Hello, has anybody successfully configured the RADIUS authentication using EAP-TTLS on guacamole server? Although I configured EAP-TTLS, when a client's authentication should be optional, the RADIUS extension demands radius key file. Anyway, I created the key file including a cert and a key in PEM format, the RADIUS extension was successfuly initiated afterwards, but I ended up on ERROR message:
"ERROR o.a.g.a.r.RadiusConnectionService - Unable to complete authentication." after calling radAuth.setupRequest(radiusClient, radAcc) in authenticate method. My radius auth. guacamole config follows: radius-hostname: <my_radius_server> radius-auth-port: 1812 radius-shared-secret: <my_share_secret> radius-auth-protocol: eap-ttls radius-eap-ttls-inner-protocol: chap radius-trust-all: true radius-retries: 3 radius-timeout: 30 Maybe somebody with a working configuration might be so kind and point me to the right direction. Regards, Pavel --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
