Philip Ershler <[EMAIL PROTECTED]> wrote:
> I cannot seem to get the radius server to authenticate against
> OpenDirectory.  Instead it seems to insist on trying to authenticate
> against eap_unix

  There is no "eap_unix" format.  What's happening is that a normal
username/password authentication is sent inside of the EAP-TTLS
tunnel.  The server processes this tunneled authentication in pretty
much the same way as a normal username/password autentication request.

  You have something (the "users" file, probably) setting "Auth-Type =
System", so that's getting picked up and used.

  The solution is twofold:

  1) get normal username/password authentication working to eDirectory
     ignore EAP.  Ignore wireless.  Use "radtest" to send test packets

  2) once that works, try EAP-TTLS.  Everything shoukld work fine.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to