Re: more EAP/TTLS trouble

2012-05-30 Thread Steve Hopps
. In particular, the iphone support. So thanks for that. :) On Wed, May 30, 2012 at 8:55 AM, Alan DeKok wrote: > Steve Hopps wrote: >> The reasons you stated are why I think this is near impossible. Our >> passwords are stored with md5... I'm not fond of the idea that in

Re: more EAP/TTLS trouble

2012-05-30 Thread Steve Hopps
l Mayers wrote: > On 30/05/12 13:44, Steve Hopps wrote: > >> IPhones work with a custom config profile that's easily installed. >> However, our most significant hurdle is windows machines. Who would have >> guessed??? For some stupid reason Microsoft doesn't care

Re: more EAP/TTLS trouble

2012-05-30 Thread Steve Hopps
27;t an option and XSupplicant doesn't work reliably yet in 64bit Win7. So I'm back to trying to get mschapv2 working with peap. This seems impossible. On May 30, 2012 2:43 AM, "Phil Mayers" wrote: > On 05/29/2012 10:28 PM, Steve Hopps wrote: > > So I'm conf

Re: more EAP/TTLS trouble

2012-05-29 Thread Steve Hopps
But according to the configuration file: # The "suffix" module takes care of stripping the domain # (e.g. "@example.com") from the User-Name attribute, and the # next few lines ensure that the request is not proxied. # # If you want the inner tunnel request to

more EAP/TTLS trouble

2012-05-29 Thread Steve Hopps
The only computer in our office which causes certificate errors is a Windows 7 machine. So I attempted to connect using EAP/TTLS and MSCHAPv2 using my linux machine and my Android phone. Now I get a different error. I also tried using PEAP on my Android phone, and received no certificate errors. W

more EAP/TTLS trouble

2012-05-23 Thread Steve Hopps
I've got authentication with Android and Linux clients working using EAP/TTLS and PAP, however Windows and OSX clients dont seem to work. This is a log of a Windows 7 client. I was able to get iphones working with a special config, but the same method doesn't seem to work for OSX. Any help you coul

Re: EAP/TTLS Auth problem

2012-05-15 Thread Steve Hopps
I was able to get this working, thanks for all your help everyone On Mon, May 14, 2012 at 4:51 PM, alan buxey wrote: > Hi, > >> Well I've been trying to follow the advice here and also what I've >> found online and in the configs. I attempted to revert to the >> 'default' config files for sites-e

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
enticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [test.account] (from client 66.146.192.5 port 0 via TLS tunnel) } # server inner-tunnel [ttls] Got tunneled reply code 3 [ttls] Got tunneled Access-Reject [eap] Handler failed

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
;*" [pap] Passwords don't match ++[pap] returns reject Failed to authenticate the user. Login incorrect (rlm_pap: CRYPT password check failed): [test] (from client 6.6.6.6 port 0 via TLS tunnel) } # server inner-tunnel [ttls] Got tunneled reply code 3 [ttls] Got tunneled Access-Reject [eap]

Re: EAP/TTLS Auth problem

2012-05-14 Thread Steve Hopps
We are using the correct password. There must be something broken causing the passwords not to match. That is what I'm looking for help to determine. On Fri, May 11, 2012 at 3:02 PM, Alan DeKok wrote: > Steve Hopps wrote: >> I'm trying to use FreeRadius with OpenLDAP for aut

EAP/TTLS Auth problem

2012-05-11 Thread Steve Hopps
I'm trying to use FreeRadius with OpenLDAP for authentication of some Nanostation M2 access points, but have had no luck getting it to work. When using rad_eap_test to experiment, I logged the following: Found Auth-Type = PAP # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel +