Freeradius and Microsoft NPS

[Phil Mayers]

On 13/04/11 16:32, Phil Mayers wrote:
> On 13/04/11 16:22, Alan DeKok wrote:
>> Phil Mayers wrote:
>>> Actually, I was just testing this and proxying the inner EAP-MSCHAPv2 as
>>> plain MS-CHAPv2 seems to be broken, at least in my testing. It doesn't
>>> crash the server, but equally it doesn't pass the S=XXX success back
>>> correctly either, so the client does a PEAP reject.
>>
>> Hmm... OK.
>>
>>> It seems as if the rlm_eap_mshcapv2 post_proxy function isn't working
>>> somehow; I am trying to perform a "git bisect" to find when it stopped
>>> working, but am running into problems with the commits which don't build
>>> :o(
>>
>> Sorry... we really need a test infrastructure.
>
> No worries; it seems to be broken for 2.1.7 and 2.1.8, but worked in
> 2.1.1 - still trying to track it down more tightly than that.

Actually, scratch that. Proxying in those versions doesn't work for me 
at all:

ERROR: Failed to create a new socket for proxying requests.
ERROR: Failed inserting request into proxy hash.
ERROR: Failed to proxy request 7

...I'm baffled as to what I'm doing wrong, but I'm giving up at this point!