3.0.11 update broke my PEAP

[Matthew Newton]

On Mon, Feb 15, 2016 at 09:06:00AM +0100, Stefan Winter wrote:
> this looks suspiciously like a bug to me. I updated from 3.0.10 to
> 3.0.11 with a perfectly working and unchanged configuration. In 3.0.11,
> all PEAP is broken with a slightly enigmatic error message which
> suggests my config may be sub-par; I can't really determine what should
> be wrong with it.

Alan added a patch to check that all eap types that are used are
actually defined in a virtual server (or along those lines). But
it may have caused a few issues with configs that might not have
been quite correct before. I'm guessing this is one of those
cases.

> (484) eap: Calling submodule eap_mschapv2 to process data
> (484) eap_mschapv2: Auth-Type sub-section not found.  Ignoring.
> (484) eap_mschapv2: # Executing group from file
> /usr/local/freeradius/config/raddb/sites-enabled/inner-tunnel

> So which sub-section would be missing here? Strange.

Check you've not commented out the Auth-Type MS-CHAP {} section
from authenticate {}.

Whether this is tightening up things a bit too far in terms of
config checks, I'm not sure.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>