Users can't authenticate

Nick Porter nick at portercomputing.co.uk
Fri Dec 6 11:51:22 UTC 2024


On 06/12/2024 11:40, Federico Vissani DPV wrote:
> (1) eap: Peer sent packet with method EAP NAK (3)
> (1) eap: Peer NAK'd asking for unsupported EAP type PWD (52), skipping...
> (1) eap: ERROR: No mutually acceptable types found
> (1) eap: Sending EAP Failure (code 4) ID 23 length 4
> (1) eap: Failed in EAP select
> (1)     [eap] = invalid
> (1)   } # authenticate = invalid
> (1) Failed to authenticate the user

The device which is authenticating is requesting to use the EAP type PWD 
and you haven't got that method configured.

If this is WiFi auth, then usually it is one of EAP-TLS, EAP-TTLS-PAP or 
EAP-PEAP-MSCHAPv2 that get configured on the end devices depending on 
the requirements - and then those methods get correctly configured on 
the RADIUS server.

Which EAP method(s) are you wanting to support?

-- 
Nick Porter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 665 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20241206/5dd1b66f/attachment.sig>


More information about the Freeradius-Users mailing list