Hi I have a network of Unifi Access Points using WPA2 Enterprise and Freeradius. We often get times when Access Points appear to just stop allow connections and a reboot will fix the issue. I have just run a packet capture when this problem is occurring and notice that the radius server replies with Access-Reject Code 3 and EAP Failure Code 4. Any advice on the best place to start looking as to what might be causing these issues? Thanks Paul Bone
On Jul 18, 2023, at 8:52 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
I have a network of Unifi Access Points using WPA2 Enterprise and Freeradius. We often get times when Access Points appear to just stop allow connections and a reboot will fix the issue.
I have just run a packet capture when this problem is occurring and notice that the radius server replies with Access-Reject Code 3 and EAP Failure Code 4.
Any advice on the best place to start looking as to what might be causing these issues?
http://wiki.freeradius.org/list-help ALL of the documentation says what to do. When you join the mailing list, you get an email telling you what to do. Where else do we need to put the documentation so that people will read it? Alan DeKok.
Most of us are stupidly busy people working on multiple devices and networks who don't necessarily have the time to go through reams of documentation - hence why we might ask quick questions on mailing lists and forums to try and save time as most often someone else has already had the problem. I believe this to be Unifi issue as it works again after a reboot, but trying to cover my bases by also asking on the Freeradius list to see if anyone else is having the issue. My question to the list was essentially - what does the EAP Failure Code 4 usually mean? If I can't get any answers to that without sending in full debugs then it will have to wait as I do not have time currently, and of course that is my issue! Paul Bone -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+paul.bone=probitas-solutions.tech@lists.freeradius.org> On Behalf Of Alan DeKok Sent: Tuesday, July 18, 2023 2:10 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: EAP Failure Code 4 On Jul 18, 2023, at 8:52 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
I have a network of Unifi Access Points using WPA2 Enterprise and Freeradius. We often get times when Access Points appear to just stop allow connections and a reboot will fix the issue.
I have just run a packet capture when this problem is occurring and notice that the radius server replies with Access-Reject Code 3 and EAP Failure Code 4.
Any advice on the best place to start looking as to what might be causing these issues?
http://wiki.freeradius.org/list-help ALL of the documentation says what to do. When you join the mailing list, you get an email telling you what to do. Where else do we need to put the documentation so that people will read it? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jul 18, 2023, at 9:26 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
Most of us are stupidly busy people working on multiple devices and networks who don't necessarily have the time to go through reams of documentation - hence why we might ask quick questions on mailing lists and forums to try and save time as most often someone else has already had the problem.
So you don't have time to work on the problem, but you expect us to work on it for you? With all due respect, I decline.
I believe this to be Unifi issue as it works again after a reboot, but trying to cover my bases by also asking on the Freeradius list to see if anyone else is having the issue.
My question to the list was essentially - what does the EAP Failure Code 4 usually mean? If I can't get any answers to that without sending in full debugs then it will have to wait as I do not have time currently, and of course that is my issue!
If only there was some kind of "web search tool" you could use. Oh well. I guess it's a mystery. Alan DeKok.
That is a particularly unnecessary patronising response! I'm not asking anyone to work on a problem for me, I'm asking if anyone has had it before. Paul Bone -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+paul.bone=probitas-solutions.tech@lists.freeradius.org> On Behalf Of Alan DeKok Sent: Tuesday, July 18, 2023 2:41 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: EAP Failure Code 4 On Jul 18, 2023, at 9:26 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
Most of us are stupidly busy people working on multiple devices and networks who don't necessarily have the time to go through reams of documentation - hence why we might ask quick questions on mailing lists and forums to try and save time as most often someone else has already had the problem.
So you don't have time to work on the problem, but you expect us to work on it for you? With all due respect, I decline.
I believe this to be Unifi issue as it works again after a reboot, but trying to cover my bases by also asking on the Freeradius list to see if anyone else is having the issue.
My question to the list was essentially - what does the EAP Failure Code 4 usually mean? If I can't get any answers to that without sending in full debugs then it will have to wait as I do not have time currently, and of course that is my issue!
If only there was some kind of "web search tool" you could use. Oh well. I guess it's a mystery. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jul 18, 2023, at 9:45 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
That is a particularly unnecessary patronising response!
The list code of conduct says that the only subject on the list is FreeRADIUS. Personal attacks are off topic. Your choices are: a) keep complaining and get banned from the list b) read the documentation and follow it, then get your problem solved.
I'm not asking anyone to work on a problem for me, I'm asking if anyone has had it before.
Yes. Everyone else is willing to do some work to solve their problems. No one on the list is willing to dot your work for you for free, when you make it clear that you're not wiling to put any effort into it. Alan DeKok.
A quick search with google into the eap codes would tell you that code 4 means "failure". Code 3 is success, code 4 is failure. It always ends with either code. Thus, it's really impossible to give any more pointers with the information you gave... -Gerald On 18.07.23 15:45, Paul Bone wrote:
That is a particularly unnecessary patronising response!
I'm not asking anyone to work on a problem for me, I'm asking if anyone has had it before.
Paul Bone
-----Original Message----- From: Freeradius-Users <freeradius-users-bounces+paul.bone=probitas-solutions.tech@lists.freeradius.org> On Behalf Of Alan DeKok Sent: Tuesday, July 18, 2023 2:41 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: EAP Failure Code 4
On Jul 18, 2023, at 9:26 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
Most of us are stupidly busy people working on multiple devices and networks who don't necessarily have the time to go through reams of documentation - hence why we might ask quick questions on mailing lists and forums to try and save time as most often someone else has already had the problem.
So you don't have time to work on the problem, but you expect us to work on it for you?
With all due respect, I decline.
I believe this to be Unifi issue as it works again after a reboot, but trying to cover my bases by also asking on the Freeradius list to see if anyone else is having the issue.
My question to the list was essentially - what does the EAP Failure Code 4 usually mean? If I can't get any answers to that without sending in full debugs then it will have to wait as I do not have time currently, and of course that is my issue!
If only there was some kind of "web search tool" you could use. Oh well. I guess it's a mystery.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks Gerald, I was just hoping someone might have already had a similar issue with Unifi APs as it is very hard to get debugging logs when customers are shouting at 1st line support that their WiFi is not working and they don’t want to wait for us to gather info - they want it rebooted and back up ASAP. I asked here as ubiquiti support have not been the greatest with us so far. I obviously didn’t word my original request correctly. Paul Sent from Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Freeradius-Users <freeradius-users-bounces+paul.bone=probitas-solutions.tech@lists.freeradius.org> on behalf of Gerald Vogt <vogt@spamcop.net> Sent: Tuesday, July 18, 2023 3:02:54 PM To: freeradius-users@lists.freeradius.org <freeradius-users@lists.freeradius.org> Subject: Re: EAP Failure Code 4 A quick search with google into the eap codes would tell you that code 4 means "failure". Code 3 is success, code 4 is failure. It always ends with either code. Thus, it's really impossible to give any more pointers with the information you gave... -Gerald On 18.07.23 15:45, Paul Bone wrote:
That is a particularly unnecessary patronising response!
I'm not asking anyone to work on a problem for me, I'm asking if anyone has had it before.
Paul Bone
-----Original Message----- From: Freeradius-Users <freeradius-users-bounces+paul.bone=probitas-solutions.tech@lists.freeradius.org> On Behalf Of Alan DeKok Sent: Tuesday, July 18, 2023 2:41 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: EAP Failure Code 4
On Jul 18, 2023, at 9:26 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
Most of us are stupidly busy people working on multiple devices and networks who don't necessarily have the time to go through reams of documentation - hence why we might ask quick questions on mailing lists and forums to try and save time as most often someone else has already had the problem.
So you don't have time to work on the problem, but you expect us to work on it for you?
With all due respect, I decline.
I believe this to be Unifi issue as it works again after a reboot, but trying to cover my bases by also asking on the Freeradius list to see if anyone else is having the issue.
My question to the list was essentially - what does the EAP Failure Code 4 usually mean? If I can't get any answers to that without sending in full debugs then it will have to wait as I do not have time currently, and of course that is my issue!
If only there was some kind of "web search tool" you could use. Oh well. I guess it's a mystery.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jul 18, 2023, at 11:00 AM, Paul Bone <paul.bone@probitas-solutions.tech> wrote:
Thanks Gerald, I was just hoping someone might have already had a similar issue with Unifi APs as it is very hard to get debugging logs when customers are shouting at 1st line support that their WiFi is not working and they don’t want to wait for us to gather info - they want it rebooted and back up ASAP.
I asked here as ubiquiti support have not been the greatest with us so far.
I obviously didn’t word my original request correctly.
If you want to know WHY FreeFADIUS is sending a reject, then run it in debug mode. There is NO OTHER WAY to understand the problem. ALL of the documentation says this. Including the message you get when you join the list. We've spent decades writing documentation, only for some people to go "Nah, I'm not going to read that". And then complaining loudly about being asked to read the docs. This is entirely inappropriate in a public forum. And I do have to point out the inherent confusion in asking "What does failure mean", and then being happy when the answer is "failure means failure". Alan DeKok.
participants (3)
-
Alan DeKok -
Gerald Vogt -
Paul Bone