[strongSwan] R: eap_mschapv2

MILITA MARCO M.Milita at trenitalia.it
Sun Aug 19 17:10:34 CEST 2012

Hi Tobias,

Thanks a lot for the answer and for the fix.

Best Regards,

Da: users-bounces+m.milita=trenitalia.it at lists.strongswan.org [users-bounces+m.milita=trenitalia.it at lists.strongswan.org] per conto di Tobias Brunner [tobias at strongswan.org]
Inviato: giovedì 16 agosto 2012 10.05
A: users at lists.strongswan.org
Oggetto: Re: [strongSwan] eap_mschapv2

Hi Marco,

> Now, I need to use the same configuration for Linux strongswan (5.0)
> client but freeradius says: Authentication failure !
> So, I've changed the eap_mschapv2.c. Now Linux/Strangswan can
> autenticate correctly but i'm not sure if the solution is correct.
> what do you think about ?

You are right that there is a bug here.  The problem was that the client
implementation didn't calculate the length properly so that the userid
was cut off somewhere in the middle if a domain was configured.  This is
fixed with [1].

Thanks for the report and sorry for the delay.


[1] http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=11b514bf

Users mailing list
Users at lists.strongswan.org

More information about the Users mailing list