The 0906 snapshot has the same behavior in this regard as the 0830
snapshot. :( I was able to get it to work by commenting out the check
that causes the error message, but there needs to be a cleaner method.
Does the server know when it has seen an EAP request from a given NAS?
Is there any way for the server to know that a give
Message-Authenticator should really be checked?
For those that are curious, we are using Nortel/Bay Networks 5399 blades
as our NAS.
[EMAIL PROTECTED] wrote:
>
> Tim Mayo <[EMAIL PROTECTED]> wrote:
> > The log entry is:
> >
> > rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:2438, id=129, length=201
> > Received packet from xxx.xxx.xxx.xxx with invalid Message-Authenticator!
> > Server rejecting request 11.
> > Sending Access-Reject of id 129 to xxx.xxx.xxx.xxx:2438
> >
> > I have tracked it down to something that looks like it may be part of
> > the EAP stuff but I am not using EAP. Any hints, pointers, etc would be
> > greatly appreciated.
>
> The NAS is sending a Message-Authenticator, even though it's not
> using EAP.
>
> I committed some patches by Raghu last night, which *should* fix the
> problem. So grab the latest CVS snapshot, and try that.
>
> Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
---------------------------------
Timothy L. Mayo mailto:[EMAIL PROTECTED]
Senior System Administrator
The National Business Network Inc.
localconnect(sm)
http://www.localconnect.net/
The National Business Network Inc. http://www.nb.net/
One Monroeville Center, Suite 850
Monroeville, PA 15146
(412) 810-8888 Phone
(412) 810-8886 Fax
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
