Hi, I've modified the eap.conf, clients.conf, and users respectfully but am getting the below error when started radius: Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: No EAP type configured, module cannot do anything. radiusd.conf[10]: eap: Module instantiation failed. radiusd.conf[1939] Unknown module "eap". radiusd.conf[1886] Failed to parse authenticate section. The following are the config's I made. Please let me know if you see anything that needs to change just to get radius start. eap.conf default_eap_type =tls tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.pem certificate_file = ${raddbdir}/certs/cert-srv.pem # Trusted Root CA list CA_file = ${raddbdir}/certs/demoCA/cacert.pem dh_file = ${raddbdir}/certs/dh random_file = ${raddbdir}/certs/random clients.conf client 148.85.0.0/16 { # # The shared secret use to "encrypt" and "sign" packets between # the NAS and FreeRADIUS. You MUST change this secret from the # default, otherwise it's not a secret any more! # # The secret can be any string, up to 31 characters in length. # secret = XXXXXXX # # The short name is used as an alias for the fully qualified # domain name, or the IP address. # shortname = WAPS users DEFAULT Auth-Type :=EAP Tunnel-Type = "VLAN", Tunnel-Medium-Type = "IEEE-802", Tunnel-Private-Group-ID = "300", Thanks, Brian
Brian Ertel wrote:
I've modified the eap.conf, clients.conf, and users respectfully but am getting the below error when started radius:
You have edited *too much*.
Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: No EAP type configured, module cannot do anything.
Because you deleted almost everything from the eap.conf file. Why?
The following are the config's I made. Please let me know if you see anything that needs to change just to get radius start.
eap.conf
default_eap_type =tls tls {
This is wrong. See the *default* eap.conf for why.
DEFAULT Auth-Type :=EAP
The text you deleted in eap.conf says that you should NOT set Auth-Type. Start with the default eap.conf, and make MINOR edits. Read "man radiusd.conf" to see how the configuration file syntax works. Alan DeKok.
participants (2)
-
Alan DeKok -
Brian Ertel