Freeradius PEAP and Wireless
I'm trying to setup freeradius with ldap for use with a wireless
network. I don't want to have to deal with tls and certificates if
possible, I would just like for users to use their username and password
to connect. The radius config for ldap is pretty easy, but I'm having a
problem when trying to enable peap as my default eap type. I've done so
in my eap.conf which I've included and a section of debug when trying to
start radiusd. Appreciate any info.
When trying to start radiusd:
Module: Instantiated ldap (ldap)
Module: Loaded eap
eap: default_eap_type = "peap"
eap: timer_expire = 60
eap: ignore_unknown_eap_types = no
eap: cisco_accounting_username_bug = no
rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first.
radiusd.conf[10]: eap: Module instantiation failed.
radiusd.conf[1939] Unknown module "eap".
radiusd.conf[1886] Failed to parse authenticate section.
eap.conf basically, everything else is commented out.
eap {
default_eap_type = peap
peap {
default_eap_type = mschapv2
}
mschapv2 {
}
}
--
Cody Jarrett
IT Freedom
[EMAIL PROTECTED]
Office: 512.419.0070
Fax: 512.419.0080
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Freeradius PEAP and Wireless
> rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is > required first. You need to uncomment the tls section in eap.conf, even if yoo're not intending to use EAP-TLS. josh. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius PEAP and Wireless
Cody Jarrett wrote: > I'm trying to setup freeradius with ldap for use with a wireless > network. I don't want to have to deal with tls and certificates if > possible, Then you won't be doing PEAP. It requires TLS and certificates. ... > rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first. What is unclear about that message? It's telling you that you need TLS for PEAP to work. All of the howto's show that you have to configure TLS before PEAP. The comments in "eap.conf" say you have to configure TLS before PEAP. What's the problem? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius PEAP and Wireless
Alan Dekok wrote: Cody Jarrett wrote: I'm trying to setup freeradius with ldap for use with a wireless network. I don't want to have to deal with tls and certificates if possible, Then you won't be doing PEAP. It requires TLS and certificates. Is what I want possible then? And if so could you provide me with details on what its called or how its configured? ... rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first. What is unclear about that message? It's telling you that you need TLS for PEAP to work. All of the howto's show that you have to configure TLS before PEAP. The comments in "eap.conf" say you have to configure TLS before PEAP. What's the problem? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius PEAP and Wireless
Read provided instructions in eap.conf. Ivan Kalik Kalik Informatika ISP Dana 18/6/2007, "Cody Jarrett" <[EMAIL PROTECTED]> piše: >Alan Dekok wrote: >> Cody Jarrett wrote: >> >>> I'm trying to setup freeradius with ldap for use with a wireless >>> network. I don't want to have to deal with tls and certificates if >>> possible, >>> >> >> Then you won't be doing PEAP. It requires TLS and certificates. >> >Is what I want possible then? And if so could you provide me with >details on what its called or how its configured? >> ... >> >>> rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first. >>> >> >> What is unclear about that message? It's telling you that you need >> TLS for PEAP to work. >> >> All of the howto's show that you have to configure TLS before PEAP. >> The comments in "eap.conf" say you have to configure TLS before PEAP. >> >> What's the problem? >> >> Alan DeKok. >> -- >> http://deployingradius.com - The web site of the book >> http://deployingradius.com/blog/ - The blog >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> >> > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
