[RADIATOR] Microsoft AV (Was Re: EAP PEAP Authentication Failing)

[Johnson, Neil M]

I had our server folks completely re-install windows on the server and I'm still getting the same problem (Accounting requests are processing fine. EAP Authentication id failing).

I'm using the same version of RADIATOR, Perl, Perl modules, certificates, and configuration as 8 other servers that are working, but something about this server is different.

Trace logs, output from eapol_test, and packet captures show that there is an initial request to RADIATOR and RADIATOR responds, but when the client makes it's next request RADIATOR never responds. No error messages in the the RADIATOR trace log.

Ideas?

-Neil

--
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-johnson at uiowa.edu


From: <Johnson>, Neil Johnson <neil-johnson at uiowa.edu<mailto:neil-johnson at uiowa.edu>>
Date: Thursday, June 27, 2013 2:47 PM
To: Alan Buxey <A.L.M.Buxey at lboro.ac.uk<mailto:A.L.M.Buxey at lboro.ac.uk>>
Cc: "radiator at open.com.au<mailto:radiator at open.com.au>" <radiator at open.com.au<mailto:radiator at open.com.au>>
Subject: Re: [RADIATOR] Microsoft AV (Was Re: EAP PEAP Authentication Failing)

Well, according to our server support folks, they performed this same procedure on our other 8 RADIUS servers and didn't have any issues.

They were using SCCM (Microsoft's System Center Configuration Manager) to automate the uninstall and re-install of the software rather than a manual process. I wonder if performing the actions by hand would make a difference.

Since it appears to be one box, I'm assuming there was something wrong with it before the upgrade and it should be wiped and reinstalled from scratch.

-Neil
--
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-johnson at uiowa.edu<mailto:neil-johnson at uiowa.edu>


From: Alan Buxey <A.L.M.Buxey at lboro.ac.uk<mailto:A.L.M.Buxey at lboro.ac.uk>>
Reply-To: Alan Buxey <A.L.M.Buxey at lboro.ac.uk<mailto:A.L.M.Buxey at lboro.ac.uk>>
Date: Thursday, June 27, 2013 1:35 PM
To: Neil Johnson <neil-johnson at uiowa.edu<mailto:neil-johnson at uiowa.edu>>
Cc: Heikki Vatiainen <hvn at open.com.au<mailto:hvn at open.com.au>>, "radiator at open.com.au<mailto:radiator at open.com.au>" <radiator at open.com.au<mailto:radiator at open.com.au>>
Subject: Re: Microsoft AV (Was Re: [RADIATOR] EAP PEAP Authentication Failing)

What would be interesting is whether a clean install of Windows and just the installation of the Microsoft SEP kills it

alan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.open.com.au/pipermail/radiator/attachments/20130726/ebeb3609/attachment.html