Hi,

i use an old version of freeradius, 1.1.2. And yes, I will upgrade to a new 
version soon.

But for now I have a question regarding a few errormessages I see in my 
logfile. Maybe someone caould help me to understand them.

I use EAP with TSL to authenticate clients which are sending their certificate 
which are installed on each client and I have on my Radiusserver the root 
certificate to verify them.

It is working, the clients are authenticated and happy, but in the logfile of 
the Radiusserver I see each time the following messages:

> Wed Mar 25 16:49:53 2009 : Error:     TLS_accept:error in SSLv3 read client 
> certificate A
> Wed Mar 25 16:49:53 2009 : Error: rlm_eap: SSL error 
> error:00000000:lib(0):func(0):reason(0)
> Wed Mar 25 16:49:54 2009 : Error: rlm_eap: SSL error 
> error:00000000:lib(0):func(0):reason(0)
> Wed Mar 25 16:49:54 2009 : Auth: Login OK: [host/client01.example.com] (from 
> client WLANCONTROLLER nasid WLANCONTROLLER port 29 cli 00-23-34-35-36-36)

As I understand the first lines, the Radiusserver can't read the certificate. 
But if this is true, how the hell could the Login be OK? Without certificate 
the Authentication should fail, shouldn't it? But if the certificates are okay, 
what is the meaning of the errormessages?

Sorry if this is trivial for some of you, but I really have no idea what to do 
with this.

Tom.

-- 
Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss 
für nur 17,95 Euro/mtl.!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to