(RADIATOR) running into snags trying to get EAP-FAST working

Hugh Irvine hugh at open.com.au
Tue Feb 12 16:13:24 CST 2008


Hello Jim -

For testing it is much easier to use the source tarball(s) and run  
radiusd from the command line like this:

	cd /your/Radiator/distribution

	perl radiusd -foreground -log_stdout -trace 4 -config_file /your/ 
Radiator/configuration/file

where the path names correspond to your situation.

You will then see the startup messages which should include any Perl  
error messages.

hope that helps

regards

Hugh


On 13 Feb 2008, at 07:43, Jim Veneskey wrote:

> Yep,
> I used "-p" instead of "-r" and I am now back in business with the  
> non-RPM linux box, the one with a sane perl install :-)
>
> I had to add a bunch of dependencies for net-ssleay, but I got that  
> patched and installed also.
>
> I feel I'm almost there now - now when I attempt to EAP-FAST  
> authenticate a client, I am seeing this:
>
>> Identifier: 62
>> Authentic:  A<210><5><128>s<181>_<250><183><243>W<25> <5>"S
>> Attributes:
>>         User-Name = "widevaio"
>>         Calling-Station-Id = "00-40-96-A4-4E-24"
>>         Called-Station-Id = "00-0B-FC-FB-7F-20:leaper"
>>         NAS-Port = 29
>>         NAS-IP-Address = 192.168.50.15
>>         NAS-Identifier = "cntl3750-w"
>>         Airespace-WLAN-Id = 6
>>         Service-Type = Framed-User
>>         Framed-MTU = 1300
>>         NAS-Port-Type = Wireless-IEEE-802-11
>>         EAP-Message = <2><10><0>++<1><23><3><1><0>  
>> 0<7><186><247><239><206>DN<205><179><215><138>&<159><163><253>X- 
>> <189>V(<255><137>%<178><175><2>T<215><2><229><247>
>>         Message-Authenticator =  
>> <202>4;<163><21><212>qn<168><25><179>s<252><5>eg
>> Tue Feb 12 15:36:17 2008: DEBUG: Handling request with Handler ''
>> Tue Feb 12 15:36:17 2008: DEBUG:  Deleting session for widevaio,  
>> 192.168.50.15, 29
>> Tue Feb 12 15:36:17 2008: DEBUG: Handling with Radius::AuthFILE:  
>> Tue Feb 12 15:36:17 2008: DEBUG: Handling with EAP: code 2, 10,  
>> 43, 43
>> Tue Feb 12 15:36:17 2008: DEBUG: Response type 43
>> Tue Feb 12 15:36:17 2008: DEBUG: EAP result: 2, TLS not initialised
>> Tue Feb 12 15:36:17 2008: DEBUG: AuthBy FILE result: IGNORE, TLS  
>> not initialised
>
>
> Tomorrow I'll start some more digging in the documentation and see  
> how to get TLS initialized...
>
> Jim
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list