Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
FreeRadius Error - require_message_authenticator
« previous
next »
Print
Pages:
1
[
2
]
Author
Topic: FreeRadius Error - require_message_authenticator (Read 1012 times)
Patrick M. Hausen
Hero Member
Posts: 6816
Karma: 572
Re: FreeRadius Error - require_message_authenticator
«
Reply #15 on:
October 18, 2024, 09:46:26 pm »
It's merged already. Unfortunately I do not understand the code well enough to implement the client side with OPNsense as a RADIUS client. That's why I created that feature request instead.
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
rainerle
Full Member
Posts: 151
Karma: 9
Re: FreeRadius Error - require_message_authenticator
«
Reply #16 on:
October 19, 2024, 05:54:49 pm »
Our VPN IPSec service just broke today at 16:00 CEST due to Microsoft requiring the config change.
"RequireMsgAuth and/or limitProxyState configuration is in Disable mode. These settings should be configured in Enable mode for security purposes. See
https://support.microsoft.com/help/5040268
to learn more."
So enabling the requirement to send RequireMsgAuth breaks the OPNsense Client - disabling it on the Windows Server NPS gives above error message.
I think a quick patch is required here!
Logged
Patrick M. Hausen
Hero Member
Posts: 6816
Karma: 572
Re: FreeRadius Error - require_message_authenticator
«
Reply #17 on:
October 19, 2024, 06:06:19 pm »
@rainerle
Please add your situation to this issue in github, then. It's not guaranteed Franco or any other Deciso developer will take notice of this thread.
https://github.com/opnsense/core/issues/7983
Thanks!
Patrick
«
Last Edit: October 21, 2024, 08:55:06 am by Patrick M. Hausen
»
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
Print
Pages:
1
[
2
]
« previous
next »
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
FreeRadius Error - require_message_authenticator