> Hello, > > I am trying to implement WPA Enterprise / 802.1X, Freeradius and > Kerberos. The client is a Linksys running DD-WRT. The Supplicant is > Mac OS Laptop. Both are most recent versions of OS. > > I can exececute radtest on localhost and authenticate through > Freeradius to my KDC. > I can get my wireless AP to authenticate through WPA if the user is > located in /etc/raddb/users. > I cannot get all the pieces working together. Laptop->AP->Freeradius- > >Kerberos. > ... > server inner-tunnel { > +- entering group authorize {...} > ++[chap] returns noop > ++[mschap] returns noop > ++[unix] returns notfound > [suffix] No '@' in User-Name = "tester", looking up realm NULL > [suffix] No such realm "NULL" > ++[suffix] returns noop > ++[control] returns noop > [eap] EAP packet type response id 6 length 11 > [eap] No EAP Start, assuming it's an on-going EAP conversation > ++[eap] returns updated > [files] users: Matched entry DEFAULT at line 1 > ++[files] returns ok > ++[expiration] returns noop > ++[logintime] returns noop > ++[pap] returns noop > Found Auth-Type = EAP > +- entering group authenticate {...} > [eap] EAP Identity > [eap] processing type mschapv2 ...
Kerberos module can't authenticate mschap requests. Only pap. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html