Hi! I have set up a freeradius server, which are pointed to by my Linksys WRT54GL router. Everything seems to work with LEAP authentication, such as radtest from localhost and also from my laptop (When router is running WPA2 Personal, and i can connect to the network). The problem comes when i switch to WPA2 Enterprise. I try to connect with my user credentials to the access point, and the radius server gets the request, authenricates and sends a "Access-Accept" message back to the AP. But my laptop never gets connected completely. It just says that it is "trying to authenticate", and seems to send more access requests to the AP, and the radiusserver reponds to them with more Access-Accept, but it never works. I have tried with both a laptop running Linux Mint, and a macbook, and the same thing happens at both of them. Does anyone have an idea please? -- View this message in context: http://www.nabble.com/Problems-authenticating-with-freeRADIUS-and-LEAP-tp237... Sent from the FreeRadius - User mailing list archive at Nabble.com.
I have set up a freeradius server, which are pointed to by my Linksys WRT54GL router. Everything seems to work with LEAP authentication, such as radtest from localhost and also from my laptop (When router is running WPA2 Personal, and i can connect to the network). The problem comes when i switch to WPA2 Enterprise. I try to connect with my user credentials to the access point, and the radius server gets the request, authenricates and sends a "Access-Accept" message back to the AP.
But my laptop never gets connected completely. It just says that it is "trying to authenticate", and seems to send more access requests to the AP, and the radiusserver reponds to them with more Access-Accept, but it never works.
So, your AP is expecting something in the Access-Accept packet. Did you read AP documentation to see what it is? It's usually something like Service-Type. Ivan Kalik Kalik Informatika ISP
This is the output of radius (last lines): Sending Access-Accept of id 0 to 192.168.1.1 port 2065 Cisco-AVPair += "leap:session-key:\203\2155\330<s~z{u\024\010w\335H\216\314\300\241-^,a\273\ 276\356\371\363\322\027\3529W;" EAP-Message = 0x02030023110100189d41f088151cd22c09671bd15872552b0604864ee196acaf626f62 Message-Authenticator = 0x000000000000000000000000000 User-Name = "bob" Finished request 2. What is the service type? I don't think I can do anything more with my AP than point to the radius server IP and port. Any more ideas? Thanks! Andreas -----Ursprungligt meddelande----- Från: freeradius-users-bounces+deacarlsson=hotmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+deacarlsson=hotmail.com@lists.freeradius.or g] För Ivan Kalik Skickat: 31 May 2009 01:52 Till: FreeRadius users mailing list Ämne: Re: Problems authenticating with freeRADIUS and LEAP
I have set up a freeradius server, which are pointed to by my Linksys WRT54GL router. Everything seems to work with LEAP authentication, such as radtest from localhost and also from my laptop (When router is running WPA2 Personal, and i can connect to the network). The problem comes when i switch to WPA2 Enterprise. I try to connect with my user credentials to the access point, and the radius server gets the request, authenricates and sends a "Access-Accept" message back to the AP.
But my laptop never gets connected completely. It just says that it is "trying to authenticate", and seems to send more access requests to the AP, and the radiusserver reponds to them with more Access-Accept, but it never works.
So, your AP is expecting something in the Access-Accept packet. Did you read AP documentation to see what it is? It's usually something like Service-Type. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
smaaland wrote:
I have set up a freeradius server, which are pointed to by my Linksys WRT54GL router. Everything seems to work with LEAP authentication, such as radtest from localhost and also from my laptop (When router is running WPA2 Personal, and i can connect to the network). The problem comes when i switch to WPA2 Enterprise. I try to connect with my user credentials to the access point, and the radius server gets the request, authenricates and sends a "Access-Accept" message back to the AP.
Don't use LEAP. It's insecure. Oh, and *most* access points don't support LEAP. Use a common EAP protocol, like EAP-TTLS.
But my laptop never gets connected completely. It just says that it is "trying to authenticate", and seems to send more access requests to the AP, and the radiusserver reponds to them with more Access-Accept, but it never works.
Because the AP doesn't support LEAP. Alan DeKok.
I have worked with a lot of NASes (Nomadix, Mikrotik, Gemtek...), but never with the Linksys WRT54GL router with hotspot firmware. Could you post the download link?
Date: Sat, 30 May 2009 13:30:26 -0700 From: deacarlsson@hotmail.com To: freeradius-users@lists.freeradius.org Subject: Problems authenticating with freeRADIUS and LEAP
Hi!
I have set up a freeradius server, which are pointed to by my Linksys WRT54GL router. Everything seems to work with LEAP authentication, such as radtest from localhost and also from my laptop (When router is running WPA2 Personal, and i can connect to the network). The problem comes when i switch to WPA2 Enterprise. I try to connect with my user credentials to the access point, and the radius server gets the request, authenricates and sends a "Access-Accept" message back to the AP.
But my laptop never gets connected completely. It just says that it is "trying to authenticate", and seems to send more access requests to the AP, and the radiusserver reponds to them with more Access-Accept, but it never works.
I have tried with both a laptop running Linux Mint, and a macbook, and the same thing happens at both of them.
Does anyone have an idea please? -- View this message in context: http://www.nabble.com/Problems-authenticating-with-freeRADIUS-and-LEAP-tp237... Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ ¡Acelera con la Fórmula 1! Juega y demuestra lo que sabes con MSN Deportes http://msn.es.predictorpro.com/grand-prix/overview.aspx?season=8
participants (5)
-
Alan DeKok -
deacarlsson＠hotmail.com -
Ivan Kalik -
Santiago Balaguer García -
smaaland