hi

what you've sent is the following:

eap response identity
md5 challenge

then new eap response identity
and new challenge issued by the server

take a look at the EAP-Message attribute to approve this.

so, from the server's point of view there was no problem. however, it never received the necessary response to its challenges.

thus, the problem is either on your radius client (access device) or at your user (winXP). what are you trying to do exactly?


ciao artur



Narasimha Reddy Gujja wrote:
Hi Artur

Iam sending the server debug output file.

Iam trying to authenticate wireless users with XP system. My userbase is in LDAP.

Any suggestion will be great. Thanks in advance.

************radiusd -X -A*********************
Listening on IP address *, ports 1812/udp and 1813/udp, with proxy on 1814/udp.
Ready to process requests.
rad_recv: Access-Request packet from host 138.47.102.110:6001, id=13, length=119
User-Name = "Bob"
NAS-IP-Address = 138.47.102.110
Called-Station-Id = "00-02-2d-47-23-58"
Calling-Station-Id = "00-02-2d-50-a3-f3"
NAS-Identifier = "RadiusAP"
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = "\002\002\000\010\001Bob"
Message-Authenticator = 0x108ee1364eaf6d73afd4fca020f4ce04
modcall: entering group authorize
modcall[authorize]: module "preprocess" returns ok
modcall[authorize]: module "eap" returns updated
users: Matched Bob at 3
modcall[authorize]: module "files" returns ok
modcall: group authorize returns updated
rad_check_password: Found Auth-Type EAP
auth: type "EAP"
modcall: entering group authenticate
rlm_eap: processing type md5
rlm_eap_md5: Issuing Challenge
modcall[authenticate]: module "eap" returns ok
modcall: group authenticate returns ok
Sending Access-Challenge of id 13 to 138.47.102.110:6001
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-Routing = Broadcast-Listen
Framed-MTU = 1750
Framed-Compression = Van-Jacobson-TCP-IP
EAP-Message = "\001\r\000\026\004\020HU\235\272in;q~\373)$\304*\360<"
Message-Authenticator = 0x00000000000000000000000000000000
State = 0xb8544111638aa2094bf37fb63b6e4ddae418813eadd92b7dc38bd585e79b2bb05fce59c2
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 13 with timestamp 3e8118e4
Nothing to do. Sleeping until we see a request.
rad_recv: Access-Request packet from host 138.47.102.110:6001, id=14, length=119
User-Name = "Bob"
NAS-IP-Address = 138.47.102.110
Called-Station-Id = "00-02-2d-47-23-58"
Calling-Station-Id = "00-02-2d-50-a3-f3"
NAS-Identifier = "RadiusAP"
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = "\002\002\000\010\001Bob"
Message-Authenticator = 0x2b66e939f74c34a4a996282607247b8d
modcall: entering group authorize
modcall[authorize]: module "preprocess" returns ok
modcall[authorize]: module "eap" returns updated
users: Matched Bob at 3
modcall[authorize]: module "files" returns ok
modcall: group authorize returns updated
rad_check_password: Found Auth-Type EAP
auth: type "EAP"
modcall: entering group authenticate
rlm_eap: processing type md5
rlm_eap_md5: Issuing Challenge
modcall[authenticate]: module "eap" returns ok
modcall: group authenticate returns ok
Sending Access-Challenge of id 14 to 138.47.102.110:6001
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-Routing = Broadcast-Listen
Framed-MTU = 1750
Framed-Compression = Van-Jacobson-TCP-IP
EAP-Message = "\001\016\000\026\004\020J\347\0236\344K\371
\277y\322u.#H\030\245"
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x8c23059409e8141abbacc10527ed7c20ec18813e310778ff5bce1ea5c9149793b998df93
Finished request 1
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 1 ID 14 with timestamp 3e8118ec
Nothing to do. Sleeping until we see a request.


********************************************************************

Thanks Reddy [EMAIL PROTECTED]



-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


--
Artur Hecker
D�partement Informatique et R�seaux, ENST Paris
http://www.infres.enst.fr/~hecker


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to