no error". Seeing the error in the debug log also means you're using an old version of the server, and should upgrade to at least 1.1.7. Alan DeKok.
participants (3)
-
Alan DeKok -
Eduardo Lima -
Ivan Kalik