EAP PEAP issues

[Alan DeKok]

On Mar 20, 2023, at 4:35 PM, Matt H <meh1963 at gmail.com> wrote:
> 
> Thank you.  FWIW, quoting the page was more me was trying to figure it out;
> it wasn't intended to offend.

  I'm just wondering why it's necessary to quote a page I wrote back to me.  The quote wasn't asking a question, it was pretty much saying "but the page says it should work!".  Which is more argumentative than asking for help.

> Your comments made me realize that freeradius is (to all intents and
> purposes) working properly, and that the problem lies with the ldap host.

  That's also what the debug output said: no password was returned from LDAP.

  While the debug output looks complex and overwhelming, you can ignore 99% of it most of the time.  In most cases, look for "error" or "warning".

  If password authentication doesn't work, look for "password" in the debug output.  If you're using LDAP, look for the word "ldap".

  For the debug output you posted, it didn't even include "ldap".  Which means it wasn't even talking to the LDAP server.

  The process here is very very simple:

* is FreeRADIUS connecting to LDAP?

* is the LDAP module returning a password?

  Those questions are answered by reading the debug output.

  Alan DeKok.