Ok, I have peap working with the users file and with mysql, and I have
radius working with ldap also. But I can not get a user to
authenticate against ldap using peap. I have seen that you cant use
eap and ldap, but peap and ldap should work from what I have read.
Any hints? the debug that I am seeing is very long, so I have
included the part where I am seeing an obvious error. If anyone could
help, I would appreciate it. Thanks
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 6
rlm_eap: Request found, released from the list
rlm_eap: EAP/mschapv2
rlm_eap: processing type mschapv2
Processing the authenticate section of radiusd.conf
modcall: entering group Auth-Type for request 6
rlm_mschap: No User-Password configured. Cannot create LM-Password.
rlm_mschap: No User-Password configured. Cannot create NT-Password.
rlm_mschap: Told to do MS-CHAPv2 for agrinnell with NT-Password
rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication.
rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
modcall[authenticate]: module "mschap" returns reject for request 6
modcall: group Auth-Type returns reject for request 6
rlm_eap: Freeing handler
modcall[authenticate]: module "eap" returns reject for request 6
modcall: group authenticate returns reject for request 6
auth: Failed to validate the user.
PEAP: Got tunneled reply RADIUS code 3
MS-CHAP-Error = "\010E=691 R=1"
EAP-Message = 0x04080004
Message-Authenticator = 0x00000000000000000000000000000000
PEAP: Processing from tunneled session code 0x81a7af8 3
MS-CHAP-Error = "\010E=691 R=1"
EAP-Message = 0x04080004
Message-Authenticator = 0x00000000000000000000000000000000
PEAP: Tunneled authentication was rejected.
rlm_eap_peap: FAILURE
modcall[authenticate]: module "eap" returns handled for request 6
modcall: group authenticate returns handled for request 6
Sending Access-Challenge of id 48 to x.x.x.x:6001
EAP-Message =
0x010900261900170301001be693a7dcd6a625967817d4e7eb24914aceffae7da3e6bc38c91fe4
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x6289d1971289d49c4de1658b4a15be13
Finished request 6
Going to the next request
Waking up in 5 seconds...
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html