WPA/RADIUS Problems

[Alan DeKok]

Loukas Kalenderidis <loukas at hb.com.au> wrote:
> I asked you questions relating to your statement in your previous  
> message and you didn't really answer them. Can you elaborate on  
> "configure users, passwords and certificates for it to work" please?  

  I'm not sure what is unclear about that.  You need a server
certificate, as documented in many of the EAP howto's.  You need at
least one user, with a "known good" password.

  Simply saying "Auth-Type := Accept" will not work.  Ever.

> Do you mean the users file needs specific configuration to work with  
> WPA-EAP?

  As in a user with a password...

> And as I said before, I was under the impression I don't  
> need certificates unless I'm using TLS, am I wrong?

  Yes, you're wrong.  PEAP *does* use TLS.  The comments in the
"eap.conf" file make this clear.

>  I'm happy to follow your advice, if you give me some that isn't
> just "configure stuff dude".

  The server comes with documentation that describes what to do, and
how to configure it.  Read "eap.conf", it points you to web pages that
desribe describe in *detail* what to do.

>    rad_check_password: Auth-Type = Accept, accepting the user

  My previous message explained that this won't work, and why.  Yet
you're not only trying it again, you're posting essentially the same
debug log as last time.  I don't see why.

  Now, you can keep trying what you're doing, which is obviously not
working.  Or, you can read the documentation that comes with the
server, and the web pages it points to.

  I'm sorry if this sounds abrupt, but I've put a lot of work into
making the server easy to use, into documenting exactly what to do,
and in answering questions on this list.  You're still arguing with me
over my answers, rather than following my directions.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog