Error with AD/freeradius config

Phil Mayers p.mayers at imperial.ac.uk
Thu Jul 14 17:13:28 CEST 2011


On 14/07/11 16:04, Edge wrote:

> My /sites-enabled/default file - I have just copied the authentication
> section as everything else in the file is at default settings

Not necessary or helpful. Full debug (which you didn't provide; you 
trimmed the start) is what's needed.

>
> rad_recv: Access-Request packet from host 127.0.0.1 port 44992, id=218,
> length=60
>
> User-Name = "xxxxxxxx"
>
> User-Password = "xxxxxxxxx"
>
> NAS-IP-Address = xxx.xxx.xxx.xxx
>
> NAS-Port = 0

This is not an MSCHAP request. It's a PAP request, probably from radtest 
or radclient.

You need to test with EAP. Either use "eapol_test" from the 
wpa_supplicant source, or use "radtest -t mschap" and direct the request 
to the "testing" port of the inner-tunnel virtual server.



More information about the Freeradius-Users mailing list