Problem with EAP/MD5 behind proxy

Josh Howlett J.Howlett at ukerna.ac.uk
Thu Dec 7 12:28:31 CET 2006


You're stripping the realm at the proxy; add "nostrip" to the realm
stanza defined in realms.conf for the server you're proxying to.

Josh. 

> -----Original Message-----
> From: 
> freeradius-users-bounces+j.howlett=ukerna.ac.uk at lists.freeradi
> us.org 
> [mailto:freeradius-users-bounces+j.howlett=ukerna.ac.uk at lists.
> freeradius.org] On Behalf Of Hans Bornemann
> Sent: 07 December 2006 10:57
> To: freeradius-users at lists.freeradius.org
> Subject: Problem with EAP/MD5 behind proxy
> 
> Hi,
> 
> I run into this problem:
> 
> Config:
> 
> 802.1x client (Windows XP with 802.1x / md5 ) --> freeradius-proxy -->
> freeradius-server
> 
> Same prg-version on both server (1.1.0)
> same radius.conf
> same users file
> 
> if i try to authenticate against the proxy without realm, 
> everything ist
> o.k.
> 
> if i try this with a realm the second radius-server shows this error:
> 
> rlm_eap: Identity does not match User-Name, setting from EAP Identity
> rlm_eap: Failed in handler
> 
> 
> any ideas?
> 
> Hans
> 
> 
> -- 
> Hans Bornemann
> Universitaet Dortmund - Hochschulrechenzentrum
> Tel. ++49 231 755 2132  Fax. ++49 231 755 2731
> 
> - 
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
> 




More information about the Freeradius-Users mailing list