Re: MSCHAP Errors

2012-05-15 Thread sgilmour
/MSCHAP-Errors-tp5702886p5709347.html To unsubscribe from MSCHAP Errors, click herehttp://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=5702886code=c2dpbG1vdXJAZW50ZXJhc3lzLmNvbXw1NzAyODg2fDczMDY1MTY5NQ== . NAMLhttp://freeradius.1045715.n5.nabble.com

Re: MSCHAP Errors

2012-05-15 Thread Alan Buxey
What does the server try to run when actually dealing with your client? radius -X will show you, you can then try running that command yourself. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MSCHAP Errors

2012-05-15 Thread Gilmour, Scott
Thanks, I am Working on Upgrading my Ubuntu to the Ubuntu 12.04 LTS and then I will retry the PEAP Authentication I will keep you posted with my results. root@FreeRadius:/home/sqauser# radius -X No command 'radius' found, did you mean: Command 'radiusd' from package 'radiusd-livingston'

Re: MSCHAP Errors

2012-05-15 Thread Alan DeKok
Gilmour, Scott wrote: I am Working on Upgrading my Ubuntu to the Ubuntu 12.04 LTS and then I will retry the PEAP Authentication I will keep you posted with my results. Upgrading won't help. root@FreeRadius:/home/sqauser# radius -X No command 'radius' found, did you mean: Command

Re: MSCHAP Errors

2012-05-15 Thread alan buxey
Hi, I am Working on Upgrading my Ubuntu to the Ubuntu 12.04 LTS and then I will retry the PEAP Authentication I will keep you posted with my results. I cant spoon feed you with all your required details - I have a day job too... if you use Ubuntu, then it uses a different name

Re: MSCHAP Errors

2012-05-14 Thread James J J Hooper
On 11/05/2012 13:35, Phil Mayers wrote: On 11/05/12 13:10, sgilmour wrote: --nt-response=46eb0f981a6121ad65e5726b0ee0e2097d610172204c7f24 Fri May 11 08:08:13 2012 : Debug: Exec-Program output: Access denied (0xc022) Fri May 11 08:08:13 2012 : Debug: Exec-Program-Wait: plaintext: Access

Re: MSCHAP Errors

2012-05-14 Thread sgilmour
.nabble.com/MSCHAP-Errors-tp5702886p5709347.html To unsubscribe from MSCHAP Errors, click herehttp://freeradius.1045715.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_codenode=5702886code=c2dpbG1vdXJAZW50ZXJhc3lzLmNvbXw1NzAyODg2fDczMDY1MTY5NQ== . NAMLhttp://freeradius.1045715.n5.nabble.com

Re: MSCHAP Errors

2012-05-14 Thread alan buxey
Hi, After doing more testing rather than doing PEAP authentication I attempted to do TLS Authentication.  When I did TLS authentication my TLS User authenticated just fine and I was able to receive an access-accept.  When doing PEAP Authentication my PEAP user will fail with an

MSCHAP Errors

2012-05-11 Thread sgilmour
in 1.0 seconds. Fri May 11 08:08:19 2012 : Info: Cleaning up request 115 ID 139 with timestamp +1770 Fri May 11 08:08:19 2012 : Info: Ready to process requests. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MSCHAP-Errors-tp5702886.html Sent from the FreeRadius - User

Re: MSCHAP Errors

2012-05-11 Thread Phil Mayers
On 11/05/12 13:10, sgilmour wrote: --nt-response=46eb0f981a6121ad65e5726b0ee0e2097d610172204c7f24 Fri May 11 08:08:13 2012 : Debug: Exec-Program output: Access denied (0xc022) Fri May 11 08:08:13 2012 : Debug: Exec-Program-Wait: plaintext: Access denied (0xc022) Fri May 11 08:08:13 2012

Re: LDAP MSCHAP errors

2008-11-12 Thread Simon Palmer
FreeRADIUS Version 2.1.1, for host x86_64-unknown-linux-gnu, built on Nov 10 2008 at 13:18:51 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS

Re: LDAP MSCHAP errors

2008-11-12 Thread tnt
pap against LDAP works fine chap against LDAP works fine (With ntradping) They used different password. Do you mean chap and MSCHAPv2 require passwords in different formats or something? No. There is a clear text password stored somewhere. I can auth CHAP, but with the same username and

Re: LDAP MSCHAP errors

2008-11-12 Thread Simon Palmer
pap against LDAP works fine chap against LDAP works fine (With ntradping) They used different password. Do you mean chap and MSCHAPv2 require passwords in different formats or something? I can auth CHAP, but with the same username and password can't auth CHAPv2 (with no config change on

Re: LDAP MSCHAP errors

2008-11-12 Thread Simon Palmer
Great - thanks, Absolutely outstanding help thanks! :) I hashed from ldap.attrmap as below #checkItem LM-Password sambaLmPassword #checkItem NT-Password sambaNtPassword And it all worked! :) Thanks very much! Simon [EMAIL PROTECTED] 12/11/2008

Re: LDAP MSCHAP errors

2008-11-12 Thread tnt
[ldap] Added the eDirectory password password in check items as Cleartext-Password OK. Here is the clear text password. [ldap] No default NMAS login sequence [ldap] looking for check items in directory... rlm_ldap: acctFlags - SMB-Account-CTRL-TEXT == [UX ] rlm_ldap: sambaNtPassword -

LDAP MSCHAP errors

2008-11-11 Thread Simon Palmer
Hi, We are trying to set up freeRADIUS 2.1.1 against eDirectory LDAP and getting problems. (Trying SLES 10 SP2 32bit and 64 bit) pap against LDAP works fine chap against LDAP works fine (With ntradping) BUT - MSCHAPv2 gives FAILED: MS-CHAP2-Response is incorrect Am I missing something required

Re: LDAP MSCHAP errors

2008-11-11 Thread tnt
We are trying to set up freeRADIUS 2.1.1 against eDirectory LDAP and getting problems. (Trying SLES 10 SP2 32bit and 64 bit) pap against LDAP works fine chap against LDAP works fine (With ntradping) They used different password. BUT - MSCHAPv2 gives FAILED: MS-CHAP2-Response is incorrect Am I