configure jradius (with free radius )

Jim Shi hanmao_shi at apple.com
Wed Jan 14 01:21:24 CET 2015


Hi David,
 I was able to set up free radius 2.1.12 with jradius. 
I tested PAP and it was a success.
But PEAP is failing with 

++[digest] returns noop
[suffix] No '@' in User-Name = "test", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 6 length 80
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /Users/jshi/freeradius/etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] Peap state ?
[peap] Identity - test
[peap] Unhandled state in peap
[eap] Handler failed in EAP/peap
[eap] Failed in EAP select
++[eap] returns invalid
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /Users/jshi/freeradius/etc/raddb/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> test
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated


Thanks
Jim





On Jan 13, 2015, at 12:42 PM, David Bird <dbird at google.com> wrote:

> Contributors welcome! :)
> 
> https://github.com/coova/jradius/tree/master/freeradius
> 
> On Tue, Jan 13, 2015 at 12:11 AM, Arran Cudbard-Bell <
> a.cudbardb at freeradius.org> wrote:
> 
>> 
>>> On 13 Jan 2015, at 14:06, adrian.p.smith at bt.com wrote:
>>> 
>>> Have you considered using version 3 with the REST module instead?
>> 
>> Especially as the jradius module has been removed from version 3
>> and won't be supported moving forwards.
>> 
>> The rlm_rest module will convert the RADIUS request into JSON
>> and send it over to a REST API endpoint of your choosing.
>> 
>> The REST API can be implemented in any language, even java :)
>> 
>> -Arran
>> 
>> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
>> FreeRADIUS development team
>> 
>> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>> 
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list