[RADIATOR] does OpenSSL 0.9.8n need patched for use with EAP-FAST?
Jim Veneskey
jvene at cisco.com
Wed Mar 30 07:38:37 CDT 2011
Hi,
I am attempting to setup Radiator v4.7 for authenticating clients that
are using EAP-FAST.
I have installed the evaluation version, verified that the basic tests
work - and am using the
goodies/eap_fast.cfg as my radius.cfg starting point.
I am using a Slackware 13.1 box.
I believe I have all of the required perl modules installed.
I did install Net_SSLeay.pm-1.30
Slackware 13.1 ships with:
> openssl version
> OpenSSL 0.9.8n 24 Mar 2010
> root at catt1:/home/jvene/Rad
I saw there are patches included for older versions of OpenSSL - 0.9.8d
,e ,i
and version 0.9.9
Does 0.9.8n contain the patches already that are required for EAP-FAST?
If not - is it recommended to downgrade to 0.9.8.e and attempt to
patch/install that version - or 0.9.9 ?
I am guessing that the "Compilation failed in require..." shown below
is a result of my current OpenSSL setup - or is it because of something
else?
Appreciate any advice,
Jim
Wed Mar 30 08:13:07 2011: DEBUG: Packet dump:
*** Received from 194.1.0.18 port 32770 ....
Code: Access-Request
Identifier: 166
Authentic: <165><156>W<254><12>w<239><139><155><143>A<20>j<9><201>+
Attributes:
User-Name = "anonymous"
Calling-Station-Id = "00:40:96:a6:e9:4b"
Called-Station-Id = "00:22:90:96:77:50:eapfast"
NAS-Port = 1
cisco-avpair = "audit-session-id=c2010012000002044d931e52"
NAS-IP-Address = 194.1.0.18
NAS-Identifier = "catt4-talwar"
Airespace-WLAN-Id = 20
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-IEEE-802-11
Tunnel-Type = 0:VLAN
Tunnel-Medium-Type = 0:802
Tunnel-Private-Group-ID = 410
EAP-Message = <2><1><0><14><1>anonymous
Message-Authenticator =
.<186><147>S.<21><150>V<23><160>x<132><179><225><233><205>
Wed Mar 30 08:13:07 2011: DEBUG: Handling request with Handler '',
Identifier ''
Wed Mar 30 08:13:07 2011: DEBUG: Deleting session for anonymous,
194.1.0.18, 1
Wed Mar 30 08:13:07 2011: DEBUG: Handling with Radius::AuthFILE:
Wed Mar 30 08:13:07 2011: DEBUG: Handling with EAP: code 2, 1, 14, 1
Wed Mar 30 08:13:07 2011: DEBUG: Response type 1
Wed Mar 30 08:13:07 2011: ERR: Could not load EAP module Radius::EAP_43:
Attempt to reload Radius/EAP_43.pm aborted.
Compilation failed in require at (eval 47) line 3.
Wed Mar 30 08:13:07 2011: DEBUG: EAP result: 1, Unsupported default EAP
Response/Identity FAST
Wed Mar 30 08:13:07 2011: DEBUG: AuthBy FILE result: REJECT, Unsupported
default EAP Response/Identity FAST
Wed Mar 30 08:13:07 2011: INFO: Access rejected for anonymous:
Unsupported default EAP Response/Identity FAST
Wed Mar 30 08:13:07 2011: DEBUG: Packet dump:
*** Sending to 194.1.0.18 port 32770 ....
Code: Access-Reject
Identifier: 166
Authentic: <224><141><163><159><13><161><16>Pmq<25><11><150>5<159><169>
Attributes:
Reply-Message = "Request Denied"
More information about the radiator
mailing list