Yes please.
I am more than ready to debug, since the problem are back again this
morning.
Which is strange since it worked perfectly yesterday and no changes since.
\Peter
On 15/04/2025 15.39, Zammit, Ludovic wrote:
Hello Peter,
If you want to troubleshoot, let me know.
Thanks,
*Ludovic Zammit*
*Product Support Engineer Principal Lead*
*Cell:* +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us: <https://community.akamai.com>
<http://blogs.akamai.com> <https://twitter.com/akamai>
<http://www.facebook.com/AkamaiTechnologies>
<http://www.linkedin.com/company/akamai-technologies>
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>
On Apr 14, 2025, at 12:34 PM, Peter Jensen via PacketFence-users
<packetfence-users@lists.sourceforge.net> wrote:
This Message Is From an External Sender
This message came from outside your organization.
Yes
Now they are failing every time.
It must be a PEAP issue on ubuntu clients. I have moved to TTLS with
MSCHAPv2 and that works fine.
So i will not spend anymore time debugging the PEAP issue, since i
did something else doing debugging.
On 14/04/2025 14.56, Zammit, Ludovic wrote:
Hello Peter,
Are you able to replicate a failure on demand ?
Thanks,
*Ludovic Zammit*
*Product Support Engineer Principal Lead*
*Cell:*+1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:
<https://community.akamai.com/><http://blogs.akamai.com/><https://urldefense.com/v3/__https://twitter.com/akamai__;!!GjvTz_vk!QzMisTy13cnSV6E_l2k1wfzuQ6Kw-BZeeF0rbQ_sBpH7iJYz7ZTNNEVVB4j8hv5kbwY9BsQ6hdhjHfpfbmqKJZb0nBe3cZEyFSTjbg$><https://urldefense.com/v3/__http://www.facebook.com/AkamaiTechnologies__;!!GjvTz_vk!QzMisTy13cnSV6E_l2k1wfzuQ6Kw-BZeeF0rbQ_sBpH7iJYz7ZTNNEVVB4j8hv5kbwY9BsQ6hdhjHfpfbmqKJZb0nBe3cZFrmCo2Qw$><https://urldefense.com/v3/__http://www.linkedin.com/company/akamai-technologies__;!!GjvTz_vk!QzMisTy13cnSV6E_l2k1wfzuQ6Kw-BZeeF0rbQ_sBpH7iJYz7ZTNNEVVB4j8hv5kbwY9BsQ6hdhjHfpfbmqKJZb0nBe3cZHgBhA0ww$><https://urldefense.com/v3/__http://www.youtube.com/user/akamaitechnologies?feature=results_main__;!!GjvTz_vk!QzMisTy13cnSV6E_l2k1wfzuQ6Kw-BZeeF0rbQ_sBpH7iJYz7ZTNNEVVB4j8hv5kbwY9BsQ6hdhjHfpfbmqKJZb0nBe3cZGBoyupxg$>
On Apr 11, 2025, at 9:13 AM, Peter Jensen via
PacketFence-users<packetfence-users@lists.sourceforge.net>wrote:
This Message Is From an External Sender
This message came from outside your organization.
Hi all,
We’re currently experiencing issues with Linux devices trying to
connect via 802.1X using PEAP, both on wired and wireless
connections, and I’m wondering if anyone else has encountered
similar problems.
We have a connection profile configured that filters for MSCHAPv2
and PEAP. It also verifies that the MAC address of the device is
present in a specific MAC list (set to Any), and all other
conditions are combined using AND logic.
If the MAC address is found on the list, an authentication profile
is selected which validates the username and password against our
Windows AD, and ensures the user is a member of a specific group,
such as 802.1x-users.
The issue we’re seeing is that users often have to try multiple
times (e.g., disabling/enabling the network interface) before they
can successfully connect. In some cases, they are unable to connect
at all until hours later, even when trying the exact same credentials.
The radius.log shows the typical MSCHAP error about invalid
credentials. However, the credentials are definitely correct —
they’ve been verified multiple times and eventually do work.
There is no related entry in packetfence.log until the radius.log
finally shows a successful authentication.
Could this be caused by the MAC address condition in the connection
profile, or is it something else entirely?
Interestingly, our Windows clients use EAP-TTLS instead, and they
work perfectly every time — so the problem seems to be isolated to
Linux clients using PEAP.
Has anyone seen or experienced this kind of behavior before?
Any insight or suggestions would be greatly appreciated!
Peter Jensen
Consultant
ScitoDK
+45 40 73 17 37 <tel:+45 40 73 17 37>
p...@scito.dk <mailto:p...@scito.dk>
linkedin
<https://urldefense.com/v3/__https://www.linkedin.com/in/senseipeter/__;!!GjvTz_vk!Ur9jKcFZSjJjJXq1MJRAE4ZpWTtkkJfyRjECZhZQpotAMV1TC8YFtQWAKS_v8_YmXzaugCYayj1lK3Mvuexw9cXI_EXjnYtaxKaJig$>
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!Ur9jKcFZSjJjJXq1MJRAE4ZpWTtkkJfyRjECZhZQpotAMV1TC8YFtQWAKS_v8_YmXzaugCYayj1lK3Mvuexw9cXI_EXjnYuWF4dvTw$
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!QzMisTy13cnSV6E_l2k1wfzuQ6Kw-BZeeF0rbQ_sBpH7iJYz7ZTNNEVVB4j8hv5kbwY9BsQ6hdhjHfpfbmqKJZb0nBe3cZH8VQS8Rg$
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
