Simultaneous-Use and PEAP doesn't work correctly.

Marcotte, Tyler tmarcott at enterasys.com
Wed Oct 10 17:06:37 CEST 2007


Hi, You said it's a bug in 1.x. I just tried the latest code in the cvs
repository (2.0 I believe) and I still get the same problem. After the
PEAP failure, it sends an Access-Challenge rather than an Access-Reject.


Am I missing anything else here?

Thank you in advance.

Regards,

-Tyler

> > Marcotte, Tyler wrote:
> > > I've configured Simultaneous-Use on my freeradius server and have
> it
> > configured to use PEAP as an authentication method. Users can
> authenticate
> > perfectly well, however when the Simultaneous-Use limit is exceeded,
> it
> > only half works. The user is not allowed on, the PEAP message is set
> to
> > FAILURE, but no Access-Reject is ever sent. I have also tried with
> md5
> > authentication and it works as expected. Unfortunately, md5
> authentication
> > is not an option. What I really need is for that Reject to be sent
> back
> > after the user logs on too many times.
> >
> >   It's a bug in 1.x.  Set "reject_delay = 0".
> >
> >   Alan DeKok
> 
> "reject_delay = 0" is already set. If I check out the version from cvs
> will it have this problem fixed?
> 
> -Tyler
> 
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list