EAP-TTLS and PEAP auth problem ... sorry!!
Gandalf the Gray
gtheg1 at yahoo.com
Mon Jul 4 13:22:41 CEST 2005
I forgot to explain the real problem!
I cannot authenticate any user, try to connect to my
network through a supplicant, both from Windows and
from WPA-supplicant under Linux.
It seems no EAP-challenge is really going on.
this is the output from tre radius server after a try
made by AEGIS client under windows XP, with PEAP
MSCHAPv2.
rad_recv: Access-Request packet from host
192.168.127.36:21646, id=105, length=131
User-Name = "attoo"
Framed-MTU = 1400
Called-Station-Id = "00-12-D9-B3-26-90"
Calling-Station-Id = "00-0C-30-28-A6-65"
Message-Authenticator =
0xd58f44466d3cc004486c04c445cfc4e7
EAP-Message = 0x0202000a016174746f6f
NAS-Port-Type = Wireless-802.11
NAS-Port = 507
Service-Type = Framed-User
NAS-IP-Address = 192.168.127.36
NAS-Identifier = "appi"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 251
modcall[authorize]: module "preprocess" returns ok
for request 251
modcall[authorize]: module "mschap" returns noop for
request 251
rlm_realm: No '@' in User-Name = "attoo", skipping
NULL due to config.
modcall[authorize]: module "suffix" returns noop for
request 251
rlm_eap: EAP packet type response id 2 length 10
rlm_eap: No EAP Start, assuming it's an on-going EAP
conversation
modcall[authorize]: module "eap" returns updated for
request 251
users: Matched entry DEFAULT at line 152
modcall[authorize]: module "files" returns ok for
request 251
modcall: group authorize returns updated for request
251
rad_check_password: Found Auth-Type EAP
auth: type "EAP"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 251
rlm_eap: EAP Identity
rlm_eap: processing type tls
rlm_eap_tls: Initiate
rlm_eap_tls: Start returned 1
modcall[authenticate]: module "eap" returns handled
for request 251
modcall: group authenticate returns handled for
request 251
Sending Access-Challenge of id 105 to
192.168.127.36:21646
EAP-Message = 0x010300061920
Message-Authenticator =
0x00000000000000000000000000000000
State = 0xfb61d0352bd2bf83c854f36b74c91b5c
Finished request 251
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Request packet from host
192.168.127.36:21646, id=105, length=131
Sending duplicate reply to client appi:21646 - ID: 105
Re-sending Access-Challenge of id 105 to
192.168.127.36:21646
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Cleaning up request 251 ID 105 with timestamp 42c9343a
One more time, thank you very much for your help!!
Gtheg
____________________________________________________
Yahoo! Sports
Rekindle the Rivalries. Sign up for Fantasy Football
http://football.fantasysports.yahoo.com
More information about the Freeradius-Users
mailing list