[EMAIL PROTECTED] (Matthew Richardson) wrote:
> I have previously set up a vpn based on pptp and pppd, using a
> chap-secrets file for authentication.  However, I want to move this
> service to a larger audience, and thus decided to use FreeRadius to
> authenticate against PAM (NIS Unix passwords) for this service.

  Ok...

> However, a connection launched from a Windows XP machine to the vpn,
> gets the following result:
>  
> <SNIP...(all identical)>
> auth: type "PAM"

  No, it's not "all identical".  THat debug log tells you what
authentication protocol is being used by the VPN, which is very
important.

> rlm_pam: Attribute "User-Password" is required for authentication.

  That would appear to be helpful.

> Can anyone help explain why it seems that a connection via the vpn
> doesn't pass on the password to FreeRadius?

  Because there isn't a password.  Read the rest of the debug log to
see what kind of authentication it's doing.

  Read the FAQ to see why /etc/passwd (or NIS) authentication can't
work for CHAP, MS-CHAP, etc.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to