EAP-TTLS w/MS-CHAPv2

[Alan DeKok]

Kwok Sianbin wrote:
...
> #radtest MarsNet Mars123 localhost 0 testing123
>  User-Name = "MarsNet"
...
> if I change the configuration in radiusd.conf to bind to particular IP
> address (eth0) then about radtest failed to Accept.

  Because you're sending packets to localhost?  Do you know what
different network interfaces are?

...
> ++[eap] returns handled
>         Reply-Message = "Hello, MarsNet"
>         EAP-Message = 0x010200060d20
>         Message-Authenticator = 0x00000000000000000000000000000000
>         State = 0x58961ab6589417883d2fb3d577435665
> Finished request 2.
> Going to the next request
> Waking up in 4.9 seconds.

  This is in the FAQ.  You are using a Microsoft client, and the server
certificate doesn't have the correct OID's.

  Use the certificate generation scripts that come with the server.

  Alan DeKok.