\r\n\u3053\u306e\u305f\u3081\u3001RADIUS\u30b5\u30fc\u30d0\u304c\u8a8d\u8a3c\u30a8\u30e9\u30fc\u3068\u306a\u3063\u3066\u30b5\u30d7\u30ea\u30ab\u30f3\u30c8\u5074\u304c\u307e\u305f\u6700\u521d\u304b\u3089EAP \u8a8d\u8a3c\u3092\u7e70\u308a\u8fd4\u3059\u3088\u3046\u3067\u3059\uff0e<\/p>\n
\nrad_recv: Access-Request packet from host 192.168.100.241:1030, id=27, length=224\n\tFramed-MTU = 1466\n\tNAS-IP-Address = 192.168.100.241\n\tNAS-Identifier = \"AirPort Extream\"\n\tUser-Name = \"yoko\"\n\tService-Type = Framed-User\n\tNAS-Port = 256\n\tNAS-Port-Type = Ethernet\n\tNAS-Port-Id = \"wl0\"\n\tCalled-Station-Id = \"00-03-93-ec-eb-ee\"\n\tCalling-Station-Id = \"00-07-40-91-de-22\"\n\tConnect-Info = \"CONNECT Ethernet 54Mbps Half duplex\"\n\tState = 0x0d2fe4f63cdea4bbaa54a7f875906c8a\n\tEAP-Message = 0x0207002119800000001715030100129d038296ad1ff5796f8696a9df28c26e865c\n\tMessage-Authenticator = 0x7cd68fcd54d00101cc8b616bd2ab2e94\n Processing the authorize section of radiusd.conf\nmodcall: entering group authorize for request 5\n modcall[authorize]: module \"preprocess\" returns ok for request 5\n modcall[authorize]: module \"chap\" returns noop for request 5\n modcall[authorize]: module \"mschap\" returns noop for request 5\n rlm_realm: No '@' in User-Name = \"yoko\", looking up realm NULL\n rlm_realm: No such realm \"NULL\"\n modcall[authorize]: module \"suffix\" returns noop for request 5\n rlm_eap: EAP packet type response id 7 length 33\n rlm_eap: No EAP Start, assuming it's an on-going EAP conversation\n modcall[authorize]: module \"eap\" returns updated for request 5\n users: Matched entry DEFAULT at line 153\n users: Matched entry DEFAULT at line 172\n modcall[authorize]: module \"files\" returns ok for request 5\nrlm_opendirectory: The SACL group \"com.apple.access_radius\" does not exist on this system.\nrlm_opendirectory: The host 192.168.100.241 does not have an access group.\nrlm_opendirectory: no access control groups, all users allowed.\n modcall[authorize]: module \"opendirectory\" returns ok for request 5\nmodcall: leaving group authorize (returns updated) for request 5\n rad_check_password: Found Auth-Type EAP\nauth: type \"EAP\"\n Processing the authenticate section of radiusd.conf\nmodcall: entering group authenticate for request 5\n rlm_eap: Request found, released from the list\n rlm_eap: EAP\/peap\n rlm_eap: processing type peap\n rlm_eap_peap: Authenticate\n rlm_eap_tls: processing TLS\nrlm_eap_tls: Length Included\n eaptls_verify returned 11\n eaptls_process returned 7\n rlm_eap_peap: EAPTLS_OK\n rlm_eap_peap: Session established. Decoding tunneled attributes.\n rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal access_denied\nTLS Alert read:fatal:access denied\nrlm_eap_peap: No data inside of the tunnel.\n rlm_eap: Handler failed in EAP\/peap\n rlm_eap: Failed in EAP select\n modcall[authenticate]: module \"eap\" returns invalid for request 5\nmodcall: leaving group authenticate (returns invalid) for request 5\nauth: Failed to validate the user.\nLogin incorrect: [yoko\/] (from client AirPort Extream Base Station port 256 cli 00-07-40-91-de-22)\nDelaying request 5 for 1 seconds\nFinished request 5\nGoing to the next request\nWaking up in 6 seconds...\nrad_recv: Access-Request packet from host 192.168.100.241:1030, id=27, length=224\nSending Access-Reject of id 27 to 192.168.100.241 port 1030\n\tEAP-Message = 0x04070004\n\tMessage-Authenticator = 0x00000000000000000000000000000000\n--- Walking the entire request list ---\nWaking up in 5 seconds...\r\n\r\n<\/code><\/pre>\r\n
\r\nRADIUS\u30b5\u30fc\u30d0\u306e\u30ed\u30b0\u3060\u3051\u3067\u306f\u5168\u4f53\u7684\u306a\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u6d41\u308c\u3092\u8ffd\u3044\u306b\u304f\u3044\u305f\u3081\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u306e\u901a\u4fe1\u306e\u69d8\u5b50\u3092\u30d1\u30b1\u30c3\u30c8\u30ad\u30e3\u30d7\u30c1\u30e3\u3057\u3066\u307f\u307e\u3057\u305f\uff0e\u3053\u306e\u624b\u306e\u30d1\u30b1\u30c3\u30c8\u30ad\u30e3\u30d7\u30c1\u30e3\u30bd\u30d5\u30c8\u30c4\u30fc\u30eb\u3068\u3057\u3066\u306f\u30d5\u30ea\u30fc\u30bd\u30d5\u30c8\u306e “Wireshark” <\/a>\u304c\u304a\u85a6\u3081\u3067\u3059\uff0e\r\n
\r\n\u30bb\u30c3\u30b7\u30e7\u30f3 #16 \u3067 \u30af\u30e9\u30a4\u30a2\u30f3\u30c8(Windows XP)\u5074\u304b\u3089RADIUS\u30b5\u30fc\u30d0\u3078 “Encrypted Alert” \u3068\u3044\u3046\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u9001\u3063\u3066\u3044\u307e\u3059\uff0e\u6050\u3089\u304fWindows\u5074\u3067EAP\u8a8d\u8a3c\u624b\u7d9a\u304d\u3092\u5374\u4e0b\u3057\u3066\u3044\u308b\u306e\u3067\u3057\u3087\u3046\uff0e<\/p>\r\n
EAP-PEAP\u3060\u3051\u3067\u306f\u306a\u304f\u3066\u3001EAP-TLS\u306e\u5834\u5408\u306b\u3082\u540c\u3058\u3088\u3046\u306a\u30a8\u30e9\u30fc\u3067 EAP\u30bb\u30c3\u30b7\u30e7\u30f3\u304c\u6253\u3061\u5207\u3089\u308c\u3066\u3044\u307e\u3059\uff0e\u3069\u3046\u3084\u3089Windows XP \u306e\u30b5\u30d7\u30ea\u30ab\u30f3\u30c8\u5074\u306b\u554f\u984c\u304c\u3042\u308a\u305d\u3046\u3067\u3059\uff0e<\/p>\r\n
\r\n
<\/a>\r\n
\r\n
\r\n
\r\n \u539f\u56e0\u767a\u898b <\/h4>\r\n
\r\n
Windows XP\u306e\u30b5\u30d7\u30ea\u30ab\u30f3\u30c8\u3067EAP\u30bb\u30c3\u30b7\u30e7\u30f3\u304c\u6253\u3061\u5207\u3089\u308c\u3066\u3057\u307e\u3046\u539f\u56e0\u3092\u8272\u3005\u3068\u8abf\u3079\u3066\u898b\u305f\u306e\u3067\u3059\u304c\u3001\u306a\u304b\u306a\u304b\u4e0a\u624b\u304f\u884c\u304d\u307e\u305b\u3093\uff0e\u7121\u7ddaLAN\u306e\u30a2\u30af\u30bb\u30b9\u30dd\u30a4\u30f3\u30c8\u56fa\u6709\u306e\u554f\u984c\u304b\u3068\u601d\u3044\u307e\u3057\u305f\u304c\u3001Apple\u4ee5\u5916\u306e\u30a2\u30af\u30bb\u30b9\u30dd\u30a4\u30f3\u30c8\u306e\u6301\u3061\u5408\u308f\u305b\u304c\u3042\u308a\u307e\u305b\u3093\u306e\u3067\u3001\u4ed6\u306e\u30e1\u30fc\u30ab\u30fc\u306e\u30a2\u30af\u30bb\u30b9\u30dd\u30a4\u30f3\u30c8\u3067\u8a66\u3059\u308f\u3051\u306b\u3082\u884c\u304d\u307e\u305b\u3093\uff0e\u3060\u3044\u3044\u3061\u5bb6\u5ead\u306a\u3069\u306e\u4e00\u822c\u7528\u3068\u3057\u3066\u51fa\u307e\u308f\u3063\u3066\u3044\u308b\u30a2\u30af\u30bb\u30b9\u30dd\u30a4\u30f3\u30c8\u3067802.1X\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u7269\u306f\u6570\u3048\u308b\u307b\u3069\u3057\u304b\u3042\u308a\u307e\u305b\u3093\uff0e\u305d\u306e\u3088\u3046\u306a\u8a33\u3067\u89e3\u6c7a\u7b56\u3092\u898b\u3044\u3060\u305b\u306a\u3044\u3067\u3044\u305f\u3068\u3053\u308d\u3001\u5b9f\u306b\u7c21\u5358\u306a\u6240\u306b\u7b54\u3048\u304c\u8ee2\u304c\u3063\u3066\u3044\u307e\u3057\u305f\uff0e<\/p>\r\n
\u4f55\u3068\u3001Free RADIUS\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb “eap.conf” \u306e\u4e2d\u306b\u3001Windows XP \u306b\u95a2\u3059\u308b\u6ce8\u610f\u66f8\u304d\u304c\u66f8\u304b\u308c\u3066\u3044\u305f\u306e\u3067\u3059\uff0e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u306f\u304d\u3061\u3093\u3068\u9685\u3005\u307e\u3067\u76ee\u3092\u901a\u3057\u3066\u7f6e\u304f\u3079\u304d\u3067\u3057\u305f\uff0e\uff0e\uff0e\uff0e\u53cd\u7701<\/p>\n
\n ##################################################\n #\n # !!!!! WARNINGS for Windows compatibility !!!!!\n #\n ##################################################\n #\n # If you see the server send an Access-Challenge,\n # and the client never sends another Access-Request,\n # then\n #\n # STOP!\n #\n # The server certificate has to have special OID's\n # in it, or else the Microsoft clients will silently\n # fail. See the \"scripts\/xpextensions\" file for\n # details, and the following page:\n #\n # http:\/\/support.microsoft.com\/kb\/814394\/en-us\n #\n # For additional Windows XP SP2 issues, see:\n #\n # http:\/\/support.microsoft.com\/kb\/885453\/en-us\n #\n # Note that we do not necessarily agree with their\n # explanation... but the fix does appear to work.\n #\n ##################################################\r\n\r\n<\/code><\/pre>\r\n
\r\n\u4e0a\u8a18\u306e MS \u306e\u30b5\u30a4\u30c8 (http:\/\/support.microsoft.com\/kb\/814394\/en-us) “Certificate requirements when you use EAP-TLS or PEAP with EAP-TLS” <\/a> \u3092\u898b\u305f\u3068\u3053\u308d\u3001\u3069\u3046\u3084\u3089Windows XP \u3067\u306fTLS\u3068PEAP\u3067\u5fc5\u8981\u3068\u306a\u308b\u8a3c\u660e\u66f8\u306b\u7279\u5225\u306a extension \u304c\u542b\u307e\u308c\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u3001\u3053\u308c\u304c\u306a\u3044\u3068Windows XP \u306f\u6b63\u5e38\u306b\u8a8d\u8a3c\u3092\u884c\u308f\u306a\u3044\u3088\u3046\u3067\u3059\uff0e\r\n
\r\n
\r\n