Authentication failed

Stefan Winter stefan.winter at restena.lu
Thu Jul 12 09:52:24 CEST 2007


Hello,

> rad_recv: Access-Request packet from host 172.24.230.15:3324, id=10,
> length=113 NAS-IP-Address = 172.24.230.15
>         NAS-Port-Type = Wireless-802.11
>         NAS-Port = 1
>         Framed-MTU = 1400
>         User-Name = ""
>         Calling-Station-Id = "00118865b6e5"
>         Called-Station-Id = "0011885ae5b0"
>         NAS-Identifier = "RoamAbout AP"
>         EAP-Message = 0x0201000501
>         Message-Authenticator = 0xf6e4825749e3bc4b04a99bc11c37fbba
[...]
> modcall: entering group authenticate for request 4
> rlm_eap: UserIdentity Unknown
> rlm_eap: Identity Unknown, authentication failed
>   rlm_eap: Failed in handler
>   modcall[authenticate]: module "eap" returns invalid for request 4
> modcall: group authenticate returns invalid for request 4
> auth: Failed to validate the user.

Your NAS is sending an empty User-Name. That's fatal, because then the 
FreeRADIUS server has no clue which user it should authenticate. Check the 
settings on your supplicant - enter a user name.

> Is it necessarily to attach the system message log?
> Tell me if you need more info.

Most of the times, radiusd -X is sufficient.

Stefan

-- 
Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: stefan.winter at restena.lu     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070712/a60e3a9b/attachment.pgp>


More information about the Freeradius-Users mailing list