eap don't work

[pelusa vali]

hi everybody, i have problems using freeradius 1.0.5, i cann't get it works 
as i hope.  well i installed freeradius in my server and tried to see if 
clients can authenticate, so first tried test over server, my ip is 
192.168.10.1, i generate certificates to use TLS.

this is my users file:

"mec01" 	Auth-Type := EAP

and clients.conf file:

client 192.168.10.1 {
        secret         = clue
        shortname      = www.kill.com

}

i tried put in shortname localhost too, but nothing happen

eap.conf file:

tls {
private_key_file = ${raddbdir}/certs/www.kill.com.pem
certificate_file = ${raddbdir}/certs/www.kill.com.pem
CA_file = ${raddbdir}/certs/demoCA/root.pem
dh_file = ${raddbdir}/certs/dh
random_file = ${raddbdir}/certs/random
fragment_size = 1024
...
}

so, i do this:

www:~# radtest mec01 clue www.kill.com 0 clue
Sending Access-Request of id 49 to 192.168.10.1 port 1812
        User-Name = "mec01"
        User-Password = "clue"
        NAS-IP-Address = 255.255.255.255
        NAS-Port = 0
rad_recv: Access-Reject packet from host 192.168.10.1:1812, id=49, length=20

in messages from radius i see this:

rad_recv: Access-Request packet from host 192.168.10.1:32768, id=49, 
length=62        User-Name = "mec01"
        User-Password = "clue"
        NAS-IP-Address = 255.255.255.255
        NAS-Port = 0
rad_rmspace_pair:  User-Password now 'clue'
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
  modcall[authorize]: module "chap" returns noop for request 1
  modcall[authorize]: module "mschap" returns noop for request 1
    rlm_realm: No '@' in User-Name = "mec01", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 1
  rlm_eap: No EAP-Message, not doing EAP
  modcall[authorize]: module "eap" returns noop for request 1
    users: Matched entry mec01 at line 97
  modcall[authorize]: module "files" returns ok for request 1
modcall: leaving group authorize (returns ok) for request 1
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 1
rlm_eap: EAP-Message not found
rlm_eap: Malformed EAP Message
  modcall[authenticate]: module "eap" returns fail for request 1
modcall: leaving group authenticate (returns fail) for request 1
auth: Failed to validate the user.
Login incorrect: [mec01/clue] (from client localhost port 0)
rad_lowerpair:  User-Name now 'mec01'
rad_rmspace_pair:  User-Name now 'mec01'
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
  modcall[authorize]: module "chap" returns noop for request 1
  modcall[authorize]: module "mschap" returns noop for request 1
    rlm_realm: No '@' in User-Name = "mec01", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 1
  rlm_eap: No EAP-Message, not doing EAP
  modcall[authorize]: module "eap" returns noop for request 1
    users: Matched entry mec01 at line 97
  modcall[authorize]: module "files" returns ok for request 1
modcall: leaving group authorize (returns ok) for request 1
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 1
rlm_eap: EAP-Message not found
rlm_eap: Malformed EAP Message
  modcall[authenticate]: module "eap" returns fail for request 1
modcall: leaving group authenticate (returns fail) for request 1
auth: Failed to validate the user.
Login incorrect: [mec01/clue] (from client localhost port 0)
Delaying request 1 for 1 seconds
Finished request 1

so i reviewed keys and shared secret and they are correct in server, client 
and CA, i even generate them again.  i see radius says: rlm_eap:Malformed 
EAP Message, so may be i install freeradius in a bad way? or what is 
happening? why server don't authenticate users?

thanks in advance.

_________________________________________________________________
MSN Amor: busca tu ½ naranja http://latam.msn.com/amor/