Skip to Content.
Sympa Menu

geteduroam - Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback

Subject: An open discussion list for topics related to the geteduroam service

List archive

Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback


Chronological Thread  
    < Chronological >       < Thread >
  • From: Philippe Taurines <Philippe.Taurines AT crous-toulouse.fr>
  • To: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>, "geteduroam AT lists.geant.org" <geteduroam AT lists.geant.org>
  • Subject: Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback
  • Date: Wed, 17 Sep 2025 09:08:18 +0000
  • Accept-language: fr-FR, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=crous-toulouse.fr; dmarc=pass action=none header.from=crous-toulouse.fr; dkim=pass header.d=crous-toulouse.fr; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=lL2kdAFTIEL1GHJBURuxFvuQW3Q2uZZOjsmx0ooWt0c=; b=gkmbQZD2BJ8GMdKRHo1GoPuuvoChnIqUmOInazC+P/f+kZAK4fkoXkju9L6/y1XAUnSTW4dtDbLeTBbzgzQNbnDpGCzZaYbuCsA+O33QSASdSQ4hq+3zvO95CKFfEsPPZSlQnL4YzsJvrRqxS64JpACVPbvudWcQhCUCXS1HsEC34aT5aj8iZAD6UwprArbDAGfqFrAWtyVd1tJ1F6rV2cjtwModeA8pnJyxMj9peLRUByBmZW5QWhXosHES00CxMLZlrQeIKqanACxVNClCC3oWhBs51i+INll+j9A3Am1hr7L1bzagfBxBrGxjb0rBGJvLWylpwzhC+AgCm0VpmA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=RIjnMbmAekeb/Mug/pHoV1YYg+f4s87Mj/p7WXxoxQh1xoveZyyt5CwdXqpbNvlLwntGFecVkngu7P1AQbpxl+Hmnbq+NCu41eKMLzrmo468BO2juuJt80vEe7KO36XJpcudgYvAM/dg1jwOziRNX7RuJkfoHWC+FrigvQRliRZVBIaJ2nqlQrI5J8pd/d+VG432NboixRQeWrq0cVar34fAKp8NFW46R3io/n5yODHjfRNT39hJjxyzaONsuOI0JxF/C3TExinuOAQiHjeybSj9ZCFQtZmNEQHuCR4OYneHXGfOoon989ZXFXGI2TogJVDd6VJkXMks0Xu53NPN0Q==
  • Authentication-results: mail.geant.org; dkim=pass (2048-bit key; unprotected) header.d=crous-toulouse.fr header.i= AT crous-toulouse.fr header.a=rsa-sha256 header.s=selector2 header.b=FWivL7y3; dkim-atps=neutral
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=crous-toulouse.fr;

Hello,

 

We are experiencing an authentication issue with Windows 11 clients when the user's password contains the character "€".

 

We have observed the following behavior with a FreeRADIUS server and MSCHAPv2 authentication:

 

1. Windows 11 client: Connection fails if the password contains a "€".

2. Android client: Connection works, even if the password contains a "€".

3. Windows 11 client (without a "€"): Connection works.

4. Android client (without a "€"): Connection works.

 

What seems even more surprising to me is when configuring the Windows supplicant with cat-eduroam, analyzing the connection logs on the radius servers:

 

1. With an invalid password and without the "€" symbol, the client's connection attempt is clearly visible in the radius server logs.

2. With an invalid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

3. With a valid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

4. With a valid password and without the "€" symbol, the client's connection attempt is visible in the radius server logs.

 

This behavior suggests that the problem lies with the Windows supplicant.

 

Have you ever encountered a similar problem or do you have any feedback to share on this issue?

 

Are there any other characters you know of that might not be well supported?

 

Sincerely,

Attachment: smime.p7s
Description: S/MIME cryptographic signature


Archive powered by MHonArc 2.6.19+.

Top of Page