Andree Toonk <[EMAIL PROTECTED]> wrote:
> With the "nostrip" option the response always is  "rlm_mschap: FAILED: 
> MS-CHAP2-Response is incorrect"

  But it's no longer complaining about User-Name not matching EAP identity.

>    rlm_realm: Looking up realm "test.nl" for User-Name = "[EMAIL PROTECTED]"
>    rlm_realm: Found realm "test.nl"
>    rlm_realm: Adding Stripped-User-Name = "test"

  Why are you stripping the username AGAIN?  I thought you said you
weren't stripping it.

  Don't strip the username.  Doing so will break EAP, and MS-CHAP, as
you are discovering.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to