Using the users file it works. So samba can be blamed even in the current version 3.4.7 :-(
With best regards, Norbert Wegener Siemens AG Siemens IT Solutions and Services SIS GO NW PSU SDC AS&INS Bruchstraße 5 45883 Gelsenkirchen, Germany Tel.: +49 (209) 94565716 Fax: +49 (201) 8165581284 mailto:[email protected] Siemens Aktiengesellschaft: Chairman of the Supervisory Board: Gerhard Cromme; Managing Board: Peter Loescher, Chairman, President and Chief Executive Officer; Wolfgang Dehen, Heinrich Hiesinger, Joe Kaeser, Barbara Kux, Hermann Requardt, Siegfried Russwurm, Peter Y. Solmssen; Registered offices: Berlin and Munich, Germany; Commercial registries: Berlin Charlottenburg, HRB 12300, Munich, HRB 6684; WEEE-Reg.-No. DE 23691322 ________________________________________ Von: freeradius-users-bounces+norbert.wegener=siemens....@lists.freeradius.org [freeradius-users-bounces+norbert.wegener=siemens....@lists.freeradius.org] im Auftrag von Alan DeKok [[email protected]] Gesendet: Freitag, 2. Juli 2010 17:23 An: FreeRadius users mailing list Betreff: Re: mschap/peap question Wegener, Norbert wrote: > With 2.1.8 and the configuration from > http://deployingradius.com/scripts/eapol_test/peap-mschapv2.conf > I want to test a radius configuration. The linux server running radius is > member > of the AD domain, mschap succeeds but finally the authentication fails. > freeradius sends Challenges to which eapol_test will not respond. > This should not be the behaviour mentioned in eap.conf regarding windows > compatibility > as eapol_test says: > > ... > EAP-MSCHAPV2: RX identifier 11 mschapv2_id 10 > EAP-MSCHAPV2: Received success > EAP-MSCHAPV2: Invalid authenticator response in success request > EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL > and finally fails. If you're running Samba... it's a Samba bug. Like most of these issues, try it with a test user && password in the "users" file. If it works there, but not when Samba is used: blame Samba. See eap.conf in 2.1.8 for pointers to the bug URL. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
