3.0.11 update broke my PEAP

Stefan Winter stefan.winter at restena.lu
Wed Feb 17 14:51:40 CET 2016


>>        Auth-Type MS-CHAP{
>   Ah... change that to MSCHAP, and it will work.


The config reads "MS-CHAP" with a dash because

- it's been like that for the last decade
- no migration warning told me it's deprecated
- the default config (!!) for 3.0.11 has the dash in inner-tunnel and

Are you saying you changed the Auth-Type to MSCHAP without dash, but
pretty much literally told no-one that it is so?

>   You probably have an Auth-Type MSCHAP" defined somewhere else, and that's used first.

Indeed, there are two other virtual servers which have this without dash
(but I wouldn't know why!).

So, having the more recent/correct dashless config "somewhere" magically
kills all the previously nicely working dashed config?



Stefan Winter

Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160217/37a3ba68/attachment.sig>

More information about the Freeradius-Users mailing list