Hello Nicolas, Did you enable the local-authentication to use a local account ?
Thanks, Ludovic Zammit Product Support Engineer Principal Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On Mar 25, 2022, at 10:23 AM, Nicolas BOULET via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > Hello, > > I'm trying to activate the Meraki option "Radius Testing" on my access > policy. > (the access policy is working well, but the radius testing is mandatory to > recover a lost connection with radius). > > -> My setup is working well with Windows 802.1X / EAP and LDAP source > -> I create a local user in packetfence db (password ntlm) meraki_8021x_test > / meraki_8021x_test > > And try some configuration of profiles, advances radius filter. but i always > end with a : > > Authentication reject. Reason mschap: Program returned code (1) and output > 'Reading winbind reply failed! (0xc0000001)' > > Detail : > MS-CHAP-Challenge = 0xde50a834d1fd98271b1b962eebd770d6 > Event-Timestamp = "Mar 25 2022 15:10:57 CET" > Stripped-User-Name = "meraki_8021x_test" > FreeRADIUS-Proxied-To = 127.0.0.1 > Called-Station-SSID = "Spare" > MS-CHAP-User-Name = "meraki_8021x_test" > Framed-MTU = 1400 > Realm = "null" > EAP-Type = MSCHAPv2 > NAS-IP-Address = 6.71.121.100 > PacketFence-Radius-Ip = "172.16.31.12" > Service-Type = Framed-User > PacketFence-Outer-User = "meraki_8021x_test" > Called-Station-Id = "98:17:79:64:Spare" > NAS-Port-Type = Ethernet PacketFence-KeyBalanced = > "3976dec62f5c2690c1ebea08a3d5bfe8" PacketFence-NTLMv2-Only = "" > Calling-Station-Id = "02:00:00:00:00:01" User-Name = "meraki_8021x_test" > EAP-Message = > 0x021f004c1a021f004731b9be6829e682ec4212799155958748750000000000000000c2b97a83129cfc04d55e96ed32d507a006d6572616b695f38303231785f74657374 > State = 0xb481d5dfb49eca35ffa6c020ae45 MS-CHAP2-Response = > 0x1f65b9be6829e682ec421279915595874875000000083129cfc04d55e96edc05ee743990a629dd32d507a > Module-Failure-Message = "mschap: Program returned code (1) and output > 'Reading winbind reply failed! (0xc0000001)'" Module-Failure-Message = > "mschap: Reading winbind reply failed! (0xc0000001)" > User-Password = "******" > SQL-User-Name = "meraki_8021x_test" > > > How could i just send an radius accept response to meraki test message ? > > Regards > Nicolas > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > <mailto:PacketFence-users@lists.sourceforge.net> > https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!AeZcvic0A4zmuFgj2eA5v8N98xWrUHDd8JV_DHOnWaxKHzdHqdI42u2ottfaMZL2$ > > <https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!AeZcvic0A4zmuFgj2eA5v8N98xWrUHDd8JV_DHOnWaxKHzdHqdI42u2ottfaMZL2$>
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
