Dear [EMAIL PROTECTED],
In second example password doesn't match supplied for username . Check
passwords.
--Wednesday, March 5, 2003, 2:21:06 PM, you wrote to [EMAIL PROTECTED]:
dnen> Hi,
dnen> Anyone knows what i'm doing wrong?
dnen> i'm using freeradius 0.8.1
dnen> requests with mschapv1 go ok:
dnen> --
dnen> rad_recv: Access-Request packet from host 212.0.226.178:47278, id=164,
dnen> length=162
dnen> User-Name = "username"
dnen> Service-Type = Framed-User
dnen> NAS-IP-Address = 203.63.154.1
dnen> NAS-Port = 1234
dnen> Called-Station-Id = "123456789"
dnen> Calling-Station-Id = "987654321"
dnen> NAS-Port-Type = Async
dnen> MS-CHAP-Challenge = 0x102db5df085d3041
dnen> MS-CHAP-Response =
0x01010000000000000000000000000000000000000000000000002d20af3dc3323e02b1ae7767485ec04c109e6c1bc4e064ab
dnen> auth: type "MS-CHAP"
dnen> modcall: entering group authtype
dnen> rlm_mschap: doing MS-CHAPv1 with NT-Password
dnen> rlm_mschap: adding MS-CHAPv1 MPPE keys
dnen> modcall[authenticate]: module "mschap" returns ok
dnen> --
dnen> but with mschapv2 i get:
dnen> --
dnen> rad_recv: Access-Request packet from host xxx, id=81, length=151
dnen> User-Name = "username"
dnen> MS-CHAP-Challenge = 0xc6fe14db8253be24aa74d4a98c09751d
dnen> MS-CHAP2-Response =
0x810021775d2e6462f07de242ac6f3c40621b0000000000000000f767122dcac60b6e81ef4b7507338ac1dbdc83a2848f2bcf
dnen> NAS-Identifier = "nasid"
dnen> NAS-Port = 176
dnen> NAS-Port-Type = Virtual
dnen> Service-Type = Authenticate-Only
dnen> -snip-
dnen> auth: type "MS-CHAP"
dnen> modcall: entering group authtype
dnen> rlm_mschap: doing MS-CHAPv2 with NT-Password
dnen> rlm_mschap: Authentication failed
dnen> rlm_mschap: Nothing in the packet I recognise: Rejecting the user
dnen> modcall[authenticate]: module "mschap" returns reject
dnen> --
dnen> radius.conf:
dnen> modules {
dnen> mschap {
dnen> authtype = MS-CHAP
dnen> use_mppe = yes
dnen> require_encryption = yes
dnen> require_strong = yes
dnen> }
dnen> }
dnen> authorize {
dnen> preprocess
dnen> chap
dnen> suffix
dnen> files
dnen> ldap {
dnen> notfound = return
dnen> }
dnen> mschap
dnen> }
dnen> authenticate {
dnen> authtype CHAP {
dnen> chap
dnen> }
dnen> authtype LDAP {
dnen> ldap
dnen> }
dnen> authtype MS-CHAP{
dnen> mschap
dnen> }
dnen> }
dnen> Grtz,
dnen> Diederik
dnen> -
dnen> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
~/ZARAZA
Особую проблему составляет алкоголизм. (Лем)
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
