question about windows users

Bartosz Chodzinski bartosz.c at gmail.com
Wed May 20 15:54:56 CEST 2009


I am using a standard settings of eap.conf
when I change eap.conf to:
#               default_eap_type = md5
                default_eap_type = peap

I have similar communicate
Ready to process requests.
rad_recv: Access-Request packet from host 192.168.5.206 port 1812, id=242,
length=147
        NAS-IP-Address = 192.168.5.206
        NAS-Port = 50046
        NAS-Port-Type = Ethernet
        User-Name = "user_certificate"
        Called-Station-Id = "00-0C-30-81-9B-EE"
        Calling-Station-Id = "00-0A-E4-13-1A-02"
        Service-Type = Framed-User
        Framed-MTU = 1500
        EAP-Message = 0x0200001501757365725f6365727469666963617465
        Message-Authenticator = 0x4fea88a60594825de9229268206fb02d
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "user_certificate", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 0 length 21
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication
may fail because of this.
++[pap] returns noop
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type tls
[tls] Initiate
[tls] Start returned 1
++[eap] returns handled
Sending Access-Challenge of id 242 to 192.168.5.206 port 1812
        EAP-Message = 0x010100061920
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x54cef72d54cfee66f11829ca8f9f95d7
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 0 ID 242 with timestamp +37
Ready to process requests.



On Wed, May 20, 2009 at 3:51 PM, Ivan Kalik <tnt at kalik.net> wrote:

> > [eap] processing type md5
> > rlm_eap_md5: Issuing Challenge
>
> Hm, you are saying you want to do EAP-TLS but your server reports that it
> has got EAP-MD5 request. Check connection settings on Windows machine.
>
> Ivan Kalik
> Kalik Informatika ISP
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090520/99755328/attachment.html>


More information about the Freeradius-Users mailing list