Freeradius2 connection refused

Installing and Using OpenWrt
1

Hi all
I am struggling is setting up a working WPA2-EAP authentication using wpad full and freeradius2.
The problem is that I really don't understand what it is happening.
I have setup the client and an user in freeradius config, if I start rediusd -XX I get no error at all and in the end I see that freeradius is listening for connection:

Tue May 2 19:17:02 2017 : Debug: radiusd: #### Opening IP addresses and Ports ####
Tue May 2 19:17:02 2017 : Debug: listen {
Tue May 2 19:17:02 2017 : Debug: type = "auth"
Tue May 2 19:17:02 2017 : Debug: ipaddr = *
Tue May 2 19:17:02 2017 : Debug: port = 1812
Tue May 2 19:17:02 2017 : Debug: }
Tue May 2 19:17:02 2017 : Debug: listen {
Tue May 2 19:17:02 2017 : Debug: type = "acct"
Tue May 2 19:17:02 2017 : Debug: ipaddr = *
Tue May 2 19:17:02 2017 : Debug: port = 1813
Tue May 2 19:17:02 2017 : Debug: }
Tue May 2 19:17:02 2017 : Debug: Listening on authentication interface br-lan address * port 1812
Tue May 2 19:17:02 2017 : Debug: Listening on accounting interface br-lan address * port 1813
Tue May 2 19:17:02 2017 : Info: Ready to process requests.
`

I set in Luci WPA2-EAP and both authentication and accounting server to 127.0.0.1 (yes the freeradius server is on the same access point), port 1812 and 1813 and the correct secret (so far only one).
The problem is that the wireless clients cannot authenticate and no event is detected by the radiusd logs (no connection attempt, nothing) and wpad logs this error:

Tue May 2 19:23:08 2017 daemon.notice hostapd: recv[RADIUS]: Connection refused
Tue May 2 19:23:11 2017 daemon.notice hostapd: recv[RADIUS]: Connection refused
Tue May 2 19:23:17 2017 daemon.notice hostapd: recv[RADIUS]: Connection refused
Tue May 2 19:23:23 2017 daemon.notice hostapd: wlan1: RADIUS No response from Authentication server 127.0.0.1:1812 - failover
Tue May 2 19:23:23 2017 daemon.info hostapd: wlan1: RADIUS Authentication server 127.0.0.1:1812
Tue May 2 19:23:23 2017 daemon.notice hostapd: recv[RADIUS]: Connection refused

Now, looking at the openwrt manual for EAP setup it seems that the section has been modified recently. Before there was only a "server", no I see authentication and accounting, so maybe the problem is here

2

Hi
I have installed freeradius2 on an ubuntu server
Now I see that hostapd can connect to the radius server but the authentication doesn't complete
This is what I get from the freeradius logs:

    EAP-Message = 0x8a72265df2f01f78b50e8792f07a3388c229e44b6bb4412f156a7bcd160303014d0c0001490300174104eb29a317a49271e2a5e3b533c7994ed2b0da8b080dc7330e2d8bb542aa1fdc38ceb7771cffd7d86dbf7cf327cb40bbc118caa70c38b6297039d36892b8Wed May  3 21:17:26 2017 : Info: Finished request 36.

Wed May 3 21:17:26 2017 : Debug: Going to the next request
Wed May 3 21:17:26 2017 : Debug: Waking up in 4.9 seconds.
Wed May 3 21:17:31 2017 : Info: Cleaning up request 34 ID 41 with timestamp +574
Wed May 3 21:17:31 2017 : Info: Cleaning up request 35 ID 42 with timestamp +574
Wed May 3 21:17:31 2017 : Info: Cleaning up request 36 ID 43 with timestamp +574
Wed May 3 21:17:31 2017 : Debug: WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Wed May 3 21:17:31 2017 : Debug: WARNING: !! EAP session for state 0xd1f19d03d34c849e did not finish!
Wed May 3 21:17:31 2017 : Debug: WARNING: !! Please read http://wiki.freeradius.org/guide/Certificate_Compatibility
Wed May 3 21:17:31 2017 : Debug: WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Wed May 3 21:17:31 2017 : Info: Ready to process requests.

Now it comes the question: what kind of EAP should I use? PEAP or others?

3

Hi
It turned out that the problem is with the 5Ghz radio of my two EA4500 (mwl8k driver).
I think it has to do with the global stability problem of this driver: https://dev.openwrt.org/ticket/21284
I fact I wanted to setup EAP in the attempt to improve the stability, which is unacceptable now with android and iOS clients