problems with authorization PEAP - EAP-MSCHAPv2  clients
    Madwifi Wireless 
    madwifi at vermark.com
       
    Mon Oct 27 18:27:55 CET 2008
    
    
  
I am not an expert on this but I think here is the problem.  Under *eap* 
you have this:
	######## eap #######
	eap {
		default_eap_type = md5
		timer_expire     = 60
		ignore_unknown_eap_types = no
		cisco_accounting_username_bug = no
I think you want to change it to:
	######## eap #######
	eap {
		default_eap_type = *mschapv2*
		timer_expire     = 60
		ignore_unknown_eap_types = no
		cisco_accounting_username_bug = no
That seem to work for me.  Give it a try. I have test FR 2.1.1 with that 
configuration. Client is Win XP SP3
Lukas Lisa wrote:
> Hello,
> I would like to authorize windows clients access to 3com Baseline
> Switch 2948 SFP against FreeRADIUS server 2.0.5.
>
> Windows are cofigured to use PEAP - EAP-MSCHAPv2.
> Server certificate was created with bootstrap script (xpextensions
> are included).
>
> I tried windows xp sp3 and linux (wpa_supplicant) client and both
> cause the same server output and authorization can't pass.
> Testing tools eapol_test, radeapclient and jRadiusSimulator can pass
> all tests fine.
>
> EAP - MD5 Challenge works fine.
>
> Attaching radiusd.conf and radius -X output.
> Thanks for help.
>
>   
> ------------------------------------------------------------------------
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
    
    
More information about the Freeradius-Users
mailing list