[RADIATOR] Eaptype=PEAP choosen even if request is EAP-TLS

Vandenbroucke Luc lvandenb at sckcen.be
Fri Jun 24 08:52:05 CDT 2011


Hi

Can anyone tell me, if my hander asks "EapType=PEAP", why it is chosen for EAP-TLS ?
I do have a handler for "EapType=TLS", for the same domain. But this handler is never not reached.


Regards
Luc Vandenbroucke

p.s. Our other test are all fine now. So we decided to go with Radiator, and buy the pro-pack.


Config
                ....

<Handler EAPType=PEAP,Realm=myrealm>
                AuthBy LSAPEAP
</Handler>


<Handler EAPType=TLS,Realm=myrealm>
                Identifier HPEAPTLS

                ...


Code:       Access-Request
Identifier: 176
Authentic:  |ME22<21><129><199>e<140>Q<140><178><152><5><230>
Attributes:
        NAS-Port-Id = "AP2/1"
        Calling-Station-Id = "00-23-14-EB-CB-A8"
        Called-Station-Id = "00-0B-0E-CF-26-C8:radroam"
        Service-Type = Framed-User
        User-Name = "xxxxxxxxxxxx"
        NAS-Port = 55256
        EAP-Message = <2><2><0><6><3><13>
        NAS-Port-Type = Wireless-IEEE-802-11
        NAS-IP-Address = 10.73.240.100
        NAS-Identifier = "Trapeze"
        Message-Authenticator = <129><237><217>e<201>p<142><229><168><154>a<163>s=S0

Fri Jun 24 15:42:39 2011: DEBUG: Handling request with Handler 'EAPType=PEAP,Realm=***', Identifier ''
Fri Jun 24 15:42:39 2011: DEBUG:  Deleting session for Install9 at sckcen.be, 10.73.240.100, 55256
Fri Jun 24 15:42:39 2011: DEBUG: Handling with Radius::AuthLSA: LSAPEAP
Fri Jun 24 15:42:39 2011: DEBUG: Handling with EAP: code 2, 2, 6, 3
Fri Jun 24 15:42:39 2011: DEBUG: Response type 3
Fri Jun 24 15:42:39 2011: DEBUG: EAP Nak desires type 13
Fri Jun 24 15:42:39 2011: DEBUG: Desired EAP type TLS (13) not permitted
Fri Jun 24 15:42:39 2011: DEBUG: EAP result: 1, None of the desired EAP types (13) are available
Fri Jun 24 15:42:39 2011: DEBUG: AuthBy LSA result: REJECT, None of the desired EAP types (13) are available
Fri Jun 24 15:42:39 2011: INFO: Access rejected for ****** : None of the desired EAP types (13) are available
Fri Jun 24 15:42:39 2011: DEBUG: Packet dump:
*** Sending to 10.73.240.100 port 20001 ....


SCK-CEN Disclaimer: http://www.sckcen.be/en/Legal-aspects/E-mail-disclaimer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.open.com.au/pipermail/radiator/attachments/20110624/052696a2/attachment.html 


More information about the radiator mailing list