EAP-GTC Error - Samsung S20+ connecting to eduroam

[Shaun Hoofe]

Just an update on this,

The end user got in touch after a client update today, attempted to authenticate again and now everything is working.

Matthew - Thanks for the debug parse and reassurance.

Cheers
Shaun

-----Original Message-----
From: Freeradius-Users <freeradius-users-bounces+shaun=harper-adams.ac.uk at lists.freeradius.org> On Behalf Of Matthew Newton
Sent: 08 September 2020 11:21
To: freeradius-users at lists.freeradius.org
Subject: Re: EAP-GTC Error - Samsung S20+ connecting to eduroam

On 08/09/2020 09:30, Shaun Hoofe wrote:
> (6) eap: EAP session adding &reply:State = 0xcef5e17acefdfb91
> (6)       [eap] = handled
> (6)     } # authenticate = handled
> (6) } # server inner-tunnel
> (6) Virtual server sending reply
> (6)   EAP-Message = 0x0108002a1a0108002510b32b3c4603cdfbd861dec80ae9c95905667265657261646975732d332e302e38

FreeRADIUS requests MS-CHAPv2 (EAP type 0x1A).

> (7) eap: Peer sent method PEAP (25)
> (7) eap: EAP PEAP (25)
> (7) eap: Calling eap_peap to process EAP data
> (7) eap_peap: processing EAP-TLS
> (7) eap_peap: eaptls_verify returned 7
> (7) eap_peap: Done initial handshake
> (7) eap_peap: eaptls_process returned 7
> (7) eap_peap: FR_TLS_OK
> (7) eap_peap: Session established.  Decoding tunneled attributes
> (7) eap_peap: PEAP state phase2
> (7) eap_peap: EAP type NAK (3)
> (7) eap_peap: Got tunneled request
> (7) eap_peap:   EAP-Message = 0x020800060306
> (7) eap_peap: Setting User-Name to00703070 at harper-adams.ac.uk
> (7) eap_peap: Sending tunneled request to inner-tunnel
> (7) eap_peap:   EAP-Message = 0x020800060306

...

 > (7) eap: Peer sent method NAK (3)
 > (7) eap: Found mutually acceptable type GTC (6)  > (7) eap: Calling eap_gtc to process EAP data

Device comes back, inside the PEAP tunnel NAKs the request (0x03) and asks instead for GTC (0x06).

It's not FreeRADIUS.

--
Matthew
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html