Problem EAp

[Alan DeKok]

> On Feb 15, 2022, at 1:54 AM, Roger Eric <Eric.Roger1 at ac-creteil.fr> wrote:
> 
> 
> Hello,I have a problem with freeradius 3.0.17 with samba 4.9.5 under debian 10.

  I would suggest using 3.0.25, which has a lot better debug output for EAP.

> When I do thisradtest -t mschap eric.roger XXXXXXXX 127.0.0.1 0 testing123it worksSent Access-Request Id 251 from 0.0.0.0:46535 to 127.0.0.1:1812 length 136 User-Name = "eric.roger" MS-CHAP-Password = "Buckroger*1234*" NAS-IP-Address=172.16.1.232 NAS-Port = 0 Message-Authenticator = 0x00 Cleartext-Password="XXXXXXX" MS-CHAP-Challenge=0xe7b3443bc4983e22 MS-CHAP-Response=0x0001000000000000000000000000000000000000000000000000bfcdc7b44a760f05e5ce1d89ea0bc8a546bc7627fb3edd4Received Access-Accept Id 251 from 127.0.0.1:1812 to 127.0.0.1:46535 length 84 MS-CHAP-MPPE-Keys=0x0000000000000000bbee31eb54dd1eef75e78c302ccd2b09 MS-MPPE-Encryption-Policy=Encryption-Allowed MS-MPPE-Encryption-Types=RC4-40or128-bit-Allowed 

  That's completely unreadable.  Please post clean output.

> in Eap it does not work on android or windows 10.    I post my log of freeradius -XXX    

  Don't do that.  Follow the instructions in the documentation.  We need "freeradius -X".  Not anything else.

> I don't see the error I use the base certificates to test snakeoil before putting my own.   but I don't understand the problem.   the server is joined to the domain and the radtest works?    thank you very much for your help and if necessary other files I can send them    Thank you Eric    

  Send READABLE debug output.  Follow the instructions in the documentation.

  Alan DeKok.