The users session was previously rejected

[Tim Pretlove]

Hi (again) Arran,

On Sat, 31 Oct 2015, Tim Pretlove wrote:

> Hi Arran,
>
> On Sat, 31 Oct 2015, Arran Cudbard-Bell wrote:
>
>>
>>> On 31 Oct 2015, at 13:14, Tim Pretlove <T.Pretlove at liverpool.ac.uk> wrote:
>>>
>>> Hi Alan,
>>>
>>> On Sat, 31 Oct 2015, Alan DeKok wrote:
>>>
>>>> On Oct 31, 2015, at 5:40 AM, Pretlove, Tim <T.Pretlove at liverpool.ac.uk> 
> wrote:
>>>>> I fairly new at Freeradius and I have been upgrading our version 2 
> servers to version 3.0.10 and I have what I believe is a configuration issue.
>>>>> The user is correctly rejected by eap/MSCHAP but it continues into 
> eap/PEAP where I get the error
>>>>> Sat Oct 31 09:08:24 2015 : Info: (11) eap_peap:   The users session was 
> previously rejected: returning reject (again.)
>>>>
>>>> Those messages say "Info".  Not "Error".
>>>
>>> The Error message is
>>>
>>> ERROR: (11) eap: Failed continuing EAP PEAP (25) session.  EAP sub-module 
> failed.
>>
>> Nope, above that. Copy all the red things (if logging to stdout) :)

Is this what you refering to Arran?

Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: Continuing EAP-TLS
Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: Peer sent flags ---
Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: [eaptls verify] = ok
Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: Done initial handshake
Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: [eaptls process] = ok
Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: Session established. 
Decoding tunneled attributes
Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: PEAP state send tlv 
failure
Sat Oct 31 09:08:24 2015 : Debug: (11) eap_peap: Received EAP-TLV response

>
> That is the only error I'm getting plus the info messages. The 
> reject from MSCHAP is correct (log to stdout is a bit of a pain with 2000 
> connects/min)
>
>>
>> -Arran
>>
>> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
>> FreeRADIUS development team
>>
>> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>>
>>
>
> Regards
>
> Tim Pretlove
> Computing Services
> University of Liverpool
> Brownlow Hill
> Liverpool, L69 3GG
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html


Tim Pretlove
Computing Services
University of Liverpool
Brownlow Hill
Liverpool, L69 3GG
Email: pretlove at liverpool.ac.uk
Phone: 0151-794-4479