Freeradius reply attribute problem when using PEAP

Arran Cudbard-Bell a.cudbardb at
Wed Aug 13 20:14:46 CEST 2014

On 13 Aug 2014, at 13:20, Alan DeKok <aland at> wrote:

> Dale Blount wrote:
>> I've already debugged the inner-tunnel using the radtest commands in the
>> top of the inner-tunnel file.  They both work and pass the Ruckus-Role
>> just fine:
>  OK.
>> $ radtest rickjames XXXX 0 ZZZZ 
>> SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
>  Hmm... that isn't good.  I suggest using the latest code from git, the
> v3.0.x branch.
>> I did find something odd, though.  I upgraded to 3.0.4rc1 based on a few
>> bug reports I had found earlier to see if it would provide additional
>> debug.  Now EAP-PEAP connects the first time radiusd is started, and
>> fails subsequent times.  If I switch the client
>> (NetworkManager/wpa_supplicant) from PEAP to TTLS it connects, and if I
>> switch it back to PEAP it'll connect again as long as I keep switching
>> the type.  I then disabled cache in mods-enabled/eap and it'll work
>> repeatedly using PEAP on every client device I can find.
>  So the cache module is buggy, or you misconfigured it.

I think he's referring to the session cache and not rlm_cache.

Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the Freeradius-Users mailing list