David Sotnick <[EMAIL PROTECTED]> wrote:
> After studying the logs closely, it seems as though the tunneled message
> is requesting MS-CHAP authentication with NT-Password (?). Is this
> typical or expected?

  If it's what your client is configured to use.

  The NT-Password is just the hash of the clear-text password.

> modcall: entering group Auth-Type for request 4
>   rlm_mschap: No User-Password configured.  Cannot create LM-Password.
>   rlm_mschap: No User-Password configured.  Cannot create NT-Password.
>   rlm_mschap: Told to do MS-CHAPv2 for sotnickd with NT-Password
>   rlm_mschap: FAILED: No NT/LM-Password.  Cannot perform authentication.

  You've got to tell the server what the clear-text password is for
the user.  I suggest putting it into the LDAP database, as it isn't
found there now:

> rlm_ldap: ldap_get_conn: Got Id: 0
> rlm_ldap: performing search in o=ddv.com, with filter (uid=sotnickd)
> rlm_ldap: looking for check items in directory...
...

  i.e. it found nothing.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to