trying to get PAP-inside-TTLS working for PAM

Michael Martinez mwtzzz at gmail.com
Fri Jan 29 21:33:35 CET 2016


It turns out my configuration worked. The issue was that during testing I
wasn't including the google 2-factor code with the password. Once I started
doing this (appending the code at the end of the LDAP password),  it works
fine.

Oh, and I did replace the ":=" with "=" as suggested.

On Thu, Jan 28, 2016 at 4:43 PM, Matthew Newton <mcn4 at leicester.ac.uk>
wrote:

> On Thu, Jan 28, 2016 at 03:53:05PM -0800, Michael Martinez wrote:
> > In /etc/freeradius/users, I have DEFAULT Auth-Type := PAM
>
> This will break EAP; use = rather than :=.
>
> then configure the inner-tunnel for PAM as you have done in the
> outer.
>
> Matthew
>
>
> --
> Matthew Newton, Ph.D. <mcn4 at le.ac.uk>
>
> Systems Specialist, Infrastructure Services,
> I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
>
> For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>



-- 
---


More information about the Freeradius-Users mailing list