Skip to content

Fixing eap template #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cruelsmith merged 2 commits into from
Sep 12, 2025
Merged

Fixing eap template #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ab028b5
Add option to remove mschapv2 inside eap config
cruelsmith Sep 9, 2025
6f87b74
Remove disable_tlsv1* from eap config if tls_min_version or tls_max_v…
cruelsmith Sep 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions manifests/module/eap.pp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,7 @@
Boolean $eap_leap = true,
Boolean $eap_gtc = true,
Boolean $eap_peap = true,
Boolean $eap_mschapv2 = true,
) {
freeradius::module { $name:
ensure => $ensure,
Expand Down
18 changes: 13 additions & 5 deletions templates/eap.erb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -461,10 +461,12 @@ eap {
# tls_max_version.
#
# disable_tlsv1_2 = no
<%- unless @tls_min_version or @tls_max_version -%>
disable_tlsv1_1 = yes
disable_tlsv1 = yes
<%- if @tls_disable_tlsv1_2 -%>
disable_tlsv1_2 = <%= @tls_disable_tlsv1_2 %>
<%- end -%>
<%- end -%>

# Set min / max TLS version. Mainly for Debian
Expand Down Expand Up @@ -1032,7 +1034,7 @@ eap {
# of MS-CHAPv2 in EAP by Cisco, which FreeRADIUS does not
# currently support.
#
mschapv2 {
# mschapv2 {
# Prior to version 2.1.11, the module never
# sent the MS-CHAP-Error message to the
# client. This worked, but it had issues
Expand All @@ -1050,21 +1052,27 @@ eap {
# working.
#
# send_error = no
<%- if @mschapv2_send_error -%>
send_error = <%= @mschapv2_send_error %>
<%- end -%>


# Server identifier to send back in the challenge.
# This should generally be the host name of the
# RADIUS server. Or, some information to uniquely
# identify it.
#
# identity = "FreeRADIUS"

# }
<%- if @eap_mschapv2 -%>
mschapv2 {
<%- if @mschapv2_send_error -%>
send_error = <%= @mschapv2_send_error %>
<%- end -%>

<%- if @mschapv2_identity -%>
identity = "<%= @mschapv2_identity %>"
<%- end -%>
}

<%- end -%>

# EAP-FAST
#
Expand Down