"Michael Davidson" <[EMAIL PROTECTED]> wrote: > No request-determined auth-type works for me right now, but one thing at a > time, so I've focused on MS-CHAP first. ... > As a test case I've used a MS-CHAP request which I apply via radclient(the > challenge & response attributes are a valid pair). In the following debug > trace it's my expectation that the MS-CHAP module would set the Auth-Type to > MS-CHAP, but obviously it doesn't. ... > modcall[authorize]: module "mschap" returns notfound
List 'mschap' after 'ldap', that should help. The issue is that the MSCHAP module looks for MS-CHAP to set Auth-Type:= MSCHAP. But it ALSO looks for User-Password, to create NT passwords. The second step is what's failing. The MSCHAP module should be updated to do the second step only during the authentication phase. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
