Comments (6)
The Access-Request packet in that pcap doesn't have a User-Password attribute in it. The packet does include an inner EAP-Message, but node-radius doesn't support that (see #29).
I'm not sure if the issue is that your router isn't actually configured to do TTLS/PAP or that TTLS/PAP doesn't set the User-Password attribute.
In any case the Access-Request payload will need to have the User-Password attribute set in order to do user auth via node-radius.
from node-radius.
I've not tried using TTLS+PAP before, but based on rfc5281 it sounds like it should work with node-radius.
The most obvious thing to check is to make sure the shared secret between the router and the node-radius instance is the same.
from node-radius.
I tried that again, I dont think it is the password. This is the content of packet.attributes, I guess I wouldn't come that far if the shared secret was wrong:
Packet Attributes: {"User-Name":"CORRECTUSERNAME","Called-Station-Id":"54-E6-FC-D2-54-36:TestSolutions","NAS-Port-Type":"Wireless-802.11","NAS-Port":1,"Calling-Station-Id":"18-5E-0F-DD-E5-D7","Connect-Info":"CONNECT 54Mbps 802.11g","Acct-Session-Id":"5AFC50BB-00000003","Framed-MTU":1400,"EAP-Message":{"type":"Buffer","data":[2,74,0,36,1,106,111,110,97,115,46,115,116,114,97,115,115,101,108,64,116,101,115,116,115,111,108,117,116,105,111,110,115,46,100,101]},"Message-Authenticator":{"type":"Buffer","data":[27,30,39,215,55,112,82,47,102,192,247,211,245,191,84,45]}}
from node-radius.
Can you provide a pcap of the Access-Request payload along with the shared secret?
from node-radius.
Here the config details from openwrts luci and my client pc.
The shared secret is "abc".
pcap.zip
from node-radius.
So I guess I need to get openwrt to NOT use EAP. At least the UI doesn't provide such an option afaik. Will ask there!
from node-radius.
Related Issues (20)
- Using with hostapd HOT 3
- How to pass custom attributes ? HOT 4
- Packet identifier number HOT 6
- Attributes without a tag have one after decoding HOT 2
- RADIUS server issue ChangeOfAuthorization (CoA) requests HOT 5
- Error in Freeradius with CHAP Password due to attribute length HOT 2
- Unable to get true from verify_response HOT 4
- Session-Timeout not working HOT 2
- At what condition I get the 'Vendor-Specific' attributes value in the decoded response HOT 4
- sending PEAP responses HOT 2
- dictionary.rfc2865 incorrect Class attribute definition HOT 2
- There is no password attr HOT 7
- Response verification fails for Status-Server response to FreeRADIUS HOT 5
- User-Password is not defined in my packet. HOT 4
- encode: invalid attributes - must give buffer for unknown attribute 'WISPr-Bandwitdth-Max-Down' HOT 7
- Active Directory integration HOT 2
- Chap Password - Active Directory HOT 2
- Dependency Dashboard
- Disconnect-Request not work HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from node-radius.