I have:
- Packetfene 8.2.1
- Meraki Access Point
- Packetfence server joined Active Directory (ntm_authen test working).
-  MAB + 802.1x (Web Authentication) : Work

However, if I config Meraki to use Packetfence as 802.1x authentication
only, it does not work and getting Reading winbind reply failed error as
below

request_time 0
RADIUS Request NAS-Port-Type = Wireless-802.11
Acct-Session-Id = "C06D8736E822C74F"
Service-Type = Framed-User
Called-Station-Id = "ee:55:2d:c0:a6:36:Tech"
State = 0xe3b80bd1e3ac1151ca8e1fe3248ce3dc
FreeRADIUS-Proxied-To = 127.0.0.1
WLAN-Group-Cipher = 1027076
WLAN-Pairwise-Cipher = 1027076
Called-Station-SSID = "Tech"
Connect-Info = "CONNECT 54.00 Mbps
802.11ac
RSSI: 46
Channel: 44"
Realm = "null"
EAP-Type = MSCHAPv2
NAS-IP-Address = 172.16.102.90
Meraki-Device-Name = "B6-101"
Calling-Station-Id = "a0:c9:a0:80:ec:d9"
MS-CHAP-User-Name = " testuser "
MS-CHAP-Challenge = 0x4b20bfed220444b0cb2802871aa7a4a3
User-Name = " testuser "
Event-Timestamp = "Jan  9 2019 17:08:13 +07"
EAP-Message =
0x021400431a0214003e31412a44982abdce5ac3f47e7725a8707b000000000000000059819f66e0500f00a59cc561d596b1c7f346ad14fcdabee200647663687579656e
MS-CHAP2-Response =
0x1476412a44982abdce5ac3f47e7725a8707b000000000000000059819f66e0500f00a59cc561d596b1c7f346ad14fcdabee2
Stripped-User-Name = " testuser "
NAS-Port = 1
Framed-MTU = 1400
WLAN-AKM-Suite = 1027073
Module-Failure-Message = "mschap: Program returned code (1) and output
'Reading winbind reply failed! (0xc0000001)'"
Module-Failure-Message = "mschap: External script says: Reading winbind
reply failed! (0xc0000001)"
Module-Failure-Message = "mschap: MS-CHAP2-Response is incorrect"
User-Password = "******"
Module-Failure-Message = "Failed retrieving values required to evaluate
condition"
SQL-User-Name = "testuser"
RADIUS Reply MS-CHAP-Error = "\024E=691 R=0
C=a55d7dcdb1906a1b12e1440559834b07 V=3 M=Authentication failed"
EAP-Message = 0x04140004
Message-Authenticator = 0x00000000000000000000000000000000

Please help with this, I could not find out what caused this problem...
Thanks
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to