Security

 View Only
Expand all | Collapse all

Anonymous outher identity: eap-peap: Conflicting identities

This thread has been viewed 24 times
  • 1.  Anonymous outher identity: eap-peap: Conflicting identities

    Posted Aug 22, 2019 04:37 AM

    Hi!

     

    We are supporting eduroam for a customer. All works fine when I test a customer site.

    But I discovered that when connecting from outside our customers site we always seems to get this error when using a anonymous outer identity:

     

    eap-peap: Conflicting identities 'anonymous@domain.se' and 'firstname.lastname@domain.se' in the request
    TLS session reuse error.

     

    We use cat.eduroam.org tool to configure clients with an anonymous outer identity. So I do believe the client is correctly configured. Also it works onsite with the same client config.



  • 2.  RE: Anonymous outher identity: eap-peap: Conflicting identities
    Best Answer

    Posted Aug 22, 2019 05:07 AM

    Never mind, think I found the issue. The log reveals more:

     

    ERROR RadiusServer.Radius - rlm_eap_peap: Client sent a valid identity 'anonymous@domain.se' in outer request, and is sending another identity 'firstname.lastname@domain.se' in inner, rejecting the request

     

    Turns out someone once created an account called anonymous. As it seams to not be in use I will remove it and I assume our issue goes away.