Hello,

I'm trying to activate the Meraki option "Radius Testing" on my access policy.
(the access policy is working well, but the radius testing is mandatory to 
recover a lost connection with radius).

-> My setup is working well with Windows 802.1X / EAP and LDAP source
-> I create a local user in packetfence db (password ntlm) meraki_8021x_test / 
meraki_8021x_test

And try some configuration of profiles, advances radius filter. but i always 
end with a :

Authentication reject. Reason mschap: Program returned code (1) and output 
'Reading winbind reply failed! (0xc0000001)'

Detail :
MS-CHAP-Challenge = 0xde50a834d1fd98271b1b962eebd770d6
Event-Timestamp = "Mar 25 2022 15:10:57 CET"
Stripped-User-Name = "meraki_8021x_test"
FreeRADIUS-Proxied-To = 127.0.0.1
Called-Station-SSID = "Spare"
MS-CHAP-User-Name = "meraki_8021x_test"
Framed-MTU = 1400
Realm = "null"
EAP-Type = MSCHAPv2
NAS-IP-Address = 6.71.121.100
PacketFence-Radius-Ip = "172.16.31.12"
Service-Type = Framed-User
PacketFence-Outer-User = "meraki_8021x_test"
Called-Station-Id = "98:17:79:64:Spare"
NAS-Port-Type = Ethernet PacketFence-KeyBalanced = 
"3976dec62f5c2690c1ebea08a3d5bfe8" PacketFence-NTLMv2-Only = "" 
Calling-Station-Id = "02:00:00:00:00:01" User-Name = "meraki_8021x_test" 
EAP-Message = 
0x021f004c1a021f004731b9be6829e682ec4212799155958748750000000000000000c2b97a83129cfc04d55e96ed32d507a006d6572616b695f38303231785f74657374
 State = 0xb481d5dfb49eca35ffa6c020ae45 MS-CHAP2-Response = 
0x1f65b9be6829e682ec421279915595874875000000083129cfc04d55e96edc05ee743990a629dd32d507a
 Module-Failure-Message = "mschap: Program returned code (1) and output 
'Reading winbind reply failed! (0xc0000001)'" Module-Failure-Message = "mschap: 
Reading winbind reply failed! (0xc0000001)"
User-Password = "******"
SQL-User-Name = "meraki_8021x_test"


How could i just send an radius accept response to meraki test message ?

Regards
Nicolas
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to