Hello all,
I'm using freeradius-1.0.2 with AceesPoint Cisco ap1100; I'm
using eap/ttls to authenticate users.
I try to connect to with Xp clients or Mac osX clients; All go wrong.
When using Mac OSX client and 802.1X setup ( authentification TTLS
alone
with PAP Authentication interne TTLS) Mac OSX client obtain the two
certificates: authoritative and server. But it is not connecting. It loops
on authentication process.
Here is the trace from /usr/local/sbin/radiusd -X -A:
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 2
rlm_eap: EAP Identity
rlm_eap: processing type tls
rlm_eap_tls: Requiring client certificate
rlm_eap_tls: Initiate
rlm_eap_tls: Start returned 1
modcall[authenticate]: module "eap" returns handled for request 2
modcall: group authenticate returns handled for request 2
Sending Access-Challenge of id 127 to 139.124.3.235:21661
Framed-MTU = 576
Service-Type = Framed-User
EAP-Message = 0x010300060d20
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x37a760f21d2a0b8d0fdd492ccd5e7d17
Finished request 2
Going to the next request
--- Walking the entire request list ---
What means
rlm_eap_tls: Requiring client certificate
rlm_eap_tls: Start returned 1
modcall[authenticate]: module "eap" returns handled for request 2
How should I fix this?
Any help will be appreciated.
I have configured freeradius and openssl using these articles:
http://www.alphacore.net/spip/article.php3?id_article=45
http://www.alphacore.net/spip/article.php3?id_article=33
http://rbirri.9online.fr/howto/Freeradius_+_TTLS.html
Regards,
Maurice
***********************************************************
* e-mail : [EMAIL PROTECTED] *
----------------------------------------------------------
* Maurice Bourguel + *
* CIRM - MENRT-CNRS-SMF + *
* case 916, 163 Avenue de Luminy + tel (33) 04 91 83 30 23*
* 13288 Marseille Cedex 9 + fax (33) 04 91 83 30 05*
***********************************************************
*http://www.cirm.univ-mrs.fr *
***********************************************************
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
