<[EMAIL PROTECTED]> wrote: > but with mschapv2 i get: > -- ...> > auth: type "MS-CHAP" > modcall: entering group authtype > rlm_mschap: doing MS-CHAPv2 with NT-Password > rlm_mschap: Authentication failed > rlm_mschap: Nothing in the packet I recognise: Rejecting the user
The MS-CHAP module has some sanity checks so that it doesn't even bother to check the authentication if the response isn't what it expects. e.g. an MS-CHAPv2 response of 1 byte, or of 200 bytes. Those checks may be wrong. Poke at the source code in rlm_mschap.c to see why/where it's making it's decision, and what it's doing wrong. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
