Hi, Jean-Paul, good morning!!!

yes, I think!!! But could you review my radiusd.conf, please. Some variables
have other values and "ignore_unknown_eap_types = no" not exists in my
radiusd.conf.



Note:
For your configuration, perhaps you are using XSupplicant client under
linux, is it correct?



Thanks JP!!! ;)

-------------------
eap {
  default_eap_type = tls
  timer_expire     = 60

  md5 {
  }

  leap {
  }

  tls {
    private_key_password = XXXXXX
    private_key_file = /usr/local/openssl/ssl/certs/server/server.pem
    certificate_file = /usr/local/openssl/ssl/certs/server/server.pem
    CA_file = /usr/local/openssl/ssl/certs/ca/ca.pem
    dh_file = /usr/local/openssl/ssl/certs/dh
    random_file = /usr/local/openssl/ssl/certs/random
    fragment_size = 1024
    include_length = yes
  }

  ttls {
    default_eap_type=tls
    use_tunneled_reply=no
   }

   peap {
     default_eap_type=mschapv2
     copy_request_to_tunnel=yes
    }

 }


José Luis Solano
SGI - Soluciones Globales Internet S.A.
Delegación Regional Sur
[EMAIL PROTECTED]
(+34) 954.088.060
----- Original Message -----
From: "Jean-Paul Chapalain" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 17, 2004 9:46 AM
Subject: Re: Problems!!!!!!!!!!!!!!!!!!! (again)


> Hi José,
>
> Check if "modules" section in radiusd.conf looks like this :
>   modules {
>          eap {
>                  default_eap_type = tls
>                  timer_expire     = 60
>                  ignore_unknown_eap_types = no
>                  md5 {
>                  }
>                  leap {
>                  }
>                  tls {
>                          private_key_password = <deleted>
>                          private_key_file = /etc/1x/server.gicm.net.pem
>                          certificate_file = /etc/1x/server.gicm.net.pem
>                          CA_file = /etc/1x/root.pem
>                          dh_file = /etc/1x/DH
>                          random_file = /etc/1x/random
>                          fragment_size = 1024
>                          include_length = yes
>                  }
>                  ttls {
>                          default_eap_type = md5
>                          copy_request_to_tunnel = no
>                          use_tunneled_reply = no
>                  }
>                   peap {
>                          default_eap_type = mschapv2
>                  }
>                  mschapv2 {
>                  }
>          }
> }
>
> Regards,
>
> Jean-Paul.
>
> José Luis Solano wrote:
> >
> > Good morning!!!!!!!!!!!!!!!!!
> >
> >
> > I have installed Freeradius 0.9.3 with RedHat 9 and openssl 0.9.7c. TLS
> > runs ok, but when I try to insert TTLS or PEAP modules in radiusd.conf I
> > get the following error when I try to run freeradius:
> >
> >
> > ----------------------------
> > ...
> > Module: Loaded eap
> >  eap: default_eap_type = "tls"
> >  eap: timer_expire = 60
> > rlm_eap: Loaded and initialized the type md5
> > rlm_eap: Loaded and initialized the type leap
> >  tls: rsa_key_exchange = no
> >  tls: dh_key_exchange = yes
> >  tls: rsa_key_length = 512
> >  tls: dh_key_length = 512
> >  tls: verify_depth = 0
> >  tls: CA_path = "(null)"
> >  tls: pem_file_type = yes
> >  tls: private_key_file =
"/usr/local/openssl/ssl/certs/server/server.pem"
> >  tls: certificate_file =
"/usr/local/openssl/ssl/certs/server/server.pem"
> >  tls: CA_file = "/usr/local/openssl/ssl/certs/ca/ca.pem"
> >  tls: private_key_password = "izadisan"
> >  tls: dh_file = "/usr/local/openssl/ssl/certs/dh"
> >  tls: random_file = "/usr/local/openssl/ssl/certs/random"
> >  tls: fragment_size = 1024
> >  tls: include_length = yes
> > rlm_eap_tls: conf N ctx stored
> > rlm_eap: Loaded and initialized the type tls
> > rlm_eap: Failed to link EAP-Type/ttls: file not found
> > radiusd.conf[600]: eap: Module instantiation failed.
> > <<<<<<<<<<<<<<<<<<<<<<<<<<<<<=================================
> > -----------------------------------
> >
> > So, I'm going to change my configuration.
> > Lionel, could you tell me your configuration please, and where can I
> > find the versions you are using?
> >
> >
> >
> > Thanks in advance?
> >
> >
> >
> >
> > José Luis Solano
> > SGI - Soluciones Globales Internet S.A.
> > Delegación Regional Sur
> > [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> > (+34) 954.088.060
>
> --
> --  Jean-Paul Chapalain - GICM -  Resp. Reseaux et Infrastructure
> --  32 rue Mirabeau - Le Relecq-Kerhuon - 29808 Brest Cedex 9, FRANCE
> --  Tel +33298002873 - Fax +33298284005 - [EMAIL PROTECTED]
> --  Key Fingerprint: 192C 1CFE F24A 050D F280 A086 AF15 8631 3ABB 4C7D
>


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to