Problems getting eap-mschapv2 working.

[Ian Walker]

Been trying to get eap working with peap/mschapv2 but it doesn't seem to
work.

This is my radiusd.conf file:

 prefix = /usr/local
exec_prefix = ${prefix}
sysconfdir = ${prefix}/etc
localstatedir = /var/run
sbindir = ${exec_prefix}/sbin
logdir = /var/log
raddbdir = ${sysconfdir}/raddb
radacctdir = ${logdir}/radacct
confdir = ${raddbdir}
run_dir = ${localstatedir}/radiusd
log_file = ${logdir}/radius.log
libdir = ${exec_prefix}/lib
pidfile = ${run_dir}/radiusd.pid
max_request_time = 30
delete_blocked_requests = no
cleanup_delay = 5
max_requests = 1024
bind_address = *
port = 0
hostname_lookups = no
allow_core_dumps = no
regular_expressions	= yes
extended_expressions	= yes
log_stripped_names = no
log_auth = no
log_auth_badpass = no
log_auth_goodpass = no
usercollide = no
lower_user = no
lower_pass = no
nospace_user = no
nospace_pass = no
checkrad = ${sbindir}/checkrad
security {
	max_attributes = 200
	reject_delay = 1
	status_server = no
}

$INCLUDE  ${confdir}/clients.conf

thread pool {
	start_servers = 5
	max_servers = 32
	min_spare_servers = 3
	max_spare_servers = 10
	max_requests_per_server = 0
}

modules {
	eap {
		default_eap_type = md5
		timer_expire = 60
		md5 {
		}
		tls {
			private_key_password =
			private_key_file = /usr/local/etc/raddb/new.cert.key
			certificate_file = /usr/local/etc/raddb/new.cert.cert
			CA_file = /usr/local/etc/raddb/cacert.pem
			dh_file = /dev/urandom
			random_file = /dev/urandom
			fragment_size = 1024
			include_length = yes
		}
		peap {
			default_eap_type = mschapv2
			mschapv2 {
				authtype = mschapv2
				use_mppe = yes
				require_encryption = yes
				require_strong = yes
			}
		}
	}

	files {
		usersfile = ${confdir}/users
		compat = no
	}
	exec cerb {
		wait = yes
		program = "/usr/local/bin/cerbauth -e freeradius"
		input_pairs = request
		output_pairs = reply
	}
	preprocess {
	}
}

authorize {
	preprocess
	eap
	files
}

authenticate {

	Auth-Type eap {
		eap
	}

	Auth-Type CERB {
		cerb
	}
}


as you can see, I'm currently working with md5 and this works perfectly
well.  But when I set the client and configure the server to default for
peap/tls, then it fails saying:

"No such EAP type mschapv2"

I believe if I can get passed this, that my system will authenticate with
peap/mschapv2 successfully.

Hope you can help.

Regards


Ian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060901/c14c9f34/attachment.html>