Hi louis,
Thank you very much for your reply. Honestly when i start deploying the
packet fence i didn't have any idea about that and some of terms were new
to me. But thank to the community, i'm slowly understanding the concept
behind pf.
Ok i understood your first reply and seems like i went thru the wrong way.
Because in this test stage, I didn't want to authenticate thru ad. So i
will keep that scenario for later time when i can do that testing
leisurely.
Regarding second mail u were talking about MAC-auth and captive portal.
I'm little bit confuse about it. Sorry if i'm asking very basic stuff. But
i'm trying to collect each and every puzzle and make the bigger picture.
I have below concerns :
If we are going to use MAC-auth and send the users to captive portal to
logging we have to use inline enforcement model or is there any chanceto
use vlan enforcement model ? could you please give me a quick idea about
the MAC-auth and how it works?
On Wed, Feb 12, 2014 at 8:08 PM, Louis Munro <[email protected]> wrote:
> And another thing.
>
> If by "created a user" you mean created a local user, that is not going to
> work.
> PEAP authentication is usually meant to be used against an external
> authentication source (e.g. and Active-Directory server).
>
> I suppose it could be configured to query a different source for the
> Cleartext-password or NT-password, but that is an exercise left to the
> reader.
>
> The short of it is: if you want PEAP, use an Active-Directory server and
> configure mschap according to the instructions in the PacketFence guide.
> If you want local users, use MAC-auth and send them to the captive portal
> where they will have to authenticate using the credentials you created.
>
> Regards,
>
> --
> Louis Munro
> [email protected] :: www.inverse.ca
> +1.514.447.4918 *125 :: +1 (866) 353-6153
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
> On 2014-02-12, at 9:16 , Louis Munro <[email protected]> wrote:
>
> Your answer lies below.
> You are failing MSCHAP authentication.
>
> Did you configure the FreeRADIUS mschap module?
>
> --
> Louis Munro
> [email protected] :: www.inverse.ca
> +1.514.447.4918 *125 :: +1 (866) 353-6153
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
> On 2014-02-12, at 0:36 , sampath jayashantha <[email protected]> wrote:
>
> [eap] processing type mschapv2
> [mschapv2] # Executing group from file
> /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
> [mschapv2] +- entering group MS-CHAP {...}
> [mschap] No Cleartext-Password configured. Cannot create LM-Password.
> [mschap] No Cleartext-Password configured. Cannot create NT-Password.
> [mschap] Creating challenge hash with username: sampath
> [mschap] Client is using MS-CHAPv2 for sampath, we need NT-Password
> [mschap] FAILED: No NT/LM-Password. Cannot perform authentication.
> [mschap] FAILED: MS-CHAP2-Response is incorrect
> ++[mschap] returns reject
> [eap] Freeing handler
> ++[eap] returns reject
> Failed to authenticate the user.
> Login incorrect: [sampath] (from client 192.168.13.45 port 50004 cli
> 78-45-C4-B5-AC-41 via TLS tunnel)
>
>
>
> ------------------------------------------------------------------------------
> Android apps run on BlackBerry 10
> Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
> Now with support for Jelly Bean, Bluetooth, Mapview and more.
> Get your Android app in front of a whole new audience. Start now.
>
> http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk_______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
>
> ------------------------------------------------------------------------------
> Android apps run on BlackBerry 10
> Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
> Now with support for Jelly Bean, Bluetooth, Mapview and more.
> Get your Android app in front of a whole new audience. Start now.
>
> http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
..........................................................................................
There is always some one who know more Than us out there.
Wê Lïvê †ð §hårê : Wê Lðvê †ð §hårê
SAM
------------------------------------------------------------------------------
Android apps run on BlackBerry 10
Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
Now with support for Jelly Bean, Bluetooth, Mapview and more.
Get your Android app in front of a whole new audience. Start now.
http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
