EAP error

[TOURE Amidou Florian]

Hi all ,Ecxuse me to disturb again but I have a problem when I want to authenticate a radius  local user on a NAC solution which is Packetfence.I have installed a windows certificate on the client and on my server.
But I got this specific error : (8) Login incorrect (eap: Failed continuing EAP PEAP (25) session.  EAP sub-module failed): [Administrateur] (from client 192.168.1.5 port 50003 cli 00:40:d0:67:d0:b1)
Is someone know how to solve this?
This my radius debug output 
Regards 
Amidou 

8) eap_peap:   This means you need to read the PREVIOUS messages in the debug output
(8) eap_peap:   to find out the reason why the user was rejected
(8) eap_peap:   Look for "reject" or "fail".  Those earlier messages will tell you
(8) eap_peap:   what went wrong, and how to fix the problem
(8) eap: ERROR: Failed continuing EAP PEAP (25) session.  EAP sub-module failed
(8) eap: Sending EAP Failure (code 4) ID 10 length 4
(8) eap: Failed in EAP select
(8)     [eap] = invalid
(8)   } # authenticate = invalid
(8) Failed to authenticate the user
(8) Login incorrect (eap: Failed continuing EAP PEAP (25) session.  EAP sub-module failed): [Administrateur] (from client 192.168.1.5 port 50003 cli 00:40:d0:67:d0:b1)
(8) Using Post-Auth-Type Reject
(8) # Executing group from file /usr/local/pf/raddb//sites-enabled/packetfence
(8)   Post-Auth-Type REJECT {
(8)     if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) ) {
(8)     if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) )  -> FALSE
(8) attr_filter.access_reject: EXPAND %{User-Name}
(8) attr_filter.access_reject:    --> Administrateur
(8) attr_filter.access_reject: Matched entry DEFAULT at line 11
(8)     [attr_filter.access_reject] = updated
(8) attr_filter.packetfence_post_auth: EXPAND %{User-Name}
(8) attr_filter.packetfence_post_auth:    --> Administrateur
(8) attr_filter.packetfence_post_auth: Matched entry DEFAULT at line 10
(8)     [attr_filter.packetfence_post_auth] = updated
(8)     [eap] = noop
(8)     policy remove_reply_message_if_eap {
(8)       if (&reply:EAP-Message && &reply:Reply-Message) {
(8)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
(8)       else {
(8)         [noop] = noop
(8)       } # else = noop
(8)     } # policy remove_reply_message_if_eap = noop
(8) linelog: EXPAND messages.%{%{reply:Packet-Type}:-default}
(8) linelog:    --> messages.Access-Reject
(8) linelog: EXPAND %t : [mac:%{Calling-Station-Id}] Rejected user: %{User-Name}
(8) linelog:    --> Sat May  7 17:23:12 2016 : [mac:00:40:d0:67:d0:b1] Rejected user: Administrateur
(8) linelog: EXPAND /usr/local/pf/logs/radius.log
(8) linelog:    --> /usr/local/pf/logs/radius.log
(8)     [linelog] = ok
(8)   } # Post-Auth-Type REJECT = updated
(8) Delaying response for 1.000000 seconds
Waking up in 0.3 seconds.
Waking up in 0.6 seconds.
(8) Sending delayed response
(8) Sent Access-Reject Id 54 from 192.168.10.1:1812 to 192.168.1.5:1645 length 44
(8)   EAP-Message = 0x040a0004
(8)   Message-Authenticator = 0x00000000000000000000000000000000
Waking up in 3.7 seconds.
(0) Cleaning up request packet ID 46 with timestamp +3
(1) Cleaning up request packet ID 47 with timestamp +3
(2) Cleaning up request packet ID 48 with timestamp +3
(3) Cleaning up request packet ID 49 with timestamp +3
(4) Cleaning up request packet ID 50 with timestamp +4
(5) Cleaning up request packet ID 51 with timestamp +4
(6) Cleaning up request packet ID 52 with timestamp +4
Waking up in 0.1 seconds.
(7) Cleaning up request packet ID 53 with timestamp +4
(8) Cleaning up request packet ID 54 with timestamp +4
Ready to process requests


Envoyé depuis Yahoo Mail pour Android