(RADIATOR) ConvertedFromEAPMSCHAPV2
Mike McCauley
mikem at open.com.au
Mon Mar 8 16:30:43 CST 2004
Hello Jon,
On Tue, 9 Mar 2004 03:52 am, Jon Snyder wrote:
> I've been working with the new support for converting EAP-MSCHAPV2 to
> regular RADIUS MSCHAP-V2. It is working beautifully, but each time I get
> the following message in the Radiator log:
>
> WARNING: No such attribute ConvertedFromEAPMSCHAPV2
Hmmm, this is an artifact of the way we have done the conversion. I think it
needs to be fixed.
In the meantime, you could put
StripFromRequest ConvertedFromEAPMSCHAPV2
in your AuthBy RADIUS.
Cheers.
>
> I have my configuration set up like the goodies document suggests: with a
> separate handler checking for ConvertedFromEAPMSCHAPV2=1. Radiator uses
> this handler, as you can see from the debug output below:
>
> Mon Mar 8 09:39:37 2004: DEBUG: Handling request with Handler
> 'TunnelledByPEAP=1,EAPType=MSCHAP-V2'
> Mon Mar 8 09:39:37 2004: DEBUG: Deleting session for , 131.252.x.x, 343
> Mon Mar 8 09:39:37 2004: DEBUG: Handling with Radius::AuthFILE:
> Mon Mar 8 09:39:37 2004: DEBUG: Handling with EAP: code 2, 8, 58
> Mon Mar 8 09:39:37 2004: DEBUG: Response type 26
> Mon Mar 8 09:39:37 2004: DEBUG: Converted EAP-MSCHAPV2 Packet dump:
> Code: Access-Request
> Identifier: UNDEF
> Authentic: <150><154>X<12>(l <26>C<18><194>k<15><210>G<218>
> Attributes:
> User-Name = "user"
> ConvertedFromEAPMSCHAPV2 = 1
> MS-CHAP2-Response = "data-snipped"
> MS-CHAP-Challenge = "data-snipped"
>
> Mon Mar 8 09:39:37 2004: DEBUG: Handling request with Handler
> 'ConvertedFromEAPMSCHAPV2=1'
> Mon Mar 8 09:39:37 2004: DEBUG: Deleting session for user, 131.252.x.x,
> Mon Mar 8 09:39:37 2004: DEBUG: Handling with Radius::AuthRADIUS
> Mon Mar 8 09:39:37 2004: WARNING: No such attribute
> ConvertedFromEAPMSCHAPV2
> Mon Mar 8 09:39:37 2004: DEBUG: Packet dump:
>
> Is this normal behavior? It doesn't do this with TunnelledByPEAP,
> TunnelledByTTLS, etc.
>
> Thanks,
>
> ----------
> Jon Snyder
> Computing and Network Services
> Portland State University
> (503) 725-9565
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
--
Mike McCauley mikem at open.com.au
Open System Consultants Pty. Ltd Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia http://www.open.com.au
Phone +61 7 5598-7474 Fax +61 7 5598-7070
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP etc on Unix, Windows, MacOS etc.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list