Problem testing using NTradping or radtest

Alan DeKok aland at
Wed Nov 13 18:10:58 CET 2013

trevor obba wrote:
> I am running freeradius 2.2.0 configure as eduroam servers which is
> authenticate to Active directory
> Here is my eduroam site-enable file (virtual server):

  Which doesn't allow PAP authentication.

> The configuration works fine when I tested it from wireless device such
> as windows PC, iPhone or android device etc.  

  Because you allowed EAP authentication.

> However when I tested it using NTRadPing or radtest that is “radtest
> testuser testpast localhost 1812 testing123” I got Access-Reject

  Because you didn't allow PAP authentication.

> When I logged in using the credential testuser from a wireless device I
> am able to authenticate but not on NTradping or using radtest.
> Testuser is active directory user account

  And the "eduroam" virtual server doesn't check AD.

> Can you help? Please

  Configure the "eduroam" server to check AD for PAP authentication.

  Or, ignore the problem.  People using eduroam shouldn't be using PAP.

  If you want to *test* authentication, read the top of
raddb/sites-available/inner-tunnel.  It tells you how to test PAP

  Alan DeKok.

More information about the Freeradius-Users mailing list