EAP/TLS connection problem..

Johan Nyman Johan at mediavisiongroup.se
Tue Apr 29 16:30:41 CEST 2008


Hello All,

 


I can seem to connect to the radius server, this is the error code: 

 

Anyone has a clue on what It could be?

........................................

 

Ready to process requests.

        User-Name = "Linux1"

        NAS-IP-Address = 10.0.0.197

        Called-Station-Id = "00-20-a2-64-c3-b1:devnet"

        Calling-Station-Id = "00-0e-33-fe-3a-36;devnet"

        NAS-Identifier = "MVG-1"

        Framed-MTU = 1400

        NAS-Port-Type = Wireless-802.11

        EAP-Message = 0x020a000b014c696e757831

        Message-Authenticator = 0x68a4345956d14cfdd678854f4c955ac7

+- entering group authorize

++[preprocess] returns ok

++[chap] returns noop

++[mschap] returns noop

    rlm_realm: No '@' in User-Name = "Linux1", looking up realm NULL

    rlm_realm: No such realm "NULL"

++[suffix] returns noop

  rlm_eap: EAP packet type response id 10 length 11

  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation

++[eap] returns updated

++[unix] returns notfound

    users: Matched entry Linux1 at line 219

        expand: Hello, %{User-Name} -> Hello, Linux1

++[files] returns ok

++[expiration] returns noop

++[logintime] returns noop

rlm_pap: WARNING! No "known good" password found for the user.
Authentication may fail because of this.

++[pap] returns noop

  rad_check_password:  Found Auth-Type EAP

auth: type "EAP"

+- entering group authenticate

  rlm_eap: EAP Identity

  rlm_eap: processing type tls

 rlm_eap_tls: Requiring client certificate

  rlm_eap_tls: Initiate

  rlm_eap_tls: Start returned 1

++[eap] returns handled

        Reply-Message = "Hello, Linux1"

        EAP-Message = 0x010b00060d20

        Message-Authenticator = 0x00000000000000000000000000000000

        State = 0x84a6103884ad1d7df7f1c190d83cc59f

Finished request 16.

 

........................................

 

 

The wpa_supplican.conf loks like this:

 

 

network={

  ssid="devnet"

  scan_ssid=1

  key_mgmt=WPA-EAP

  pairwise=CCMP TKIP

  group=CCMP TKIP

  auth_alg=OPEN

  proto=RSN

  eap=TLS

  identity="Linux1"

  ca_cert="/Certs/ca.pem"

  client_cert="/Certs/client.pem"

  private_key="/Certs/client.pem"

  private_key_passwd="secret"

}

 

 

........................................

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080429/b645ff82/attachment.html>


More information about the Freeradius-Users mailing list