So, is it wrong to just use the prefix to calculate the response in the cases where you get a prefix and a suffix? Or are there some cases where this would break other things? Just curious...
-----Original Message----- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 3:30 PM To: [EMAIL PROTECTED] Subject: Re: MS-CHAPv2 + MySQL + group authtype failure "Eliot Gable" <[EMAIL PROTECTED]> wrote: > I got it to work. I removed the @homenode.greatlakes.net from the > username and the received response then matched the calculated response. Yup. > My question now is, if both user egable and > [EMAIL PROTECTED] are in the database with the same > password, why would it matter which way it is passed in? Because the client (i.e. Windows box) is using "egable" to calculate the MS-CHAP data, and then sending "[EMAIL PROTECTED]" as the User-Name to the RADIUS server. So the RADIUS tries to use "[EMAIL PROTECTED]" to calculate the MS-CHAP data, and gets confused. I hate Windows. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
