2 Factor Authentication

[Dudás Péter]

Dear Alan!

Working means the devices are successfully connected - so the connection
not depending on the strenght of the tunnel encryption (if duo
authentication disabled).

Somenthing should be different - I have a feeling that Duo and Freeradius
uses the same resources and this cause the problem.
Tomorrow I'll move the Duo to a new server and we'll see if the problem
stays or not.





On 5 January 2017 at 00:35, Alan DeKok <aland at deployingradius.com> wrote:

> On Jan 4, 2017, at 6:17 PM, Dudás Péter <peter.pdudas at gmail.com> wrote:
> > I don't see any difference in the reply - checked the logs.
>
>   Then the NAS should do the same thing in both cases.
>
> > With this I was able to login from and Android phone.
> > MPPE encryption type I changed to Required (at module mschap) - but as
> you
> > can see it is working with that as well.
>
>   Please be clear about "working".  There are multiple pieces involved.
>
>   If the Access-Accepts are the same in both cases, then the NAS should
> behave the same in both cases.
>
>  And there is no way that adding a simple program to be executed will make
> the NAS misbehave.
>
>   Something else is going wrong.  Find that, and the problem will be fixed.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>