PEAP error

[Alan Buxey]

hi,
client not using correct cert for auth - or part of the required chain is
missing (intermediate certs should all be on server too)

alan

On Fri, 18 Jan 2019 at 09:20, <slnarayanan at nitt.edu> wrote:

> Hai to all,
>
>         We are using freeradius 3.0.13 version EAP=PEAP (MSCHAPV2)only
> in our network .Few day's back we configure the server.At the time
> mobile devices and windows 10 system are logged through our domain
> account.After two day's our mobile devices only login happen but
> windown 10 it is not logged .It is showing some TLS error.i have given
> the error below.We are not using any certificate(Server,Client) before
> and now also.i don't why the windows 10 system won't login. We don't
> want using and PAP or CHAP or MD5.We need only PEAP.If it is must for
> server certificate for using windows 10?or below windows 7? only
> required for certificate.Kindly suggest to me to resolve my issue.
>
> Error code:
> Fri Jan 18 14:36:47 2019 : Auth: (319) Login incorrect (eap_peap: TLS
> Alert read:fatal:access denied): [user/] (from client team4 port 608
> cli C8-3A-35-C8-10-28)
> Fri Jan 18 14:36:47 2019 : ERROR: (319) eap_peap: ERROR: TLS Alert
> read:fatal:access denied
> Fri Jan 18 14:36:20 2019 : Auth: (246) Login incorrect (eap_peap: TLS
> Alert read:fatal:unknown CA): [host/AJIALAN.octa.edu/] (from client
> team4 port 607 cli C8-3A-35-C8-10-28)
> Fri Jan 18 14:36:20 2019 : ERROR: (246) eap_peap: ERROR: Failed in
> __FUNCTION__ (SSL_read)
> Fri Jan 18 14:36:20 2019 : ERROR: (246) eap_peap: ERROR: TLS_accept:
> Failed in SSLv3 read client key exchange A
> Fri Jan 18 14:36:20 2019 : ERROR: (246) eap_peap: ERROR: TLS Alert
> read:fatal:unknown CA
>
>
> Regards,
> S.Lakshmi narayanan
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html