Since upgrading to 1.0.1 and making some changes to the config for PEAP, I
am seeing the following issue.  When a user connects via iPass, they are
getting a password failure on the client for the initial authentication,
but then a success upon the rekeying the password.  I have a redundant
configuration (two FreeRADIUS servers, each going to two LDAP servers).
The odd thing is when this is happening, on the primary FreeRADIUS server I
see no auth failures and multiple auth OKs.  I am also seeing auths on the
backup RADIUS server.  I never saw auths on both servers before the
upgrade/changes and I never had multiple Auth OK responses. Here is the
entry from the primary server:

Tue Feb  8 13:59:40 2005 : Auth: Login OK: [EMAIL PROTECTED] (from client
RoamServer1 port 187 cli 9204945601)
Tue Feb  8 13:59:51 2005 : Auth: Login OK: [EMAIL PROTECTED] (from client
RoamServer1 port 187 cli 9204945601)
Tue Feb  8 14:00:42 2005 : Auth: Login OK: [EMAIL PROTECTED] (from client
RoamServer1 port 110 cli 9204945601)
Tue Feb  8 14:00:53 2005 : Auth: Login OK: [EMAIL PROTECTED] (from client
RoamServer1 port 110 cli 9204945601)
Tue Feb  8 14:04:10 2005 : Auth: Login OK: [xxxx] (from client Cisco3015
port 8884)

And the secondary  server:

Tue Feb  8 13:59:51 2005 : Auth: Login OK: [EMAIL PROTECTED] (from client
RoamServer1 port 187 cli 9204945601)
Tue Feb  8 14:00:53 2005 : Auth: Login OK: [EMAIL PROTECTED] (from client
RoamServer1 port 110 cli 9204945601)

Could this be due to the fact that I had to comment out the following in
the users file?

#DEFAULT        Auth-Type := LDAP
#       Fall-Through = 1

I had to do this to get the PEAP setup to allow the LDAP and users file
authentication to work as well.

I can provide config files and debug output if necessary.

Mark Capelle


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to