3.0.9: eap: Failed continuing EAP MD5 (4) session. EAP sub-module failed

[Mohamed Lrhazi]

Thanks Josh.... there were many differences! but key is probably:

default_eap_type = peap

instead of:
default_eap_type = mschapv2

Am gonna start a 3.0.9 install from scratch to be sure...

Thanks,
Mohamed.


On Sat, Jul 25, 2015 at 6:13 PM, Josh Miller <jmills5901 at gmail.com> wrote:

> And are you absolutely sure there is no configuration difference between
> the two servers?
>
> From the log you posted, it appears the 3.0.9 server is attempting an
> EAP-MD5 instead of MSCHAPv2 where they are likely configured in their
> supplicant.
>
> 3.0.9
> Sat Jul 25 12:47:51 2015 : Debug: (1088) eap: Calling submodule eap_md5 to
> process data
>
> vs
>
> 3.0.8
> Sat Jul 25 12:52:12 2015 : Debug: (2534) eap: Calling eap_mschapv2 to
> process EAP data
>
>
> I would double-check all the configs, it appears that there is a difference
> between the 2 boxes.
>
> On Sat, Jul 25, 2015 at 2:51 PM, Mohamed Lrhazi-2 [via FreeRADIUS] <
> ml-node+s1045715n5735571h11 at n5.nabble.com> wrote:
>
> > On Sat, Jul 25, 2015 at 5:31 PM, Josh Miller <[hidden email]
> > <http:///user/SendEmail.jtp?type=node&node=5735571&i=0>> wrote:
> >
> > > Supplicant is a term that describes the application that is used to
> > create
> > > the wired/wireless network connection.
> > >
> > > Some examples are:
> > >
> > > 1. Native Windows 7 or 8 Wireless Supplicant
> > > 2. Intel Proset Wireless Supplicant
> > > 3. Aruba Networks has a Windows supplicant specifically for creating
> > > PEAP-GTC connections for Windows clients.
> > >
> > > I think you get the idea.
> > >
> > >
> >
> > Thanks Josh, Alan.
> >
> > I do not know much about the users... I just noticed that when I started
> > sending traffic to 3.0.9 instances, these rejections started showing up
> in
> > the log... so I tested further and found that indeed, the same user would
> > fail on 3.0.9, then I would remove 3.0.9 from the pool, and baam, their
> > next attempt would be routed to 3.0.8 instance, and would succeed right
> > away!
> >
> > Mohamed.
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> > ------------------------------
> >  If you reply to this email, your message will be added to the discussion
> > below:
> >
> >
> http://freeradius.1045715.n5.nabble.com/3-0-9-eap-Failed-continuing-EAP-MD5-4-session-EAP-sub-module-failed-tp5735562p5735571.html
> >  To unsubscribe from FreeRADIUS, click here
> > <
> http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=am1pbGxzNTkwMUBnbWFpbC5jb218Mjc0MDY5MnwtMTQwNTk1MjU1MQ==
> >
> > .
> > NAML
> > <
> http://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml
> >
> >
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>