EAP-TTLS Not working

[Stefan Paetow]

> Setting Phase 2 auth - where? in mods-enabled/eap ?

Yes. In 'eap', scroll to the 'ttls' section. In 'ttls' you will find a default_eap_type that is set by default to 'md5'. Set that to 'gtc'. The EAP-GTC authentication type manages PAP ok. If you use eapol_test, see http://deployingradius.com/scripts/eapol_test/ which has sample configurations to allow you to test EAP-TTLS/PAP or EAP-TTLS/EAP-GTC (set 'auth=GTC' instead of 'auth=PAP').

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp at jabber.dev.ja.net
skype: stefan.paetow.janet

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160902/f7605a9c/attachment.sig>