Hello!

I want to use FreeRADIUS to authenticate my PPTP Users with CHAP.

I've got the following problem:
When a user tries to connect to my PPTP Server using CHAP for
Authentication,
i get the following error from FreeRADIUS (running in foreground mode)

rad_recv: Access-Request packet from host 127.0.0.1:32769, id=185, length=85
        Service-Type = Framed-User
        Framed-Protocol = PPP
        User-Name = "christian"
        CHAP-Password = 0x03f758653dc1204ba78faae8880d0c9dfc
        Calling-Station-Id = "10.1.0.10"
        NAS-IP-Address = 10.1.255.254
        NAS-Port = 0
          rlm_chap: Setting 'Auth-Type := CHAP'
          rlm_sql (sql): Reserving sql socket id: 4
          rlm_sql (sql): Released sql socket id: 4
          rlm_chap: login attempt by "christian" with CHAP password     
          rlm_chap: Using clear text password kernel for user christian
authentication.
          rlm_chap: Pasword check failed


If i disable radius and authenticate my users by using /etc/ppp/chap-secrets
everything works fine. It also works if i use PAP and RADIUS.
I've also checked for using the correct secret at the nas-side and on the
freeradius-server-side.

If i use radtest it also works fine:

[EMAIL PROTECTED] ~]# radtest christian kernel 127.0.0.1 0 secret6
Sending Access-Request of id 6 to 127.0.0.1:1812
        User-Name = "christian"
        User-Password = "kernel"
        NAS-IP-Address = panther.local
        NAS-Port = 0
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=6, length=74
        Framed-Protocol = PPP
        Framed-IP-Address = 10.1.0.210
        Framed-IP-Netmask = 255.255.0.0
        Framed-MTU = 1500
        Framed-Compression = None
        Service-Type = Framed-User
        Session-Timeout = 28800
        Idle-Timeout = 28800
        Port-Limit = 1
[EMAIL PROTECTED] ~]#


Where's the problem? I'm searching for hours, but can't locate the
error.....


Thanks in Advice, for any kind of help!



Mit freundlichen Gr��en / Kind Regards

                                Christian Reiter
                                

-- 
Christian Reiter
[EMAIL PROTECTED] 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to