eap: Freeradius proxy doesn't work with EAP PEAP auth

Alan DeKok aland at deployingradius.com
Wed Jul 5 17:25:14 CEST 2017


On Jul 5, 2017, at 11:11 AM, Danilo Raspa <danilo.raspa at gmail.com> wrote:
> I launched the following command from another server:
> radtest -t mschap danilo.raspa%realm_example.com 1234 192.168.0.158:1812 0
> password

  You're not testing it with the same user-name?

>  I added "nostrip" inside the realm "realm_example.com" in proxy.conf and
> the error changed("(82)    ERROR: mschap : MS-CHAP2-Response is
> incorrect"), I attached the radius server log below:

  I think you missed my point...

  If you add "nostrip", you should test *PROXYING* again.  With the SAME USERNAME as before.

  Don't do a DIFFERENT test, where you're trying a different User-Name,  and where you're trying to authenticate the user locally on the proxy.

  Alan DeKok.




More information about the Freeradius-Users mailing list