Hi all, I tried to use MSCHAP v2 in freeradius 1.0.0 but got rlm_mschap: FAILED: MS-CHAP2-Response is incorrect I guess this can happen only when "response" is not matched with "calculated". But MSCHAP v2 worked with freeradius 0.9.3 version and the same NAS. Take a look at the log below and let me know your thought.
Thanks Kevin rad_recv: Access-Request packet from host 1.2.3.4:1645, id=1, length=189 Framed-Protocol = PPP User-Name = "[EMAIL PROTECTED]" MS-CHAP-Challenge = 0xc1cf72bd0daa9cd9bc695811264ae8c6 MS-CHAP2-Response = 0x010080914194e9ca506a41b2dfd66c76af4d0000000000000000f9ac2d5de4e08ae2f85dca84f2f47b5877eea11177308811 NAS-Port-Type = Virtual Cisco-NAS-Port = "Uniq-Sess-ID735" NAS-Port = 735 Service-Type = Framed-User NAS-IP-Address = 1.2.3.3 Proxy-State = 0xdeadbeef00000001 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "attr_filter" returns noop for request 0 rlm_realm: Looking up realm "test.com" for User-Name = "[EMAIL PROTECTED]" rlm_realm: No such realm "test.com" modcall[authorize]: module "suffix" returns noop for request 0 users: Matched [EMAIL PROTECTED] at 102 modcall[authorize]: module "files" returns ok for request 0 rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = MS-CHAP' modcall[authorize]: module "mschap" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type MS-CHAP auth: type "MS-CHAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 0 rlm_mschap: Told to do MS-CHAPv2 for [EMAIL PROTECTED] with NT-Password rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modcall[authenticate]: module "mschap" returns reject for request 0 modcall: group Auth-Type returns reject for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 1 to 1.2.3.4:1645 MS-CHAP-Error = "\001E=691 R=1" Proxy-State = 0xdeadbeef00000001 Waking up in 4 seconds... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
