Re: chap rlm_sql authentication problem

2007-03-30 Thread Alan DeKok
Andrew Long wrote: I think I got it, I can now authenticate with ntradping, but I get an attribute dump: unknown vendor 8744, size xx='' repeated many times... From... ntradping. Is this because I am impersonating the NAS from a laptop? ie., should clear up when the NAS is actually

Re: chap rlm_sql authentication problem

2007-03-30 Thread Alan DeKok
Andrew Long wrote: Now we're taking a step back because I tried changing the username on the NAS and in the SQL and can no longer authenticate with :( NTRADPING. Why use ntradping? Use radclient. And you're using CHAP... which is why it doesn't match.

RE: chap rlm_sql authentication problem

2007-03-30 Thread Andrew Long
Now we're taking a step back because I tried changing the username on the NAS and in the SQL and can no longer authenticate with :( NTRADPING. Why use ntradping? Use radclient. I will in the future, but I'm in mid-stream here... And you're using CHAP... which is why it doesn't

Re: chap rlm_sql authentication problem

2007-03-30 Thread Kevin Bonner
On Friday 30 March 2007 09:13:17 Andrew Long wrote: In NTRADPING: username: hiegalleria ... rad_recv: Access-Request packet from host 192.168.10.100:49259, id=5, length=59 User-Name = hiegalleria_cn3200 CHAP-Password = 0xac0b9199834a040866dd0050c44d4fdf35 Am I missing

Re: chap rlm_sql authentication problem

2007-03-30 Thread Alan DeKok
Andrew Long wrote: ... Change the attribute name to Cleartext-Password, and the operator to :=. I have about 20 other NAS's using this identical configuration and they all authenticate... They're not using CHAP. Just for giggles, I restored the username to the old one in

RE: chap rlm_sql authentication problem

2007-03-30 Thread Andrew Long
Change the attribute name to Cleartext-Password, and the operator to :=. I have about 20 other NAS's using this identical configuration and they all authenticate... They're not using CHAP. Each and every one is using CHAP. Promise. ANdrew - List

Re: chap rlm_sql authentication problem

2007-03-30 Thread Alan DeKok
Andrew Long wrote: Each and every one is using CHAP. Promise. Then something else is making it not work... Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See

chap rlm_sql authentication problem

2007-03-29 Thread Andrew Long
I am adding a new MSC to our list of clients and trying to verify the config with -X and ntradping. I keep getting rejected. I have the following in clients.conf: client 192.168.10.100 (MY LAPTOP IP FOR NOW) { secret = [EMAIL PROTECTED] shortname = cn3200_hiegalleria

Re: chap rlm_sql authentication problem

2007-03-29 Thread Alan DeKok
Andrew Long wrote: I am adding a new MSC to our list of clients and trying to verify the config with -X and ntradping. I keep getting rejected. ... I note the could not find clear text password at bottom of reply, but am not sure why this is so; The password is present in radcheck.

RE: chap rlm_sql authentication problem

2007-03-29 Thread Andrew Long
I think I got it, I can now authenticate with ntradping, but I get an attribute dump: unknown vendor 8744, size xx='' repeated many times... Is this because I am impersonating the NAS from a laptop? ie., should clear up when the NAS is actually authenticating or does this point to another