Error when changing inner auth

[Stefan Paetow]

If you *must* use PAP as an inner authentication type for EAP, use GTC
(Generic Token Card), which is an EAP inner authentication type (EAP-GTC).

It will, through the GTC option, give you PAP authentication in the inner
tunnel and make the EAP configuration happy.

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp at jabber.dev.ja.net
skype: stefan.paetow.janet

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by
guarantee which is registered in England under Company No. 5747339, VAT
No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower
Hill, Bristol, BS2 0JA. T 0203 697 5800.





On 20/04/2017, 10:55, "Freeradius-Users on behalf of LUCA"
<freeradius-users-bounces+stefan.paetow=jisc.ac.uk at lists.freeradius.org on
behalf of sfire at hotmail.it> wrote:

>Hi,
>
>I'm using the Version 2. I've successfully changed the default eap type.
>Now I'm trying to change the inner auth because I need pap as default.
>I've tried to change the inner auth for ttls but then this happens:
>
>
>   ttls {
>    default_eap_type = "pap"
>    copy_request_to_tunnel = no
>    use_tunneled_reply = no
>    virtual_server = "inner-tunnel"
>    include_length = yes
>   }
>rlm_eap_ttls: Unknown EAP type pap
>rlm_eap: Failed to initialize type ttls
>/usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap"
>/usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module
>"eap".
>/usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing
>authenticate section.
>
>
>I've tried to change the inner auth for peap as well, but same problem as
>before:
>
>   peap {
>    default_eap_type = "pap"
>    copy_request_to_tunnel = no
>    use_tunneled_reply = no
>    proxy_tunneled_request_as_eap = yes
>    virtual_server = "inner-tunnel"
>    soh = no
>   }
>rlm_eap_peap: Unknown EAP type pap
>rlm_eap: Failed to initialize type peap
>/usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap"
>/usr/local/etc/raddb/sites-enabled/default[310]: Failed to load module
>"eap".
>/usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing
>authenticate section.
>
>
>Why it doesn't recognize pap? Thank you.
>
>Luca
>-
>List info/subscribe/unsubscribe? See
>http://www.freeradius.org/list/users.html