eap_peap: fatal access_denied error
mustafa mujahid
mustafa.mujahid at outlook.com
Sat Mar 11 15:51:40 CET 2017
Dear Alan,
Thank you very much. It seems to have worked. Here is the output I'm getting right now.
(8) authenticate {
(8) eap: Expiring EAP session with state 0xb2a2c22cb2abd872
(8) eap: Finished EAP session with state 0xb2a2c22cb2abd872
(8) eap: Previous EAP request found for state 0xb2a2c22cb2abd872, released from the list
(8) eap: Peer sent packet with method EAP MSCHAPv2 (26)
(8) eap: Calling submodule eap_mschapv2 to process data
(8) eap_mschapv2: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
(8) eap_mschapv2: authenticate {
(8) mschap: Found NT-Password
(8) mschap: Creating challenge hash with username: zeeshan.chaudary
(8) mschap: Client is using MS-CHAPv2
(8) mschap: Adding MS-CHAPv2 MPPE keys
(8) [mschap] = ok
(8) } # authenticate = ok
(8) MSCHAP Success
Again. Thankyou
BR/Mustafa
________________________________
From: Freeradius-Users <freeradius-users-bounces+mustafa.mujahid=outlook.com at lists.freeradius.org> on behalf of Alan DeKok <aland at deployingradius.com>
Sent: Thursday, March 9, 2017 5:52 AM
To: FreeRadius users mailing list
Subject: Re: eap_peap: fatal access_denied error
On Mar 9, 2017, at 8:44 AM, mustafa mujahid <mustafa.mujahid at outlook.com> wrote:
>
> Please see below complete Debug. (it's pretty long)
It's a little opaque, but the problem is here:
> (8) # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
> (8) authenticate {
> (8) eap: Expiring EAP session with state 0x102bfd681022e731
> (8) eap: Finished EAP session with state 0x102bfd681022e731
> (8) eap: Previous EAP request found for state 0x102bfd681022e731, released from the list
> (8) eap: Peer sent packet with method EAP MSCHAPv2 (26)
> (8) eap: Calling submodule eap_mschapv2 to process data
> (8) eap_mschapv2: Auth-Type sub-section not found. Ignoring.
It looks like you edited the configuration files and broke them. Don't do that.
The eap_mschapv2 module calls "Auth-Type mschap" in order to do the actual MS-CHAP calculations. If that subsection isn't found... eap_mschapv2 can't work.
Use 3.0.13. And start with the default configuration files. It works.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRADIUS -- users' list info<http://www.freeradius.org/list/users.html>
www.freeradius.org
Users' List Information. The freeradius-users mailing list is for users of the FreeRADIUS server not Cistron's server! There are a few house-rules to which we'd like ...
More information about the Freeradius-Users
mailing list