[EMAIL PROTECTED] (Matthew Richardson) wrote: > I have previously set up a vpn based on pptp and pppd, using a > chap-secrets file for authentication. However, I want to move this > service to a larger audience, and thus decided to use FreeRadius to > authenticate against PAM (NIS Unix passwords) for this service.
Ok... > However, a connection launched from a Windows XP machine to the vpn, > gets the following result: > > <SNIP...(all identical)> > auth: type "PAM" No, it's not "all identical". THat debug log tells you what authentication protocol is being used by the VPN, which is very important. > rlm_pam: Attribute "User-Password" is required for authentication. That would appear to be helpful. > Can anyone help explain why it seems that a connection via the vpn > doesn't pass on the password to FreeRadius? Because there isn't a password. Read the rest of the debug log to see what kind of authentication it's doing. Read the FAQ to see why /etc/passwd (or NIS) authentication can't work for CHAP, MS-CHAP, etc. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

