Hi Members, I am trying to setup FR with Windows Active Directory. I guess my setup is working as I am able to do mschap authentication using radtest command, but getting below logs with unsuccessful login when trying to authenticate via peapv0 via Windows 7 machine. I am using AD CA signed certificate for TLS, but seems that some certificate problem is appearing in TLS connection. Please let me know if I am missing anything here, +++++++++++++++++++++++++++++++++++++++++ rad_recv: Access-Request packet from host 192.168.32.99 port 20001, id=68, length=170 NAS-Port-Id = "AP12/2" Calling-Station-Id = "xxxxxxxxxxx" Called-Station-Id = "xxxxxxxxxxxx" Service-Type = Framed-User User-Name = "test\\user1" NAS-Port = 62279 State = 0xe13e110ce53808ac11ae5d07bbfe47cd EAP-Message = 0x020600061900 NAS-Port-Type = Wireless-802.11 NAS-IP-Address = 192.168.32.99 NAS-Identifier = "Juniper" Message-Authenticator = 0x118db9c6453dc9c952b65157e6d1a70b # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "test\user1", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 6 length 6 [eap] Continuing tunnel setup. ++[eap] returns ok Found Auth-Type = EAP # Executing group from file /etc/raddb/sites-enabled/default +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/peap [eap] processing type peap [peap] processing EAP-TLS [peap] Received TLS ACK [peap] ACK handshake fragment handler [peap] eaptls_verify returned 1 [peap] eaptls_process returned 13 [peap] EAPTLS_HANDLED ++[eap] returns handled Sending Access-Challenge of id 68 to 192.168.32.99 port 20001 EAP-Message = 0x010700061900 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe13e110ce43908ac11ae5d07bbfe47cd Finished request 29. Going to the next request Waking up in 4.9 seconds. Cleaning up request 24 ID 63 with timestamp +153 Cleaning up request 25 ID 64 with timestamp +153 Cleaning up request 26 ID 65 with timestamp +153 Cleaning up request 27 ID 66 with timestamp +153 Cleaning up request 28 ID 67 with timestamp +153 Cleaning up request 29 ID 68 with timestamp +153 WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING: !! EAP session for state 0xe13e110ce43908ac did not finish! WARNING: !! Please read http://wiki.freeradius.org/Certificate_Compatibility WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Ready to process requests. ++++++++++++++++++++++++++++++++++++++++++++++++++++ -- Regards, Vishesh Kumar