FreeRadius Error - require_message_authenticator

[Patrick M. Hausen]

It's merged already. Unfortunately I do not understand the code well enough to implement the client side with OPNsense as a RADIUS client. That's why I created that feature request instead.

[rainerle]

Our VPN IPSec service just broke today at 16:00 CEST due to Microsoft requiring the config change.
"RequireMsgAuth and/or limitProxyState configuration is in Disable mode. These settings should be configured in Enable mode for security purposes. See https://support.microsoft.com/help/5040268 to learn more."

So enabling the requirement to send RequireMsgAuth breaks the OPNsense Client - disabling it on the Windows Server NPS gives above error message.

I think a quick patch is required here!

[Patrick M. Hausen]

@rainerle

Please add your situation to this issue in github, then. It's not guaranteed Franco or any other Deciso developer will take notice of this thread.

https://github.com/opnsense/core/issues/7983

Thanks!
Patrick