IOS authenticaton failures

[Mark Williams]

Just to clarify, in both of your cases FreeRadius is rejecting the access request? At first it sounded as though, in Tim’s case, the system was responding with an accept, but the user was getting an ‘incorrect password’ message from their supplicant.

=======================
Mark Williams
Network Infrastructure & Services
1770 Forecast Drive, 0506
Blacksburg, VA 24061
markhw at vt.edu (2A83CAC8)


> On Oct 4, 2018, at 12:33 PM, Ibrahim AKSIT <ibrahimaksit at gmail.com> wrote:
> 
> Hello there, we have the same problem unfortunately. It says "Thu Oct  4
> 19:30:08 2018 : Auth: (2139531) Login incorrect (eap_ttls: System call
> (I/O) error (-1)):*******"
> Although, user credentials are correct, they cannot connect to wifi through
> IOS devices.
> The Freeradius version is as follow.
> freeradius -v
> radiusd: FreeRADIUS Version 3.0.17 (git #cb7c6d3500), for host
> x86_64-pc-linux-gnu
> FreeRADIUS Version 3.0.17
> Copyright (C) 1999-2017 The FreeRADIUS server project and contributors
> There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
> PARTICULAR PURPOSE
> You may redistribute copies of FreeRADIUS under the terms of the
> GNU General Public License
> For more information about these matters, see the file named COPYRIGHT
> 
> Thanks in advance
> 
> İbrahim AKŞİT
> 
> Best Regards and Wishes
> Yours Sincerely.
> 
> 
> On Thu, Oct 4, 2018 at 7:07 PM Tim Holtzen <tah at nebrwesleyan.edu> wrote:
> 
>> We've been experiencing this issue for about the last month.  It seems
>> to affect mostly Apple IOS devices.  The user gets the message that
>> their password is incorrect even though it is not.  Shutting off the
>> wireless on the device and turning it back on has no effect.  However if
>> you power down the device completely and then power it back up it
>> immediately connects to the wireless network.  When roaming to the next
>> wireless AP the issue may or may not return.  Since we are using
>> WPA-Enterprise with Freeradius for authentication I'm wondering if we
>> are hitting some kind of session management issue where powering down
>> the device forces a new session to be initiated.  Has anyone else seen
>> anything similar?
>> 
>> --
>> 
>> Timothy A. Holtzen
>> Campus Network Administrator
>> Nebraska Wesleyan University
>> Public PGP key CFB4 3AE8 B726 DEBF 00D9  CCFC 426E 76AF DABC B3D7
>> 
>> 
>> 
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html