Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

First a bit of background: I've been tinkering with this on and off for a few days and it's getting frustrating. I've got a NetGear r6300 loaded up with DD-WRT v24/SP2 Giga and I've configured SSH to log into the console.

I'm trying (and failing) to set up WPA2 Enterprise Wi-Fi for which I'm using the built in version of FreeRadius. I've got Ubuntu 13.04 on my local computer.

  • I've configured FreeRadius, the Radius and Wireless Security information via the GUI on the router.
  • I've successfully tested user authentication with radtest from the SSH console
  • I've downloaded the ca.pem certificate from the /etc/freeradius/certs folder
  • I've downloaded the TestUser-cert.P12, TestUser-cert.pem, TestUser-key.pem, TestUser-req.pem certificates from the /etc/freeradius/certs/clients folder

Here are my router settings:

Services/FreeRadius

Server Certificate:

  • Country Code: CA
  • State or Province: Ontario
  • Locality: Toronto
  • Organization / Company: Test Company
  • Email Address: [email protected]
  • Common Certificate Name: Test Radius Certificate
  • Expires: 365 days
  • Passphrase: TestCertificatePassphrase

Settings

  • Radius Port: 1812

Clients:

  • 127.0.0.1 TestRadiusSharedSecret
  • 192.168.1.0 TestRadiusSharedSecret

Users:

  • User 1
    • Username: TestUser1
    • Password: TestPassword
    • Downspeed: 9999999
    • Upseed: 9999999
    • Expires (Days): 365
    • Enabled: Checked

Wireless/Wireless Security

  • Security Mode: WPA2 Enterprise
  • WPA Algorithms: TKIP+AES
  • Radius Server Address: 127.0.0.1
  • Radius Auth Port: 1812
  • Radius Shared Secret: TestRadiusSharedSecret
  • Key Renewal: 3600

Wireless/Radius

  • MAC Radius Client: Enable
  • MAC Format: aabbccddeeff
  • Radius Auth Server Address: 127.0.0.1
  • Radius Auth Server Port: 1812
  • Maximum Unauthenticated Users: 0
  • Password Format: Shared Key
  • Radius Auth Shared Secret: TestRadiusSharedSecret

From the SSH console I get the following output from RadTest:

$radtest TestUser1 TestPassword 127.0.0.1 0 TestRadiusSharedSecret

Sending Access-Request of id 231 to 127.0.0.1 port 1812
    User-Name = "TestUser1"
    User-Password = "TestPassword"
    NAS-IP-Address = 192.168.1.1
    NAS-Port = 0
    Message-Authenticator = 0x00000000000000000000000000000000
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=231, length=68
    WISPr-Bandwidth-Max-Down = 1650064384
    RP-Downstream-Speed-Limit = 9999999
    WISPr-Bandwidth-Max-Up = 1650064384
    RP-Upstream-Speed-Limit = 9999999

When I run radiusd -d /jffs/etc/freeradius -X from the console and attempt to connect my machine to the Wi-Fi with the following settings:

Screenshot of Wi-Fi Settings

the connection fails...

From the exerpt from the log, I glean that it's something relating to the SharedSecret between my Radius client and FreeRadius, but I can't figure out what or why because the shared secret is the same in the Radius client and the FreeRadius configurations...

rad_recv: Access-Request packet from host 127.0.0.1 port 37619, id=6, length=80
        User-Name = "c48508cf0a6c"
        NAS-Port = 1
        NAS-Port-Type = Wireless-802.11
        User-Password = "TestRadiusSharedSecret"
# Executing section authorize from file /jffs/etc/freeradius/sites-enabled/default
+- entering group authorize {...}
++[mschap] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[files] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user
Failed to authenticate the user.
Login incorrect: [c48508cf0a6c/TestRadiusSharedSecret] (from client DD-WRT-RADIUS port 1)
Using Post-Auth-Type REJECT
  WARNING: Unknown value specified for Post-Auth-Type.  Cannot perform requested action.
Delaying reject of request 3 for 1 seconds
Going to the next request

Here is the full Radius log for the wi-fi connection attempt

It seems like I'm missing something, but I'm unsure what that could be. Can anyone see what I might be missing?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.