From owner-freebsd-net@FreeBSD.ORG  Fri Aug 17 01:50:11 2012
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 4F6021065676
	for <freebsd-net@freebsd.org>; Fri, 17 Aug 2012 01:50:11 +0000 (UTC)
	(envelope-from freebsd-net@herveybayaustralia.com.au)
Received: from mail.unitedinsong.com.au (mail.unitedinsong.com.au
	[150.101.178.33])
	by mx1.freebsd.org (Postfix) with ESMTP id 06D558FC0C
	for <freebsd-net@freebsd.org>; Fri, 17 Aug 2012 01:50:10 +0000 (UTC)
Received: from laptop3.herveybayaustralia.com.au (unknown [49.176.98.232])
	(using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.unitedinsong.com.au (Postfix) with ESMTPSA id 795465C29
	for <freebsd-net@freebsd.org>; Fri, 17 Aug 2012 11:55:39 +1000 (EST)
Message-ID: <502DA0F6.5040305@herveybayaustralia.com.au>
Date: Fri, 17 Aug 2012 11:40:06 +1000
From: Da Rock <freebsd-net@herveybayaustralia.com.au>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
	rv:13.0) Gecko/20120728 Thunderbird/13.0.1
MIME-Version: 1.0
To: freebsd-net@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: wpa_supplicant wpa peap gtc connection - gtc failing?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Aug 2012 01:50:11 -0000

I'm trying to access a uni network using wpa-peap with GTC 
authentication, and no matter what I've tried it fails.

I've come across the same error in most of my logs: "phase2 request: NAK 
type 6".

I've been at this for sometime, so I decided to contact the ICT who look 
after the radius servers, and they can't understand the why of the issue 
either- everything they can see ticks the right boxes, until my system 
says no to type 6.

Anyone know of the problem?

My network block looks like this in config:

network={
         #: <Network>
         ssid="<network ssid>"
         #+ any_bssid
         key_mgmt=WPA-EAP
         eap=PEAP
         identity="<network username>"
         password="<password>"
         phase1="peapver=0"
         phase2="autheap=GTC"
         ca_cert="<radius certificate>"
}

I have tried all combinations of peap_outer_success, peapver, peaplabel, 
but none work. I was informed the peapver should be 0 and thats about it.

Any pointers would be much appreciated.

Cheers