On 28 Sep 2011, at 21:18, Alan DeKok wrote: > scoth wrote: >> I'm stuck in my testing. I have configured and reconfigured my freeradius >> and keep getting back to the same error: >> [mschap] ERROR: User-Name (RC24558\jojo) is not the same as MS-CHAP Name >> (jojo) from EAP-MSCHAPv2 > > That data is sent by the Windows box, and isn't under the control of > FreeRADIUS. > > Sometimes Windows does this... I'm not really sure why. > >> I was able to use the mschap-username to successfully authenticate to ldap >> but then fail in the authentication because the usernames are not the same. >> >> Any help is greatly appreciated. > > Set up a fake user account with a username "test", and password > "hello". Do the same test. If you get the same error, submit the debug > output to bugzilla.freeradius.org. I'll see if there's a way for the > server to figure out the correct thing to do here.
Which standard says that the MSCHAPv2 identity and the PEAP Inner identity have to match? I thought it was in the PEAPv0 draft but that doesn't actually mention MSCHAPv2 anywhere... -Arran Arran Cudbard-Bell [email protected] Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ ! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
