On Thu, May 27, 2004 at 10:36:49AM -0400, Alan DeKok wrote:
> I've tested with the latest CVS snapshot, using a copy of an
> MS-CHAPv2 session I've had sitting around for months, and which was
> taken from a non-FreeRADIUS client. It works for me.
>
> Are you sure you're running the latest CVS snapshot?
Yeps, taken from CVS these days:
static const char rcsid[] = "$Id: rlm_mschap.c,v 1.58 2004/05/25 19:08:48 aland Exp $";
Here's some debug info from code I've added in mschap module. Please, tell me
if it does help you:
rlm_mschap: Told to do MS-CHAPv2 for test with NT-Password
rlm_mschap: peer challenge 43, our challenge 53, username test, chapv1 challenge 6
rlm_mschap: password c5, response a6, calculated c1
rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
Source is here:
diff -u -r1.58 rlm_mschap.c
--- rlm_mschap.c 25 May 2004 19:08:48 -0000 1.58
+++ rlm_mschap.c 27 May 2004 15:27:11 -0000
@@ -709,6 +709,7 @@
}
lrad_mschap(password->strvalue, challenge, calculated);
+ DEBUG2(" rlm_mschap: password %x, response %x, calculated %x",
*(password->strvalue), *response, *calculated);
if (memcmp(response, calculated, 24) != 0) {
return -1;
}
@@ -1190,6 +1191,7 @@
DEBUG2(" rlm_mschap: Told to do MS-CHAPv2 for %s with NT-Password",
username_string);
+ DEBUG2(" rlm_mschap: peer challenge %x, our challenge %x, username
%s, chapv1 challenge %x", *(response->strvalue + 2), *(challenge->strvalue),
username_string, *mschapv1_challenge);
if (do_mschap(inst, request, nt_password, mschapv1_challenge,
response->strvalue + 26, nthashhash) < 0) {
--
| |--.----.-----. Dinko 'kreator' Korunic #include <stddisclaimer.h>
| <| _| -__| http://www.srce.hr/~kreator/ | http://kre.deviantart.com
|__|__|__| |_____| PGP:0xEA160D0B | IRC:kre | ICQ:16965294 | AIM:kreatorMoo
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
