Stuck on EAP-challenge remote client version 3.0.15
Hello, Finally managed to get the full installation running, and got a local user test to pass the system. This works very smoothly with user-identity and user-password. The commands that work are the following: radtest alice alice localhost 0 testing123 radtest -t eap-md5 alice alice localhost 0 testing123 However trying to run this from a remote client passes the authorize, however the autehnticate seems to get stuck in a challenge <> request loop. Pastebin of radiusd -X is available here: https://pastebin.com/ePFCQhtF First ones are me remotely trying (with the built in test on the client AP, and on my phone), last one is a straightforward radtest localhost. Note that this same setup was used on freeradius 2.x in a previous build and was confirmed to be working. BR, Mathieu
On Wed, 2017-07-19 at 17:26 +0300, Mathieu Devos wrote:
However trying to run this from a remote client passes the authorize, however the autehnticate seems to get stuck in a challenge <> request loop.
It hasn't stuck in a loop, just the client isn't responding to the challenge. The first three are EAP identity responses and no more. Check the logs on the client or the NAS to find out why a) the challenge isn't getting back to the client or b) the client isn't responding.
Pastebin of radiusd -X is available here: https://pastebin.com/ePFCQhtF
It's fine to paste it directly inline to the list. Matthew
would guess that your client doesnt have the required CA of the RADIUS server installed alan On 19 July 2017 at 15:36, Matthew Newton <mcn@freeradius.org> wrote:
On Wed, 2017-07-19 at 17:26 +0300, Mathieu Devos wrote:
However trying to run this from a remote client passes the authorize, however the autehnticate seems to get stuck in a challenge <> request loop.
It hasn't stuck in a loop, just the client isn't responding to the challenge. The first three are EAP identity responses and no more.
Check the logs on the client or the NAS to find out why a) the challenge isn't getting back to the client or b) the client isn't responding.
Pastebin of radiusd -X is available here: https://pastebin.com/ePFCQhtF
It's fine to paste it directly inline to the list.
Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
Mathieu Devos -
Matthew Newton