1
그래서, 기본적으로, 여기에 문제가있다 :하기 FreeRADIUS PEAP의 authorizaton 문제
하기 FreeRADIUS가 제대로 클라이언트에 연결을 본다,하지만 난 권한을 부여하려고 할 때마다, 과정은 PEAP-초기화 단계에서 실패 :
rad_recv: Access-Request packet from host 10.1.36.25 port 2053, id=19, length=228
User-Name = "ru_maniac"
NAS-IP-Address = 10.1.36.25
NAS-Port = 0
Called-Station-Id = "00-24-01-E6-D7-43:tfmesi free"
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
Connect-Info = "CONNECT 11Mbps 802.11b"
EAP-Message = 0x0208005019001703010020c7b067e61886bc85574f48b8c7c81050fb54a8c89c7be26ce36525f01bd9a36f1703010020753af16f7c672d5dbc12ce54d0bffe9620dd50b0fb3c46fa49a5cde0dd6436a3
State = 0x9f375109983f484ca41e3db5b2ba597f
Message-Authenticator = 0x3aab9ba1db8b0f091d6db862885d620b
# Executing section authorize from file /etc/freeradius/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
[suffix] No '@' in User-Name = "ru_maniac", looking up realm NULL
[suffix] Found realm "DEFAULT"
[suffix] Adding Stripped-User-Name = "ru_maniac"
[suffix] Adding Realm = "DEFAULT"
[suffix] Authentication realm is LOCAL.
++[suffix] returns ok
[eap] EAP packet type response id 8 length 80
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/freeradius/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established. Decoding tunneled attributes.
[peap] Peap state send tlv failure
[peap] Received EAP-TLV response.
[peap] The users session was previously rejected: returning reject (again.)
[peap] *** This means you need to read the PREVIOUS messages in the debug output
[peap] *** to find out the reason why the user was rejected.
[peap] *** Look for "reject" or "fail". Those earlier messages will tell you.
[peap] *** what went wrong, and how to fix the problem.
[eap] Handler failed in EAP/peap
[eap] Failed in EAP select
시스템은 Debian Squeeze 6.01, Freeradius - 2.10.1 from Squeeze repos - Squeeze는 FR 사이트에서 말한 것처럼 TLS와 SSL을 지원합니다.
무엇이 문제 일 수 있으며 어떻게 해결할 수 있습니까? 어떤 도움을 주시면 감사하겠습니다.