This is a discussion on freeradius & ntlm_auth within the FreeRADIUS Users forums, part of the Networking and Network Related category; Hello, I'm using freeradius 1.0.2 in PEAP-mschapv2, All is ok when I authenticate an user who ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hello,
I'm using freeradius 1.0.2 in PEAP-mschapv2, All is ok when I authenticate an user who is in the users file but when I want to authenticate a user who is in an active directory database, I have this error : rad_recv: Access-Request packet from host 10.74.1.110:3072, id=3D0, length= =3D211 User-Name =3D "mobil" NAS-IP-Address =3D 10.74.1.110 Called-Station-Id =3D "000f6610df4b" Calling-Station-Id =3D "000e35be0159" NAS-Identifier =3D "000f6610df4b" NAS-Port =3D 230 Framed-MTU =3D 1400 State =3D 0xe344a026b507ba325ecaf835d7dcbe63 NAS-Port-Type =3D Wireless-802.11 EAP-Message =3D 0x02070050190017030100204ac713ab760161e2057ddf6ea6 35b3eefbe= 3241b15c89cd1a2777955084d1840170301002015279db8460 68b3791d9b6b9b187235ab7ae= f20e0d769d46770cfa3005c33eed Message-Authenticator =3D 0xf49104f1efe72794cbee86bf86af00df Processing the authorize section of radiusd.conf [...] rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Tunneled data is valid. //The problem is here, if the user is in the users file, the following line is "Success" but here... rlm_eap_peap: Had sent TLV failure, rejecting. rlm_eap: Handler failed in EAP/peap rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 50 modcall: group authenticate returns invalid for request 50 auth: Failed to validate the user. Delaying request 50 for 1 seconds Finished request 50 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Sending Access-Reject of id 0 to 10.74.1.110:3072 EAP-Message =3D 0x04070004 Message-Authenticator =3D 0x00000000000000000000000000000000 Cleaning up request 50 ID 0 with timestamp 4264dda6 Nothing to do. Sleeping until we see a request.=20 So, if you have an idea about that, please tell me. Thank you, Sylvain Clerc. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html |