Smoothwall RADIUS and macbook pro

[BGlanders]

We have an issue with radius certification on Smoothwall at the moment for our BYOD wifi. Our newer Macbook users cant seem to get connected via PEAP, but other users are seemingly still able.

When going through the smoothwall logs I found something interesting.. it looks like AD correctly returns authentication for the user, but then 20 seconds later another request is sent; but with what looks like an escape character in front of it?

 

 

Surely this isnt normal? Its the only user in the entire log for the morning that this occurs to.

If anyone with more experience of smoothwall has any ideas I would be greatful to hear.

 

Thanks for your time!

 

B

[ibpalle]

The Smoothwall RADIUS service forwards auth requests to the AD, it does not generate them. For some reason the username is sent twice for auth - once with the normal username then, 20 seconds later apparently, with the /024 in front, which obviously fails to authenticate since the username is wrong. The Wifi controller/APs are the ones that sends the request to the RADIUS server - what's the Wifi controller you are using?

[BGlanders]

Ah. apologies, I knew the wifi system handled the RADIUS auth, but thought that perhaps it simply passed it on to smoothwall, as smoothwall does auth for other services too. Were using Ubiquiti, but I cant seem to get access to logs for authentication, hence why I was looking at smoothwall logs.

 

Thanks for your help.