Invitation to connect on LinkedIn
LinkedIn Badrul Anuar requested to add you as a connection on LinkedIn: -- Glen, I'd like to add you to my professional network on LinkedIn. - Badrul Accept invitation from Badrul Anuar http://www.linkedin.com/e/ABSVWpZ1_sZ_yf9BG_W25ECMqsoijRbBG-E27EnW_z6-V09s3gIVpd3/blk/I1896551808_2/1BpC5vrmRLoRZcjkkZt5YCpnlOt3RApnhMpmdzgmhxrSNBszYOnPwMe34RdjoVe359bThfjQYOhQkMbPoOcPkQdzkRcj4LrCBxbOYWrSlI/EML_comm_afe/ View invitation from Badrul Anuar http://www.linkedin.com/e/ABSVWpZ1_sZ_yf9BG_W25ECMqsoijRbBG-E27EnW_z6-V09s3gIVpd3/blk/I1896551808_2/39ve30UcjkRdzAUckALqnpPbOYWrSlI/svi/ -- (c) 2010, LinkedIn Corporation- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Authentication Problem With Freeradius WinXP
--- Cleaning up request 5 ID 0 with timestamp 422c41ca Cleaning up request 6 ID 1 with timestamp 422c41ca Cleaning up request 7 ID 2 with timestamp 422c41ca Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 8 ID 3 with timestamp 422c41cd Nothing to do. Sleeping until we see a request. On Sat, 05 Mar 2005 11:04:06 -0500, Alan DeKok [EMAIL PROTECTED] wrote: Badrul Anuar [EMAIL PROTECTED] wrote: after change the eap.conf from tls to peap ... i have solved the problem (refer to the mail. before)... TLS_accept:error in SSLv3 read client certificate A But still can't authenticate betwen the server, SP2 has known inter-operability problems with non-Microsoft RADIUS servers. http://support.microsoft.com/default.aspx?scid=kb;en-us;885453 The cause they list is bullsh*t. The debug log you posted clearly shows this. SP2 is NOT sending any data inside of the TLS tunnel, and FreeRADIUS keeps asking for more. Eventually SP2 gives up, and starts the authentication process again. Install the hotfix, and it should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Authentication Problem With Freeradius WinXP
I try to create authentication between WinXP and Freeradius.
I used, Win XP SP2,
Intel Pro 2100 3B Wireless card
and
RH 8.0, Freeradius 1.0.2
AP : DWL 2100- AP
I have set up the conf and run testing, it's work properly, but the
problem is I can make authentication between my XP and Freeradius.
I dont have idea what is the problem...
thank you in advanced.
Here is the log file:
--
Starting - reading configuration files ...
reread_config: reading radiusd.conf
Config: including file: /usr/local/radius/etc/raddb/proxy.conf
Config: including file: /usr/local/radius/etc/raddb/clients.conf
Config: including file: /usr/local/radius/etc/raddb/snmp.conf
Config: including file: /usr/local/radius/etc/raddb/eap.conf
Config: including file: /usr/local/radius/etc/raddb/sql.conf
main: prefix = /usr/local/radius
main: localstatedir = /usr/local/radius/var
main: logdir = /usr/local/radius/var/log/radius
main: libdir = /usr/local/radius/lib
main: radacctdir = /usr/local/radius/var/log/radius/radacct
main: hostname_lookups = no
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 1024
main: delete_blocked_requests = 0
main: port = 0
main: allow_core_dumps = no
main: log_stripped_names = no
main: log_file = /usr/local/radius/var/log/radius/radius.log
main: log_auth = no
main: log_auth_badpass = no
main: log_auth_goodpass = no
main: pidfile = /usr/local/radius/var/run/radiusd/radiusd.pid
main: user = (null)
main: group = (null)
main: usercollide = no
main: lower_user = no
main: lower_pass = no
main: nospace_user = no
main: nospace_pass = no
main: checkrad = /usr/local/radius/sbin/checkrad
main: proxy_requests = yes
proxy: retry_delay = 5
proxy: retry_count = 3
proxy: synchronous = no
proxy: default_fallback = yes
proxy: dead_time = 120
proxy: post_proxy_authorize = yes
proxy: wake_all_if_all_dead = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
Using deprecated naslist file. Support for this will go away soon.
read_config_files: reading clients
read_config_files: reading realms
radiusd: entering modules setup
Module: Library search path is /usr/local/radius/lib
Module: Loaded exec
exec: wait = yes
exec: program = (null)
exec: input_pairs = request
exec: output_pairs = (null)
exec: packet_type = (null)
rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Module: Instantiated exec (exec)
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
pap: encryption_scheme = crypt
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption = yes
mschap: require_strong = yes
mschap: with_ntdomain_hack = no
mschap: passwd = (null)
mschap: authtype = MS-CHAP
mschap: ntlm_auth = (null)
Module: Instantiated mschap (mschap)
Module: Loaded eap
eap: default_eap_type = tls
eap: timer_expire = 60
eap: ignore_unknown_eap_types = no
eap: cisco_accounting_username_bug = no
tls: rsa_key_exchange = no
tls: dh_key_exchange = yes
tls: rsa_key_length = 512
tls: dh_key_length = 512
tls: verify_depth = 0
tls: CA_path = (null)
tls: pem_file_type = yes
tls: private_key_file = /usr/local/radius/etc/raddb/certs/enggang.pem
tls: certificate_file = /usr/local/radius/etc/raddb/certs/enggang.pem
tls: CA_file = /usr/local/radius/etc/raddb/certs/root.pem
tls: private_key_password = whatever
tls: dh_file = /usr/local/radius/etc/raddb/certs/dh
tls: random_file = /usr/local/radius/etc/raddb/certs/random
tls: fragment_size = 1024
tls: include_length = yes
tls: check_crl = yes
tls: check_cert_cn = (null)
rlm_eap: Loaded and initialized type tls
peap: default_eap_type = mschapv2
peap: copy_request_to_tunnel = no
peap: use_tunneled_reply = no
peap: proxy_tunneled_request_as_eap = yes
rlm_eap: Loaded and initialized type peap
mschapv2: with_ntdomain_hack = no
rlm_eap: Loaded and initialized type mschapv2
Module: Instantiated eap (eap)
Module: Loaded preprocess
preprocess: huntgroups = /usr/local/radius/etc/raddb/huntgroups
preprocess: hints = /usr/local/radius/etc/raddb/hints
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded detail
detail: detailfile =
/usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (auth_log)
Module: Loaded files
files: usersfile = /usr/local/radius/etc/raddb/users
files: acctusersfile = /usr/local/radius/etc/raddb/acct_users
files: preproxy_usersfile = /usr/local/radius/etc/raddb/preproxy_users
files:
