2008/8/29 James Yale <[EMAIL PROTECTED]>: > 2008/8/28 <[EMAIL PROTECTED]>: >> hi, >> >> whats wrong with that debug? looked fine here - that should >> end with a happy connection. ntlm_auth got the correct >> response. >> >> alan > > The problem is that when that log ends the WPA supplicant gets: > > -- EAP-MSCHAPV2: Invalid authenticator response in success request > > And the authentication fails. The full logs of the failure are at: > > http://jim.geezas.com/stuff/radius-debugging/eapol-ntlmuser-failure.log > for the supplicant and: > > http://jim.geezas.com/stuff/radius-debugging/radius-ntlmuser-failure.log > for radiusd. > > I'm going to try afew different distributions/versions of FreeRadius > and Samba, perhaps compile from source - presumably this configuration > is fairly common and working elsewhere, so it should work with some > combination (if I find one I'll post it up). > > Thanks, > > James >
To update this, Alan DeKok was right about the issue being with Samba, but rather than using an newer version of Samba an older version was required. I compiled Samba 3.0.32 from source and EAP/MSCHAP authentication now works perfectly on FC9 with the packaged version of FreeRadius 2.0.5. Thanks to both Alans for the help :) James - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
