----- Original Nachricht ----
Von: Stefan Winter <[EMAIL PROTECTED]>
An: FreeRadius users mailing list <[email protected]>
Datum: 03.05.2006 11:59
Betreff: Re: ntlm_auth is not used by mschap
> > Now i try to authenticate the user roka:
> > ---------------------------------------------------
> >
> > Debian:/tmp# radtest roka Gerti1000 localhost 1645 testing123
> > Sending Access-Request of id 116 to 127.0.0.1:1812
> > User-Name = "roka"
> > User-Password = "Gerti1000"
> > NAS-IP-Address = Debian
> > NAS-Port = 1645
> > rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=116,
> length=20
>
> You send a packet that does not contain any MS-CHAP attributes. Because of
> that, the server is not doing MS-CHAP:
>
> > modcall[authorize]: module "mschap" returns noop for request 0
>
> As this line tells you.
>
> Send a MS-CHAP request, and look what happens then.
>
> Stefan
>
> --
> Stefan WINTER
>
> Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de
> la Recherche
> Ingenieur Forschung & Entwicklung
>
> 6, rue Richard Coudenhove-Kalergi
> L-1359 Luxembourg
> E-Mail: [EMAIL PROTECTED] Tel.: +352 424409-1
> http://www.restena.lu Fax: +352 422473
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
Hi Stefan,
You say i do not send a MS-CHAP Request. Hmm ...
Finally it should work with Windows-XP Supplicant:
In my WindowsXP 802.1X Network-Configuration I can choose between
"MD5Challenge" , or "secure EAP(PEAP)" or "Smartcart or other Certificate"
What ist the right one?
Or is mschap basically the wrong authentication method for my equipment?
Robert
Viel oder wenig? Schnell oder langsam? Unbegrenzt surfen + telefonieren
ohne Zeit- und Volumenbegrenzung? DAS TOP ANGEBOT JETZT bei Arcor: günstig
und schnell mit DSL - das All-Inclusive-Paket für clevere Doppel-Sparer,
nur 44,85 inkl. DSL- und ISDN-Grundgebühr!
http://www.arcor.de/rd/emf-dsl-2
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
