No EAP Start, assuming it's an on-going EAP conversation
Johan Nyman
Johan at mediavisiongroup.se
Sat Apr 12 23:11:22 CEST 2008
Hello,
- I will look into that book you recommended Alan - "OReilly book
on OpenSSLL" thanks!
- But for right now do you have any clues on what I could/do test,
look at to fix this:
- I have a Linux client trying to connect to the Free Radius, and
on the client side I am getting this error message: "CTRL-EVENT-EAP-FAILURE
EAP authentication failed"
- And on the Free radius console I have this information is shown:
Called-Station-Id = "00-20-a6-64-c3-b1:MVG-Personal"
Calling-Station-Id = "00-0f-cb-f9-3b-f9;MVG-Personal"
NAS-Identifier = "MVG-1"
State = 0x73e4f46973e6f0393091c54faaf880fd
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x020200060315
Message-Authenticator = 0x330b306447495e1a49cd5c7cfe5c1c6d
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
rlm_realm: No '@' in User-Name = "easy", looking up realm NULL
rlm_realm: No such realm "NULL"
++[suffix] returns noop
rlm_eap: EAP packet type response id 2 length 6
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
users: Matched entry easy at line 90
expand: Hello, %{User-Name} -> Hello, easy
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
rlm_pap: Found existing Auth-Type, not changing it.
++[pap] returns noop
rad_check_password: Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
rlm_eap: Request found, released from the list
rlm_eap: EAP NAK
rlm_eap: EAP-NAK asked for EAP-Type/ttls
rlm_eap: processing type tls
rlm_eap_tls: Initiate
rlm_eap_tls: Start returned 1
++[eap] returns handled
Reply-Message = "Hello, easy"
EAP-Message = 0x010300061520
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x73e4f46972e7e1393091c54faaf880fd
Finished request 1.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 0 ID 153 with timestamp +279 Cleaning up request 1 ID
154 with timestamp +279 Ready to process requests.
- And the client don't get/receive an IP address, guessing it has something
to do with EAP authentication "No EAP Start".
Thanks for help,
Best regards,
Johan Nyman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080412/1fd30fa5/attachment.html>
More information about the Freeradius-Users
mailing list