Should Tunnel-Private-Group-Id be a check item? New versions of the server should use Cleartext-Password:= .
Ivan Kalik Kalik Informatika ISP Dana 24/5/2007, "Matt Ashfield" <[EMAIL PROTECTED]> piše: >Hi > >I'm trying to do PEAP authentication against a user listed in my users file >instead of an AD or LDAP. I'm just doing this initially for some proof of >concept stuff. > >I'm wondering how I need to set up the user in the users file? Currently my >entry looks like: > >"testuser" User-Password == "abc.123", Tunnel-Private-Group-Id=staff > >But when I run in debug mode I'm getting the following, which indicates to >me perhaps I'm not setting the password correctly: > > >modcall: entering group MS-CHAP for request 7 >Thu May 24 15:56:47 2007 : Debug: modsingle[authenticate]: calling mschap >(rlm_mschap) for request 7 >Thu May 24 15:56:47 2007 : Debug: rlm_mschap: No User-Password configured. >Cannot create LM-Password. >Thu May 24 15:56:47 2007 : Debug: rlm_mschap: No User-Password configured. >Cannot create NT-Password. >Thu May 24 15:56:47 2007 : Debug: rlm_mschap: Told to do MS-CHAPv2 for >testuser with NT-Password >Thu May 24 15:56:47 2007 : Debug: rlm_mschap: FAILED: No NT/LM-Password. >Cannot perform authentication. >Thu May 24 15:56:47 2007 : Debug: rlm_mschap: FAILED: MS-CHAP2-Response is >incorrect >Thu May 24 15:56:47 2007 : Debug: modsingle[authenticate]: returned from >mschap (rlm_mschap) for request 7 >Thu May 24 15:56:47 2007 : Debug: modcall[authenticate]: module "mschap" >returns reject for request 7 >Thu May 24 15:56:47 2007 : Debug: modcall: leaving group MS-CHAP (returns >reject) for request 7 >Thu May 24 15:56:47 2007 : Debug: rlm_eap: Freeing handler >Thu May 24 15:56:47 2007 : Debug: modsingle[authenticate]: returned from >eap (rlm_eap) for request 7 >Thu May 24 15:56:47 2007 : Debug: modcall[authenticate]: module "eap" >returns reject for request 7 >Thu May 24 15:56:47 2007 : Debug: modcall: leaving group authenticate >(returns reject) for request 7 >Thu May 24 15:56:47 2007 : Debug: auth: Failed to validate the user. > >Any advice is appreciated. >Matt >[EMAIL PROTECTED] > > > > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
