David Sotnick <[EMAIL PROTECTED]> wrote: > After studying the logs closely, it seems as though the tunneled message > is requesting MS-CHAP authentication with NT-Password (?). Is this > typical or expected?
If it's what your client is configured to use. The NT-Password is just the hash of the clear-text password. > modcall: entering group Auth-Type for request 4 > rlm_mschap: No User-Password configured. Cannot create LM-Password. > rlm_mschap: No User-Password configured. Cannot create NT-Password. > rlm_mschap: Told to do MS-CHAPv2 for sotnickd with NT-Password > rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. You've got to tell the server what the clear-text password is for the user. I suggest putting it into the LDAP database, as it isn't found there now: > rlm_ldap: ldap_get_conn: Got Id: 0 > rlm_ldap: performing search in o=ddv.com, with filter (uid=sotnickd) > rlm_ldap: looking for check items in directory... ... i.e. it found nothing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

