Mike Saywell <[EMAIL PROTECTED]> wrote: > I can authenticate with XSupplicant under Linux fine, but Windows fails > apparently with the error "Failing Auth because we got a success/fail > without TLV."
Hmm... it looks like the PEAP module puts the data into a buffer, to be put into the TLS tunnel, but the tls code never looks for it on success/failure. The functions in eap_tls.c, eaptls_success() and eaptls_fail() have to be updated to look a little more like eaptls_request(). i.e. to call record_minus(), etc, to grab the data from the buffer, and put it into the tunnel. > In the peap section I've tried various combinations of the > copy_request_to_tunnel and use_tunneled_reply flags to no avail - > including leaving them unspecified. That won't work, as the code is just wrong. > Hopefully somebody can spot what is probably a silly mis-configuration > on my part! Nope. PEAP probably works on other systems because they don't look for the "TLV" response code, like they're supposed to. XP does, so it fails when the PEAP module doesn't supply the TLV. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
