Proxied Access-Challenge requests are missing AVPs

Arran Cudbard-Bell a.cudbardb at freeradius.org
Thu Sep 10 19:47:37 CEST 2015


> On 10 Sep 2015, at 15:57, Leonardo Arena <rnalrd at gmail.com> wrote:
> 
> Hi list,
> 
> I have a FreeRADIUS 3.0.3 proxy which forward all Cisco WAPs
> Wireless-802.11 authentication requests to a Windows NPS server. Clients
> use PEAP to authenticate.
> 
> What I'm seeing is that the Access-Challenge from the NPS is forwarded
> without any AVPs, and of course the WAP silently drops it.
> 
> Please find below the debug output and the relevant configuration files
> attached.
> 
> Couldn't find really anything helpful in the ML archive.
> 
> Could you please give me any suggestion of what could be wrong?

Weird, unless you list a filter module in post-proxy the response should be forwarded.  You're using a very out of date version of v3.0.x though, try 3.0.9 and see if you still see the same issue.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150910/eff4af6a/attachment.sig>


More information about the Freeradius-Users mailing list