Re: Freeradius not authenticating Wireless Clients

[Seann Clark]

Ivan Kalik wrote:

    I am having problems with my freeradius server for the past 24
hours, which seems that the radius server isn't authenticating EAP-TLS
clients from my wireless network. I am looking for a little advice from
the local subject matter experts. I am running a Vista and an XP home
client right now, both worked, I rebuilt the Vista machine and wasn't
able to authenticate. my WAP tends to not service Radius requests when
the radius server goes away for whatever reasons, and the fix is just to
cycle power on it. It is a WRT54GS by Linksys, and after the last power
cycle, it just doesn't authenticate clients anymore. If it is the WAP, I
am wondering what suggestions people have for a good WAP that is stable
and runs WPA2 Enterprise? What I am seeing from Radiusd on Debug mode is:

rad_recv: Access-Request packet from host 192.168.10.10 port 1784, id=1,
length=152

Then:

rad_recv: Access-Request packet from host 192.168.10.10 port 1786, id=1,
length=152

...

Cleaning up request 63 ID 1 with timestamp +594
Cleaning up request 64 ID 1 with timestamp +594
Cleaning up request 65 ID 1 with timestamp +594
Cleaning up request 66 ID 1 with timestamp +594
Cleaning up request 67 ID 1 with timestamp +594
Cleaning up request 68 ID 1 with timestamp +594

It seems to be sending the initial request over and over again. Is your AP
getting the response from the radius server?

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Just to quickly clarify this issue, after changing and troubleshooting for a while, I learned something very valuable, always check all certificates expiration dates. The issue was the Radius cert expired without alerting me (corrected now, and monitored on expiration date for all certs). The odd thing is I didn't even get a complaint from Radius when I stop/started the service, either. Live and learn I guess.

Thanks for helping out with this though.

~Seann

smime.p7s
Description: S/MIME Cryptographic Signature

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html