[Help] Is that possible to change the reject message that appears at the Windows Pop Up

Arran Cudbard-Bell a.cudbardb at freeradius.org
Mon Mar 18 19:42:26 CET 2013


On 18 Mar 2013, at 12:07, A.L.M.Buxey at lboro.ac.uk wrote:

> hi,
> 
> we would all love to be able to send a relevant error message to our
> clients if they fail to authenticate (either locally or remotely).
> but we cant. :-(

The old HP switches used to convert the Reply-Message into an EAP-Notification and send it after the EAP-Success or EAP-Failure.

The native OSX supplicant used to log this even though it never displayed it to the user.
The Windows supplicant ignored it completely.
WPA_Supplicant restarted authentication and went into an infinite authentication loop.

It may be possible to send it before the EAP-Success/EAP-Failure message for some EAP methods, but chances are not all supplicants will like it, and most probably won't display anything.

-Arran


More information about the Freeradius-Users mailing list