Re: WPA Peap problems with Vista (yet again)

2008-04-05 Thread Alan DeKok
Michael Torrie wrote: Yet I still have the problem where after the Access-Challenge is sent, the Vista clients just silently drop things and the connection fails. This is the behavior that I know I would get if I don't have the required OID in the certificate. Yet it is there! I ran

WPA Peap problems with Vista (yet again)

2008-04-04 Thread Michael Torrie
I've read through the list archives about people's problems with Vista and FreeRadius, including the recent messages on this list in January, and a couple of exchanges back in 2006 and 2007. I am running FreeRadius 1.1.7 on a RHEL 4 box, compiled from Fedora 8's FreeRadius SRPM. According to the

Re: EAP (PEAP) problems

2006-06-01 Thread Drew Linsalata
Alan DeKok wrote: Why did you add Auth-Type = Accept to the server? It's breaking EAP. Alan DeKok. Auth-Type = EAP? A few folks had mentioned to us that using the EAP auth type was a bad idea. Why? No idea. It seems obvious, so we'll give it a shot. -- Drew Linsalata The

Re: EAP (PEAP) problems

2006-06-01 Thread Phil Mayers
Drew Linsalata wrote: Alan DeKok wrote: Why did you add Auth-Type = Accept to the server? It's breaking EAP. Alan DeKok. Auth-Type = EAP? A few folks had mentioned to us that using the EAP auth type was a bad idea. Why? No idea. It seems obvious, so we'll give it a shot. No.

Re: EAP (PEAP) problems

2006-06-01 Thread Alan DeKok
Drew Linsalata [EMAIL PROTECTED] wrote: Auth-Type = EAP? A few folks had mentioned to us that using the EAP auth type was a bad idea. Why? No idea. It seems obvious, so we'll give it a shot. NO! Read the documentation in eap.conf for why it's a bad idea. The solution to one broken

EAP (PEAP) problems

2006-05-31 Thread Drew Linsalata
This is freeradius 1.1.1 with a Proxim/Orinoco AP700. We're configured to use PEAP. We seem to be hung up on the EAP start from the AP. Here's some log output. Note the No EAP Start part, which I think tells us that the AP isn't relaying the EAP Start properly from the supplicant. Any

Re: EAP (PEAP) problems

2006-05-31 Thread Alan DeKok
Drew Linsalata [EMAIL PROTECTED] wrote: rad_recv: Access-Request packet from host ***.***.***.***:6001, id=22, length=154 User-Name = testtwo ... EAP-Message = 0x0204000c017465737474776f ... Wed May 31 13:50:59 2006 : Debug: rad_check_password: Found Auth-Type Accept

PEAP problems, never see an Access-Accept

2006-02-02 Thread Jorgen Rosink
Had a hard time to even start FreeRadius on my Debian Unstable system with a working PEAP module (yes, I'm aware of OpenSSL licences and eap_tls / eap_peap linking problems with Debian, _now_ ;-) ) I'm currently using the 20060202-snapshot. With this version (also tried 20060130, same behaviour)

Re: PEAP problems, never see an Access-Accept

2006-02-02 Thread Alan DeKok
Jorgen Rosink [EMAIL PROTECTED] wrote: Had a hard time to even start FreeRadius on my Debian Unstable system with a working PEAP module (yes, I'm aware of OpenSSL licences and eap_tls / eap_peap linking problems with Debian, _now_ ;-) ) I'm currently using the 20060202-snapshot. With this

Re: PEAP problems, never see an Access-Accept

2006-02-02 Thread Jorgen Rosink
On 2/3/06, Alan DeKok [EMAIL PROTECTED] wrote: Jorgen Rosink [EMAIL PROTECTED] wrote: Had a hard time to even start FreeRadius on my Debian Unstable system with a working PEAP module (yes, I'm aware of OpenSSL licences and eap_tls / eap_peap linking problems with Debian, _now_ ;-) ) I'm

FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Hello all, I am trying to configure FreeRADIUS with PEAP support. Here are my specs: OS: FreeBSD 5.4 OpenSSL: version 0.9.7d FreeRADIUS: 1.0.5 I have tested the configuration with EAP/TLS and it works just fine however, when I change default_eap_type = tls to default_eap_type = peap in the

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Zoltan A. Ori
On Monday 02 January 2006 06:32, Alhagie Puye wrote: rlm_eap: Loaded and initialized type tls rlm_eap: No such sub-type for default EAP type peap Bus error (core dumped) bash-2.05b# Do you have peap { default_eap_type = mschapv2 } in your eap.conf?

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
with PEAP problems On Monday 02 January 2006 06:32, Alhagie Puye wrote: rlm_eap: Loaded and initialized type tls rlm_eap: No such sub-type for default EAP type peap Bus error (core dumped) bash-2.05b# Do you have peap { default_eap_type = mschapv2

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Zoltan A. Ori
On Monday 02 January 2006 07:34, Alhagie Puye wrote: Do you have  peap {  default_eap_type = mschapv2  } in your eap.conf? Yes, I do. And, was MSCHAP instantiated? A complete debug output might help since the problem may begin elsewhere and only

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Zoltan A. Ori
On Monday 02 January 2006 07:34, Alhagie Puye wrote: rlm_eap: No such sub-type for default EAP type peap Bus error (core dumped) bash-2.05b# I take it all back. It shouldn't have dumped core. I looked right over that. Zoltan Ori - List info/subscribe/unsubscribe? See

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Title: Re: FreeRADIUS with PEAP problems I went ahead and recompiled from source and also used the --disable-shared options. It is not core-dumping but PEAP is still failing though Here is a complete debug output as you requested: freebsd# radiusd -X -AStarting - reading configuration

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Alan DeKok
Alhagie Puye [EMAIL PROTECTED] wrote: rlm_eap: Loaded and initialized type tls rlm_eap: No such sub-type for default EAP type peap Try reading eap.conf, and uncommenting the peap section. I'm not sure how to make that error message more descriptive, or update the comments in eap.conf so

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Title: Re: FreeRADIUS with PEAP problems From: [EMAIL PROTECTED] on behalf of Alan DeKokSent: Mon 1/2/2006 2:28 PMTo: FreeRadius users mailing listSubject: Re: FreeRADIUS with PEAP problems Thanks Alan for the reply. The "peap" section was already uncommented. Here

Re: FreeRADIUS with PEAP problems

2006-01-02 Thread Alan DeKok
Alhagie Puye [EMAIL PROTECTED] wrote: Here is exactly what my eap.conf file looks like (I have removed every = line that is commented) ... tls { ... peap { default_eap_type =3D mschapv2 } sigh So you didn't just

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
Title: Re: FreeRADIUS with PEAP problems From: [EMAIL PROTECTED] on behalf of Alhagie PuyeSent: Mon 1/2/2006 3:43 PMTo: FreeRadius users mailing listSubject: RE: FreeRADIUS with PEAP problems From: [EMAIL PROTECTED] on behalf of Alan DeKokSent: Mon 1/2/2006 2:28 PMTo

RE: FreeRADIUS with PEAP problems

2006-01-02 Thread Alhagie Puye
From: [EMAIL PROTECTED] on behalf of Alan DeKok Sent: Mon 1/2/2006 5:57 PM To: FreeRadius users mailing list Subject: Re: FreeRADIUS with PEAP problems Alhagie Puye [EMAIL PROTECTED] wrote: Here is exactly what my eap.conf file looks like (I have removed

Re: peap problems

2005-01-27 Thread ealatalo
Quoting Michael Griego [EMAIL PROTECTED]: I'm guessing you're using the Windows XP supplicant? This looks like a classic case of your CA certificate not being present on the client machine. --Mike --- Michael Griego Wireless LAN Project Manager The

Re: peap problems

2005-01-25 Thread Michael Griego
I'm guessing you're using the Windows XP supplicant? This looks like a classic case of your CA certificate not being present on the client machine. --Mike --- Michael Griego Wireless LAN Project Manager The University of Texas at Dallas ealatalo wrote: Quoting

peap problems

2005-01-24 Thread ealatalo
Hi! I'm trying to configure freeradius with peap autentication. I use winxp for client. When starting autentication, I get following error. Can somebody help me and tell what is going wrong. I had made changes radius.conf, eap.conf, users and clients.conf files. Should I make changes huntsgroup

Re: peap problems

2005-01-24 Thread ealatalo
Hi! I'm trying to configure freeradius with peap autentication. I use winxp for client. When starting autentication, I get following error. Can somebody help me and tell what is going wrong. I had made changes radius.conf, eap.conf, users and clients.conf files. Should I make changes

EAP-PEAP Problems: module eap returns invalid for request 8 and auth: Failed to validate the user.

2004-02-18 Thread José Luis Solano
Hi alll !!! I use: freeradius-snapshot-20040216, openssl.0.9.7c, pcmcia card cisco and D-Link access point, XP client I would like to run PEAP but freeradius show me the following error. Please, look my authenticate and authorize modules!!! any idea?? thanks in

Re: EAP-PEAP Problems: module eap returns invalid for request 8 and auth: Failed to validate the user.

2004-02-18 Thread Michael Griego
Jose, You've sent quite a bit of information to the list, but it's been pretty much useless... The portion of the log that you are sending does not include the *reason* that the authentication is failing. Please post the entire portion of the log for this request (or put it on a website

Re: EAP-PEAP Problems: module eap returns invalid for request8 and auth: Failed to validate the user.

2004-02-18 Thread Michael Griego
rlm_eap: EAP/mschapv2 rlm_eap: processing type mschapv2 modcall: entering group Auth-Type for request 7 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: No LM-Password or

Re: Freeradius PEAP Problems

2004-02-11 Thread Alan DeKok
Lionel Gavage [EMAIL PROTECTED] wrote: even with this option, the problem is always present! an idea ? shrug Buy a better client? The tunneled session MUST include an EAP-Identity packet, which is where the user name comes from. If the client doesn't send it, don't complain that

Re: Freeradius PEAP Problems

2004-02-09 Thread Alan DeKok
Lionel Gavage [EMAIL PROTECTED] wrote: I use FreeRadius snapshot 20040129 with EAP/TLS EAP/TTLS and EAP/PEAP. I try to set up PEAP/MS-CHAPv2 but i've the error rlm_mschap: We require a User-Name for MS-CHAPv2. However I sending well a login/pass. I use Aegis Client under Windows XP. Look

RE: Freeradius PEAP Problems

2004-02-09 Thread Lionel Gavage
even with this option, the problem is always present! an idea ? Lionel Gavage -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de Alan DeKok Envoyé : lundi 9 février 2004 16:45 À : [EMAIL PROTECTED] Objet : Re: Freeradius PEAP Problems Lionel Gavage [EMAIL

Re: Freeradius PEAP Problems

2004-02-09 Thread José Luis Solano
PM Subject: RE: Freeradius PEAP Problems Activated the TTLS module: ttls { default_eap_type = md5 use_tunneled_reply = no } and it's all. Lionel Gavage -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de José Luis Solano Envoyé

RE: Freeradius PEAP Problems

2004-02-09 Thread Lionel Gavage
to you if u want. Lionel Gavage -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de José Luis Solano Envoyé : lundi 9 février 2004 17:32 À : [EMAIL PROTECTED] Objet : Re: Freeradius PEAP Problems Sorry Lionel!!! Another question. I have changed my

Re: Freeradius PEAP Problems

2004-02-09 Thread José Luis Solano
- Original Message - From: Lionel Gavage [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, February 09, 2004 5:31 PM Subject: RE: Freeradius PEAP Problems Hi José, I use a freeradius snapshot because TTLS isn't in rpm package. You must have the TLS module to use TTLS module

RE: Freeradius PEAP Problems

2004-02-09 Thread Lionel Gavage
Sorry it doesn't work :( Lionel Gavage -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de Lionel Gavage Envoyé : lundi 9 février 2004 17:48 À : [EMAIL PROTECTED] Objet : RE: Freeradius PEAP Problems Oki thks Alan i found thanks to you. I added