Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

First a bit of background: I've been tinkering with this on and off for a few days and it's getting frustrating. I've got a NetGear r6300 loaded up with DD-WRT v24/SP2 Giga and I've configured SSH to log into the console.

I'm trying (and failing) to set up WPA2 Enterprise Wi-Fi for which I'm using the built in version of FreeRadius. I've got Ubuntu 13.04 on my local computer.

  • I've configured FreeRadius, the Radius and Wireless Security information via the GUI on the router.
  • I've successfully tested user authentication with radtest from the SSH console
  • I've downloaded the ca.pem certificate from the /etc/freeradius/certs folder
  • I've downloaded the TestUser-cert.P12, TestUser-cert.pem, TestUser-key.pem, TestUser-req.pem certificates from the /etc/freeradius/certs/clients folder

Here are my router settings:


Server Certificate:

  • Country Code: CA
  • State or Province: Ontario
  • Locality: Toronto
  • Organization / Company: Test Company
  • Email Address:
  • Common Certificate Name: Test Radius Certificate
  • Expires: 365 days
  • Passphrase: TestCertificatePassphrase


  • Radius Port: 1812


  • TestRadiusSharedSecret
  • TestRadiusSharedSecret


  • User 1
    • Username: TestUser1
    • Password: TestPassword
    • Downspeed: 9999999
    • Upseed: 9999999
    • Expires (Days): 365
    • Enabled: Checked

Wireless/Wireless Security

  • Security Mode: WPA2 Enterprise
  • WPA Algorithms: TKIP+AES
  • Radius Server Address:
  • Radius Auth Port: 1812
  • Radius Shared Secret: TestRadiusSharedSecret
  • Key Renewal: 3600


  • MAC Radius Client: Enable
  • MAC Format: aabbccddeeff
  • Radius Auth Server Address:
  • Radius Auth Server Port: 1812
  • Maximum Unauthenticated Users: 0
  • Password Format: Shared Key
  • Radius Auth Shared Secret: TestRadiusSharedSecret

From the SSH console I get the following output from RadTest:

$radtest TestUser1 TestPassword 0 TestRadiusSharedSecret

Sending Access-Request of id 231 to port 1812
    User-Name = "TestUser1"
    User-Password = "TestPassword"
    NAS-IP-Address =
    NAS-Port = 0
    Message-Authenticator = 0x00000000000000000000000000000000
rad_recv: Access-Accept packet from host port 1812, id=231, length=68
    WISPr-Bandwidth-Max-Down = 1650064384
    RP-Downstream-Speed-Limit = 9999999
    WISPr-Bandwidth-Max-Up = 1650064384
    RP-Upstream-Speed-Limit = 9999999

When I run radiusd -d /jffs/etc/freeradius -X from the console and attempt to connect my machine to the Wi-Fi with the following settings:

Screenshot of Wi-Fi Settings

the connection fails...

From the exerpt from the log, I glean that it's something relating to the SharedSecret between my Radius client and FreeRadius, but I can't figure out what or why because the shared secret is the same in the Radius client and the FreeRadius configurations...

rad_recv: Access-Request packet from host port 37619, id=6, length=80
        User-Name = "c48508cf0a6c"
        NAS-Port = 1
        NAS-Port-Type = Wireless-802.11
        User-Password = "TestRadiusSharedSecret"
# Executing section authorize from file /jffs/etc/freeradius/sites-enabled/default
+- entering group authorize {...}
++[mschap] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[files] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user
Failed to authenticate the user.
Login incorrect: [c48508cf0a6c/TestRadiusSharedSecret] (from client DD-WRT-RADIUS port 1)
Using Post-Auth-Type REJECT
  WARNING: Unknown value specified for Post-Auth-Type.  Cannot perform requested action.
Delaying reject of request 3 for 1 seconds
Going to the next request

Here is the full Radius log for the wi-fi connection attempt

It seems like I'm missing something, but I'm unsure what that could be. Can anyone see what I might be missing?

share|improve this question

You missing your EAP module configuration. I assume this is freeradius 3? Either way, look at your log. The EAP modules noops. That means there is nothing to do. If you're using PEAP, you have to have the eap module with the password to for your certificate.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .