Re: Problems while setting up PEAP

2003-12-05 Thread Alan DeKok 
Rink Springer [EMAIL PROTECTED] wrote:
 Yes, it works now! Wonderful!

  OK, we'll try to have a fix today or tomorrow.

 However, a small thing remains: The Edimax access point seems to
 reauthenticate itself every now and then, and I lose my wireless
 connection then. Does anyone have a clue why that is and how to
 resolve it?

  The *AP* reauthenticates itself?  Or the *wireless client*
re-authenticates itself?

  You can send a Session-Timeout attribute back to the AP, which will
then make it tell the client to re-authenticate itself...  So send a
Session-Timeout with some large value, and the client should be
connected for long periods of time.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problems while setting up PEAP

2003-12-04 Thread Rink Springer 
Hi everyone,

I'm trying to set up FreeRADIUS (I used the 2003-12-03 snapshot) with PEAP/TLS
for a Windows XP Service Pack 1 machine using EAP-MSCHAPv2. My certificates
were generated using OpenSSL 0.9.7c (30 Sep 2003).

There's an Edimax Access Point connected to my FreeBSD 4.9-STABLE FreeRADIUS
server, and it seems to do queries nicely.  However (that is why I am mailing
this :), I cannot seem to get my WinXP box to be authenticated.

In order to save bandwidth, I've put my log (from radiusd -fX) and radiusd.conf
online for all those who might want to help me:

- http://rink.nu/radius/radius.log
- http://rink.nu/radius/radiusd.conf

I'd be glad to supply any more information as needed. The thing that jumps
out to me is the error in SSLv3 read client certificate A, but I've seen
it after google-ing and it seemed not to matter.

Thanks.

Rink Springer

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems while setting up PEAP

2003-12-04 Thread Alan DeKok 
Rink Springer [EMAIL PROTECTED] wrote:
 I'm trying to set up FreeRADIUS (I used the 2003-12-03 snapshot) with PEAP/TLS
 for a Windows XP Service Pack 1 machine using EAP-MSCHAPv2. My certificates
 were generated using OpenSSL 0.9.7c (30 Sep 2003).

  I think there was a change yesterday to the TLS module which may
have broken PEAP.  If you can do CVS, try grabbing the 1.19 version of
src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.c, and re-building that
module.  It may work then.

  If that's the problem, we hope to have it fixed in a day or so.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems while setting up PEAP

2003-12-04 Thread Rink Springer 
Hi everyone,

   I think there was a change yesterday to the TLS module which may
 have broken PEAP.  If you can do CVS, try grabbing the 1.19 version of
 src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.c, and re-building that
 module.  It may work then.

Yes, it works now! Wonderful!

However, a small thing remains: The Edimax access point seems to reauthenticate
itself every now and then, and I lose my wireless connection then. Does anyone
have a clue why that is and how to resolve it?

Personally, I don't think it's RADIUS related, but just to be on the safe
side :) FreeRADIUS happily answers the requests. Maybe a WinXP or Access
Point configuration problem?

Regards,
Rink

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html