Freeradius reply attribute problem when using PEAP

Alan DeKok aland at
Wed Aug 13 19:20:11 CEST 2014

Dale Blount wrote:
> I've already debugged the inner-tunnel using the radtest commands in the
> top of the inner-tunnel file.  They both work and pass the Ruckus-Role
> just fine:


> $ radtest rickjames XXXX 0 ZZZZ 
> SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp

  Hmm... that isn't good.  I suggest using the latest code from git, the
v3.0.x branch.

> I did find something odd, though.  I upgraded to 3.0.4rc1 based on a few
> bug reports I had found earlier to see if it would provide additional
> debug.  Now EAP-PEAP connects the first time radiusd is started, and
> fails subsequent times.  If I switch the client
> (NetworkManager/wpa_supplicant) from PEAP to TTLS it connects, and if I
> switch it back to PEAP it'll connect again as long as I keep switching
> the type.  I then disabled cache in mods-enabled/eap and it'll work
> repeatedly using PEAP on every client device I can find.

  So the cache module is buggy, or you misconfigured it.

  Please try the latest code from v3.0.x.  It has a number of fixes over
the 3.0.4rc1 code.

  Alan DeKok.

More information about the Freeradius-Users mailing list