Aw: Re: ntlm_auth is not used by mschap

robiwan at arcor.de robiwan at arcor.de
Wed May 3 14:17:27 CEST 2006


 


----- Original Nachricht ----
Von:     Stefan Winter <stefan.winter at restena.lu>
An:      FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Datum:   03.05.2006 11:59
Betreff: Re: ntlm_auth is not used by mschap

> > Now i try to authenticate the user roka:
> > ---------------------------------------------------
> >
> > Debian:/tmp# radtest roka Gerti1000 localhost 1645 testing123
> > Sending Access-Request of id 116 to 127.0.0.1:1812
> >         User-Name = "roka"
> >         User-Password = "Gerti1000"
> >         NAS-IP-Address = Debian
> >         NAS-Port = 1645
> > rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=116,
> length=20
> 
> You send a packet that does not contain any MS-CHAP attributes. Because of 
> that, the server is not doing MS-CHAP:
> 
> >   modcall[authorize]: module "mschap" returns noop for request 0
> 
> As this line tells you.
> 
> Send a MS-CHAP request, and look what happens then.
> 
> Stefan
> 
> -- 
> Stefan WINTER
> 
> Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
> la Recherche
> Ingenieur Forschung & Entwicklung
> 
> 6, rue Richard Coudenhove-Kalergi
> L-1359 Luxembourg
> E-Mail: stefan.winter at restena.lu     Tel.:     +352 424409-1
> http://www.restena.lu                Fax:      +352 422473
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 

Hi Stefan,
You say i do not send a MS-CHAP Request. Hmm ...

Finally it should work with Windows-XP Supplicant:
In my WindowsXP 802.1X Network-Configuration I can choose between "MD5Challenge" , or "secure EAP(PEAP)" or "Smartcart or other Certificate"  What ist the right one?

Or is mschap basically the wrong authentication method for my equipment?


Robert

Viel oder wenig? Schnell oder langsam? Unbegrenzt surfen + telefonieren
ohne Zeit- und Volumenbegrenzung? DAS TOP ANGEBOT JETZT bei Arcor: günstig
und schnell mit DSL - das All-Inclusive-Paket für clevere Doppel-Sparer,
nur  44,85 €  inkl. DSL- und ISDN-Grundgebühr!
http://www.arcor.de/rd/emf-dsl-2




More information about the Freeradius-Users mailing list