EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
Hi All, I have a proxy setup ( proxy server 192.168.6.134) where users are proxied to home server (192.168.7.40). Host IP address = 192.168.6.181 FreeRADIUS version 2.1.9 User authentication using radclient works fine when I issue following command echo

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan DeKok
Chidanand Gangur wrote: I have a proxy setup ( proxy server 192.168.6.134) where users are proxied to home server (192.168.7.40). Host IP address = 192.168.6.181 FreeRADIUS version 2.1.9 ... I get following response on my proxy server Why not look on the home server to see what the

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan Buxey
Hi, snip Sending Access-Request of id 177 to 192.168.7.40 port 1812 cut rad_recv: Access-Reject packet from host 192.168.7.40 port 1812, id=177, length=47 seems quite simple. the home server that you proxied the request to has rejected it. check the logs on that server to see why - i

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
I do not have raduser configured in my proxy users file. If it is configuration problem on the Home-Server why does it work if I use radeapclient/radclient. I see following on my host on running eapol_test. Whay is NAS-IP-Address set as 127.0.0.1 in this case? Reading configuration file

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan Buxey
Hi, I see following on my host on running eapol_test. Whay is NAS-IP-Address set as 127.0.0.1 in this case? you cannot debug and fix RADIUS issues by looking at the client. NAS-IP-Address is 127.0.0.1 because thats what it is. you are a local machine. alan - List info/subscribe/unsubscribe?

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan Buxey
hi, I will repeat the advice given before - look at the logs of the RADIUS server which is actually doing the authentication. you cannot get joy anywhere else. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
At present I have removed Proxy from my set up and have directly connected my host to AD (IIS server) I have configured raduser on it I have added my host IP as its RADIUS client and on issuing following command eapol_test -c /tmp/eapol.conf -a 192.168.7.40 -p 1812 -s testing123 My home server

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan DeKok
Chidanand Gangur wrote: My home server is an Microsoft IIS server, all I get from its logs is following: Sorry, you need to ask Microsoft how to debug their software. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Phil Mayers
On 09/06/2010 03:00 PM, Chidanand Gangur wrote: At present I have removed Proxy from my set up and have directly connected my host to AD (IIS server) This isn't a FreeRadius question. Ask on an NPS/IAS server mailing list. But... From distant memory, MD5 password support requires reversible

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
Thanks Phil, I would definitely explore on the pointer you mentioned. I am sorry folks to ask IIS question on this mailing list I was little frustrated. Thanks, Chidanand On Mon, Sep 6, 2010 at 10:17 PM, Phil Mayers p.may...@imperial.ac.ukwrote: On 09/06/2010 03:00 PM, Chidanand Gangur