[strongSwan] eap_mschapv2

Tobias Brunner tobias at strongswan.org
Thu Aug 16 10:05:47 CEST 2012


Hi Marco,

> Now, I need to use the same configuration for Linux strongswan (5.0)
> client but freeradius says: Authentication failure !
> 
> So, I've changed the eap_mschapv2.c. Now Linux/Strangswan can
> autenticate correctly but i'm not sure if the solution is correct.
> 
> what do you think about ?

You are right that there is a bug here.  The problem was that the client
implementation didn't calculate the length properly so that the userid
was cut off somewhere in the middle if a domain was configured.  This is
fixed with [1].

Thanks for the report and sorry for the delay.

Regards,
Tobias

[1] http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=11b514bf




More information about the Users mailing list