Michael Torrie wrote:
Yet I still have the problem where after the Access-Challenge is sent,
the Vista clients just silently drop things and the connection fails.
This is the behavior that I know I would get if I don't have the
required OID in the certificate. Yet it is there! I ran
I've read through the list archives about people's problems with Vista
and FreeRadius, including the recent messages on this list in January,
and a couple of exchanges back in 2006 and 2007. I am running
FreeRadius 1.1.7 on a RHEL 4 box, compiled from Fedora 8's FreeRadius
SRPM. According to the
Alan DeKok wrote:
Why did you add Auth-Type = Accept to the server? It's breaking EAP.
Alan DeKok.
Auth-Type = EAP?
A few folks had mentioned to us that using the EAP auth type was a bad
idea. Why? No idea. It seems obvious, so we'll give it a shot.
--
Drew Linsalata
The
Drew Linsalata wrote:
Alan DeKok wrote:
Why did you add Auth-Type = Accept to the server? It's breaking EAP.
Alan DeKok.
Auth-Type = EAP?
A few folks had mentioned to us that using the EAP auth type was a bad
idea. Why? No idea. It seems obvious, so we'll give it a shot.
No.
Drew Linsalata [EMAIL PROTECTED] wrote:
Auth-Type = EAP?
A few folks had mentioned to us that using the EAP auth type was a bad
idea. Why? No idea. It seems obvious, so we'll give it a shot.
NO! Read the documentation in eap.conf for why it's a bad idea.
The solution to one broken
This is freeradius 1.1.1 with a Proxim/Orinoco AP700. We're configured
to use PEAP. We seem to be hung up on the EAP start from the AP.
Here's some log output. Note the No EAP Start part, which I think
tells us that the AP isn't relaying the EAP Start properly from the
supplicant.
Any
Drew Linsalata [EMAIL PROTECTED] wrote:
rad_recv: Access-Request packet from host ***.***.***.***:6001, id=22,
length=154
User-Name = testtwo
...
EAP-Message = 0x0204000c017465737474776f
...
Wed May 31 13:50:59 2006 : Debug: rad_check_password: Found Auth-Type
Accept
Had a hard time to even start FreeRadius on my Debian Unstable system
with a working PEAP module (yes, I'm aware of OpenSSL licences and
eap_tls / eap_peap linking problems with Debian, _now_ ;-) ) I'm
currently using the 20060202-snapshot. With this version (also tried
20060130, same behaviour)
Jorgen Rosink [EMAIL PROTECTED] wrote:
Had a hard time to even start FreeRadius on my Debian Unstable system
with a working PEAP module (yes, I'm aware of OpenSSL licences and
eap_tls / eap_peap linking problems with Debian, _now_ ;-) ) I'm
currently using the 20060202-snapshot. With this
On 2/3/06, Alan DeKok [EMAIL PROTECTED] wrote:
Jorgen Rosink [EMAIL PROTECTED] wrote:
Had a hard time to even start FreeRadius on my Debian Unstable system
with a working PEAP module (yes, I'm aware of OpenSSL licences and
eap_tls / eap_peap linking problems with Debian, _now_ ;-) ) I'm
Hello all,
I am trying to configure FreeRADIUS with PEAP support.
Here are my specs:
OS: FreeBSD 5.4
OpenSSL: version 0.9.7d
FreeRADIUS: 1.0.5
I have tested the configuration with EAP/TLS and it works just fine
however, when I change default_eap_type = tls to default_eap_type =
peap in the
On Monday 02 January 2006 06:32, Alhagie Puye wrote:
rlm_eap: Loaded and initialized type tls
rlm_eap: No such sub-type for default EAP type peap
Bus error (core dumped)
bash-2.05b#
Do you have
peap {
default_eap_type = mschapv2
}
in your eap.conf?
with PEAP problems
On Monday 02 January 2006 06:32, Alhagie Puye wrote:
rlm_eap: Loaded and initialized type tls
rlm_eap: No such sub-type for default EAP type peap Bus
error (core
dumped) bash-2.05b#
Do you have
peap {
default_eap_type = mschapv2
On Monday 02 January 2006 07:34, Alhagie Puye wrote:
Do you have
peap {
default_eap_type = mschapv2
}
in your eap.conf?
Yes, I do.
And, was MSCHAP instantiated?
A complete debug output might help since the problem may begin elsewhere and
only
On Monday 02 January 2006 07:34, Alhagie Puye wrote:
rlm_eap: No such sub-type for default EAP type peap Bus
error (core
dumped) bash-2.05b#
I take it all back. It shouldn't have dumped core. I looked right over that.
Zoltan Ori
-
List info/subscribe/unsubscribe? See
Title: Re: FreeRADIUS with PEAP problems
I went ahead and recompiled
from source and also used the --disable-shared options.
It is not core-dumping but PEAP is still
failing though
Here is a complete debug
output as you requested:
freebsd# radiusd -X -AStarting - reading configuration
Alhagie Puye [EMAIL PROTECTED] wrote:
rlm_eap: Loaded and initialized type tls
rlm_eap: No such sub-type for default EAP type peap
Try reading eap.conf, and uncommenting the peap section.
I'm not sure how to make that error message more descriptive, or
update the comments in eap.conf so
Title: Re: FreeRADIUS with PEAP problems
From:
[EMAIL PROTECTED] on behalf of
Alan DeKokSent: Mon 1/2/2006 2:28 PMTo: FreeRadius users
mailing listSubject: Re: FreeRADIUS with PEAP problems
Thanks Alan for the reply. The "peap" section was already
uncommented.
Here
Alhagie Puye [EMAIL PROTECTED] wrote:
Here is exactly what my eap.conf file looks like (I have removed every =
line that is commented)
...
tls {
...
peap {
default_eap_type =3D mschapv2
}
sigh So you didn't just
Title: Re: FreeRADIUS with PEAP problems
From:
[EMAIL PROTECTED] on behalf of
Alhagie PuyeSent: Mon 1/2/2006 3:43 PMTo: FreeRadius users
mailing listSubject: RE: FreeRADIUS with PEAP problems
From:
[EMAIL PROTECTED] on behalf of
Alan DeKokSent: Mon 1/2/2006 2:28 PMTo
From: [EMAIL PROTECTED] on behalf of Alan DeKok
Sent: Mon 1/2/2006 5:57 PM
To: FreeRadius users mailing list
Subject: Re: FreeRADIUS with PEAP problems
Alhagie Puye [EMAIL PROTECTED] wrote:
Here is exactly what my eap.conf file looks like (I have removed
Quoting Michael Griego [EMAIL PROTECTED]:
I'm guessing you're using the Windows XP supplicant? This looks like a
classic case of your CA certificate not being present on the client machine.
--Mike
---
Michael Griego
Wireless LAN Project Manager
The
I'm guessing you're using the Windows XP supplicant? This looks like a
classic case of your CA certificate not being present on the client machine.
--Mike
---
Michael Griego
Wireless LAN Project Manager
The University of Texas at Dallas
ealatalo wrote:
Quoting
Hi!
I'm trying to configure freeradius with peap autentication. I use winxp for
client. When starting autentication, I get following error. Can somebody help
me and tell what is going wrong. I had made changes radius.conf, eap.conf,
users and clients.conf files. Should I make changes huntsgroup
Hi!
I'm trying to configure freeradius with peap autentication. I use winxp for
client. When starting autentication, I get following error. Can somebody
help
me and tell what is going wrong. I had made changes radius.conf, eap.conf,
users and clients.conf files. Should I make changes
Hi alll !!!
I use: freeradius-snapshot-20040216,
openssl.0.9.7c, pcmcia card cisco and D-Link access point, XP
client
I would like to run PEAP but freeradius show me the
following error. Please, look my authenticate and authorize
modules!!!
any idea??
thanks in
Jose,
You've sent quite a bit of information to the list, but it's been pretty
much useless... The portion of the log that you are sending does not
include the *reason* that the authentication is failing. Please post
the entire portion of the log for this request (or put it on a website
rlm_eap: EAP/mschapv2
rlm_eap: processing type mschapv2
modcall: entering group Auth-Type for request 7
rlm_mschap: No User-Password configured. Cannot create LM-Password.
rlm_mschap: No User-Password configured. Cannot create NT-Password.
rlm_mschap: No LM-Password or
Lionel Gavage [EMAIL PROTECTED] wrote:
even with this option, the problem is always present!
an idea ?
shrug Buy a better client?
The tunneled session MUST include an EAP-Identity packet, which is
where the user name comes from. If the client doesn't send it, don't
complain that
Lionel Gavage [EMAIL PROTECTED] wrote:
I use FreeRadius snapshot 20040129 with EAP/TLS EAP/TTLS and EAP/PEAP.
I try to set up PEAP/MS-CHAPv2 but i've the error rlm_mschap: We require a
User-Name for MS-CHAPv2.
However I sending well a login/pass. I use Aegis Client under Windows XP.
Look
even with this option, the problem is always present!
an idea ?
Lionel Gavage
-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] la part de Alan
DeKok
Envoyé : lundi 9 février 2004 16:45
À : [EMAIL PROTECTED]
Objet : Re: Freeradius PEAP Problems
Lionel Gavage [EMAIL
PM
Subject: RE: Freeradius PEAP Problems
Activated the TTLS module:
ttls {
default_eap_type = md5
use_tunneled_reply = no
}
and it's all.
Lionel Gavage
-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] la part de José
Luis Solano
Envoyé
to you if u want.
Lionel Gavage
-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] la part de José
Luis Solano
Envoyé : lundi 9 février 2004 17:32
À : [EMAIL PROTECTED]
Objet : Re: Freeradius PEAP Problems
Sorry Lionel!!! Another question.
I have changed my
- Original Message -
From: Lionel Gavage [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, February 09, 2004 5:31 PM
Subject: RE: Freeradius PEAP Problems
Hi José,
I use a freeradius snapshot because TTLS isn't in rpm package.
You must have the TLS module to use TTLS module
Sorry it doesn't work :(
Lionel Gavage
-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] la part de Lionel
Gavage
Envoyé : lundi 9 février 2004 17:48
À : [EMAIL PROTECTED]
Objet : RE: Freeradius PEAP Problems
Oki thks Alan i found thanks to you.
I added
35 matches
Mail list logo