Hello Leon,

As far that I know EAP MD5 is Mac authentication and can’t be used for 802.1x.

Thanks,

Ludovic Zammit
Product Support Engineer Principal

Cell: +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:         <https://community.akamai.com/>  
<http://blogs.akamai.com/>  <https://twitter.com/akamai>  
<http://www.facebook.com/AkamaiTechnologies>  
<http://www.linkedin.com/company/akamai-technologies>  
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>

> On Feb 2, 2022, at 8:06 AM, Leon Pinto via PacketFence-users 
> <packetfence-users@lists.sourceforge.net> wrote:
> 
> Hello All,
>  
> I kindly request for help on EAP-MD5 with packetfence 11 with Microsoft AD as 
> the authentication source…
>  
> I am trying to authenticate an older telephony device and unfortunately, it 
> offers only EAP-MD5… The device is rejected with the message eap_md5: 
> Cleartext-Password is required for EAP-MD5 authentication
>  
> The pf can see the device in the AD and seems to do its job… However the 
> radius response is not good and we get the message “eap_md5: 
> Cleartext-Password is required for EAP-MD5 authentication”
>  
> Authenticating against 'msad_voptech_phones' in context 'admin'
>   Authentication SUCCEEDED against msad_voptech_phones (Authentication 
> successful.)
>   Matched against msad_voptech_phones for 'authentication' rule 
> ar_voptech_phones
>     set_role : voptech_test
>     set_unreg_date : 2038-01-18
>   Did not match against msad_voptech_phones for 'administration' rules
>  
> Authenticating against 'msad_voptech_phones' in context 'portal'
>   Authentication SUCCEEDED against msad_voptech_phones (Authentication 
> successful.)
>   Matched against msad_voptech_phones for 'authentication' rule 
> ar_voptech_phones
>     set_role : voptech_test
>     set_unreg_date : 2038-01-18
>   Did not match against msad_voptech_phones for 'adminis
>  
> Auditing
> Auth Status
> Reject
> Auth Status
> eap
> Auto Registration
> No
> Calling Station Identifier
> 00:a8:59:f9:82:0b
> Computer Name
> N/A
> EAP Type
> MD5
> Event Type
> Radius-Access-Request
> IP Address
> Is a Phone
> No
> Created at
> 2022-02-02 16:43:38
> Node Status
> N/A
> Domain
> Profile
> N/A
> Realm
> null
> Reason
> eap_md5: Cleartext-Password is required for EAP-MD5 authentication
> Role
> N/A
> Source
> N/A
> Stripped User Name
> voptechtest
> User Name
> voptechtest
>  
> I tried to change the database hashing to plain text but no luck… Can someone 
> help or guide me in the correct direction?
>  
> Thanks for all your support…
>  
> <image003.png>
>  
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net 
> <mailto:PacketFence-users@lists.sourceforge.net>
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!CXhKUePAQElUhSYGGziXcBTFXxmcotbJIQUArkDuIr2F073fvtrQT11wQqkbUFdu$
>  
> <https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!CXhKUePAQElUhSYGGziXcBTFXxmcotbJIQUArkDuIr2F073fvtrQT11wQqkbUFdu$>

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to