Just to post a confirmation, this was my issue (multiple copies of modules in
the /etc/raddb/modules directory), which was self-inflicted since I kept
them there.
I had other issues come up with permissions, logon failures due to realm,
etc. All were resolved with the FreeRADIUS documentation
: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc06a)
Exec-Program-Wait: plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password
(0xc06a)
Eventually, it locks the acocunt in active directory:
[ntlm_auth] expand: --username=%{mschap:User-Name} - --username=user
[ntlm_auth] expand: --password=%{User-Password
Hi,
I am having a similar issue to this. I have LDAP authentication working.
However, my wireless controller, Nortel/Avaya 2382, will not work.
and what type of request is coming through? If its not a PAP
type of request - as per from your server test, then you wont have
%{User-Password}
Alan Buxey wrote
and what type of request is coming through? - check the mschap module
to see the challenge response
example and 'radiusd -X' for help does help...
Alan, thank you, my wireless controller was set to send MSCHAP-v2. Changing
the controller to PAP allows it to
lint wrote
Alan, thank you, my wireless controller was set to send MSCHAP-v2.
Changing the controller to PAP allows it to complete a successful radius
ping. However, I have moved onto another problem, an 802.1x client will
not authenticate sending EAP-PEAP/EAP-MSCHAP-v2.
So, if I
You certainly dont need to set anything in your users file for 802.1X with an
AD backend
As already stated, where is your radiusd -X ?
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan Buxey wrote
You certainly dont need to set anything in your users file for 802.1X with
an AD backend
As already stated, where is your radiusd -X ?
I really apologize, I misunderstood you. Thank you so much!
Here it is:
FreeRADIUS Version 2.1.11, for host x86_64-redhat-linux-gnu,
Hi,
Ready to process requests.
.and then nothing.the output is only useful if you show a failing
request actually being handled :-)
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Module: Instantiating module ntlm_auth from file
/etc/raddb/modules/ntlm_auth
exec ntlm_auth {
wait = yes
program = /usr/bin/ntlm_auth --request-nt-key
--domain=domain.net--username=%{mschap:User-Name}
^^
PS you have a typo
alan
-
List
Alan Buxey wrote
Hi,
Module: Instantiating module ntlm_auth from file
/etc/raddb/modules/ntlm_auth
exec ntlm_auth {
wait = yes
program = /usr/bin/ntlm_auth --request-nt-key
--domain=domain.net--username=%{mschap:User-Name}
^^
PS you have a
The freeradius daemon reads ALL files in the modules directory. You have
duplicates and eg .rpmnew . Remove those and things may just work nicely for you
alan
--
Message may be brief as it has been sent from my mobile
-
List info/subscribe/unsubscribe? See
On Thu, Dec 8, 2011 at 6:11 AM, lint l...@pillclan.com wrote:
Alan, here is the output of everything with a failed request:
Did you read this?
Module: Linked to module rlm_chap
Module: Instantiating module chap from file /etc/raddb/modules/chap
Module: Linked to module rlm_mschap
Module:
Fajar A. Nugraha-2 wrote
Did you read this?
Module: Linked to module rlm_chap
Module: Instantiating module chap from file /etc/raddb/modules/chap
Module: Linked to module rlm_mschap
Module: Instantiating module mschap from file
/etc/raddb/modules/mschap.org
mschap {
On Thu, Dec 8, 2011 at 9:26 AM, lint l...@pillclan.com wrote:
I made backups of the files in modules before I
modified them, as I always do with configuration files. I didn't realize
that FreeRADIUS loads all modules. I will move the backups to my home
directory and try again tomorrow
Fajar A. Nugraha-2 wrote
Somewhat off topic, did you know you can use git to keep track of
configuration changes? Something like this should make your live a lot
easier
- cd /etc/raddb
- git init
- everytime you make a change, do git commit -a
--
Fajar
I have heard of git in the
Hi,
[ntlm_auth] expand: --username=%{mschap:User-Name} - --username=testuser
[ntlm_auth] expand: --password=%{User-Password} - --password=
^^
look. blank!
use the correct attribute in that --password argument
Guillermo W. Llanes Suárez wrote:
_*when I do the test using mschap radtest-t is when the key is erroneous*_
/radtest -t mschap gwilliam 1qazxsw23edc@ localhost 0 testing123/
Because you edited the configuration and broke it.
Don't do that.
Alan DeKok.
-
List info/subscribe/unsubscribe?
El 01/12/2011 3:49, Alan DeKok escribió:
Because you edited the configuration and broke it.
Don't do that.
thanks alan, the main problem when I try to authenticate a client EAP
(PEAP) against the radius server when it attempts to authenticate using
ntlm_auth is wrong, however, is
2011/12/1 Guillermo W. Llanes Suárez gwill...@uci.cu:
El 01/12/2011 3:49, Alan DeKok escribió:
Because you edited the configuration and broke it.
Don't do that.
thanks alan, the main problem when I try to authenticate a client EAP (PEAP)
against the radius server when it attempts to
] expand: --password=%{User-Password} - --password=
Exec-Program output: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc06a)
Exec-Program-Wait: plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password
(0xc06a)
Exec-Program: returned: 1
++[ntlm_auth] returns reject
Failed to authenticate the user
Angelica Delgado wrote:
I follow
http://deployingradius.com/documents/configuration/active_directory.html to
configure freeradius with Active Directory. Samba and Kerberos works.
When running
ntlm_auth --request-nt-key command and it works but through
Freeradius, it gives
Hello friends, I tell them:
When I try to authenticate using mschap I encounter this
error''NT_STATUS_WRONG_PASSWORD: Wrong Password'', yet when I do the
test using authentic pap without problems. I'm trying to authenticate my
freeradius server with active directory server.
Greetings
Hi,
Hello friends, I tell them:
When I try to authenticate using mschap I encounter this
error''NT_STATUS_WRONG_PASSWORD: Wrong Password'', yet when I do the
test using authentic pap without problems. I'm trying to authenticate my
freeradius server with active directory server.
Greetings
El 30/11/2011 16:57, Alan Buxey escribió:
Hi,
Hello friends, I tell them:
When I try to authenticate using mschap I encounter this
error''NT_STATUS_WRONG_PASSWORD: Wrong Password'', yet when I do the
test using authentic pap without problems. I'm trying to authenticate my
freeradius server
24 matches
Mail list logo