Freeradius + Mysql + PEAP Authentication
Hi all, I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected by freeradius. I saw that both of PEAP and EAP-TTLS used TLS and i thought that there was no need to make big configuration to migrate from EAP-TTLS to PEAP. Can someone help me, please? I use freeradius 2.1.10 and here is my eap.conf configuration: eap { default_eap_type = ttls timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 4096 md5 { } leap { } gtc { auth_type = PAP } tls { certdir = ${confdir}/certs cadir = ${confdir}/certs private_key_password = madaoil452 private_key_file = ${certdir}/server.key certificate_file = ${certdir}/server.pem CA_file = ${cadir}/ca.pem dh_file = ${certdir}/dh random_file = /dev/urandom CA_path = ${cadir} cipher_list = "DEFAULT" cache { enable = no max_entries = 255 } verify { } } ttls { default_eap_type = md5 copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" } peap { default_eap_type = mschapv2 copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" } mschapv2 { } } thx --
Hi,
I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected
how are you testing this? what client are you using? your default eap type is TTLS so if you send the server a PEAP request, the server will NAK it and ask for PEAP - the client needs to deal with this.... windows etc can.. alan
Sorry, I was wrong. I have sent the eap.conf for my eap-ttls authentication. But in fact , i thought that i just needed to change the default_eap_type to peap and that's all. I have configured an Access Point to use radius authentication and i have tested the eap-ttls on my linux machine (debian squeeze) and on a windows xp machine, and it worked. Then when i changed the authentication to use peap, i got the problem. I launched the server in debug mode ( freeradius -X ) and all that i can see is that all my requests are rejected. On 24/01/2012 15:53, Alan Buxey wrote:
Hi,
I have configured a freeradius + mysql server and i would like to use the PEAP authentication. I have tried the EAP-TTLS and it worked fine, but when i have tested the PEAP authentication all my requests were rejected
how are you testing this? what client are you using? your default eap type is TTLS so if you send the server a PEAP request, the server will NAK it and ask for PEAP - the client needs to deal with this.... windows etc can..
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Hi,
when i changed the authentication to use peap, i got the problem. I launched the server in debug mode ( freeradius -X ) and all that i can see is that all my requests are rejected.
i'm sorry, I've lost my ability to read minds. It would actually be quite handy if you, for example, included the output of 'radiusd -X' when this error occurs. alan
participants (2)
-
Alan Buxey -
RAZAFIMBELO Faliharinohatra Rindra