Problems With EAP

Anuj Tripathi anujt at it.iitb.ac.in
Wed Feb 21 13:44:16 CET 2007


It still gives the same problem.
Do i need to make some changes in eap.conf ?
What are the minimal changes required for using Freeradius for PEAP 
authentication ?

Following is the response that i am getting :

rad_recv: Access-Request packet from host 10.129.20.111:3591, id=0, 
length=169
        Message-Authenticator = 0xfe4a60518e04b51d6b38d7fedf1aaea0
        Service-Type = Framed-User
        User-Name = "steve"
        Framed-MTU = 1488
        Called-Station-Id = "00-18-F8-64-80-D9:ANUJ"
        Calling-Station-Id = "00-17-9A-D1-9F-B7"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = 0x0200000a017374657665
        NAS-IP-Address = 10.129.20.111
        NAS-Port = 9
        NAS-Port-Id = "STA port # 9"
rlm_eap_md5: Issuing Challenge
Sending Access-Challenge of id 0 to 10.129.20.111 port 3591
        Service-Type = Framed-User
        Framed-Protocol = PPP
        EAP-Message = 0x01010016041033d59fe0ac35054f1a2955533d1e3e9a
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x76a720bea474bc7d81c3b354d59c6153
rad_recv: Access-Request packet from host 10.129.20.111:3591, id=1, 
length=183
        Message-Authenticator = 0x4ddde4cd8366b803d83f50b4a49b3848
        Service-Type = Framed-User
        User-Name = "steve"
        Framed-MTU = 1488
        State = 0x76a720bea474bc7d81c3b354d59c6153
        Called-Station-Id = "00-18-F8-64-80-D9:ANUJ"
        Calling-Station-Id = "00-17-9A-D1-9F-B7"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = 0x020100060319
        NAS-IP-Address = 10.129.20.111
        NAS-Port = 9
        NAS-Port-Id = "STA port # 9"
Login incorrect: [steve/<no User-Password attribute>] (from client 
localhost port 9 cli 00-17-9A-D1-9F-B7)
rad_recv: Access-Request packet from host 10.129.20.111:3591, id=1, 
length=183
Sending Access-Reject of id 1 to 10.129.20.111 port 3591
        EAP-Message = 0x04010004
        Message-Authenticator = 0x00000000000000000000000000000000


Password is visible no where. I am not getting any response from 
access-challenge it seems. Any ideas what cud be wrong ?

-Anuj




Alan DeKok wrote:
> Anuj Tripathi wrote:
>   
>> I am a newbie to freeradius. I am trying to use freeradius as an 
>> authentication server along with a WRT54G Linksys (Cisco) access point.
>>
>> On the client side i have a windows machine where i have enabled PEAP 
>> authentication, through which it asks me for user name and password.
>>     
> ...
>   
>> My Client file reads :
>>
>> steve   Auth-Type := Local, User-Password == "testing"
>>         Service-Type = Framed-User,
>>         Framed-Protocol = PPP
>>     
>
>   Don't set Auth-Type.
>
>   
>> Am I missing out on something ? Kindly help me with this as soon as 
>> possible. Its a little urgent.
>>     
>
>   Use:
>
> steve User-Password := "testing"
>
>   Or, if you're using 1.1.4:
>
> steve	Cleartext-Password := "testing"
>
>
>   And nothing else.
>
>   Alan DeKok.
> --
>   http://deployingradius.com       - The web site of the book
>   http://deployingradius.com/blog/ - The blog
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>   




More information about the Freeradius-Users mailing list