problem in integeration with poptop

[tnt at kalik.co.yu]

Well path to ntlm_auth obviously isn't /path/to/ntlm_auth.

Ivan Kalik
Kalik Informatika ISP


Dana 16/10/2007, "hadi golestani" <hadi.golestani at gmail.com> piše:

>hi,
>I've installed poptop and freeradius well and both are working,
>but when I try to connect from a vpn connection or even radtest some error
>occured.
>what I need to add to users.conf for a simple radtest connection or a vpn
>client?
>
>it's the output of debug mode for vpn client, some thing like this has been
>printed for radtest also:
>
>
>rad_recv: Access-Request packet from host 127.0.0.1:32770, id=30, length=132
>
>        Service-Type = Framed-User
>        Framed-Protocol = PPP
>        User-Name = "root"
>        MS-CHAP-Challenge = 0x4d1a9b1028ef83957754c83ce0f55e01
>        MS-CHAP2-Response =
>0x9e000d1394f73d58cc731cd6cf58de7cb74f00000000000000008c6daec89825fb28b90bb60b737fb683a4a80f6252935547
>
>        NAS-IP-Address = 127.0.0.1
>        NAS-Port = 0
>  Processing the authorize section of radiusd.conf
>modcall: entering group authorize for request 11
>  modcall[authorize]: module "preprocess" returns ok for request 11
>  modcall[authorize]: module "chap" returns noop for request 11
>  rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
>  modcall[authorize]: module "mschap" returns ok for request 11
>    rlm_realm: No '@' in User-Name = "root", looking up realm NULL
>    rlm_realm: No such realm "NULL"
>  modcall[authorize]: module "suffix" returns noop for request 11
>  rlm_eap: No EAP-Message, not doing EAP
>  modcall[authorize]: module "eap" returns noop for request 11
>    users: Matched entry DEFAULT at line 152
>    users: Matched entry DEFAULT at line 171
>    users: Matched entry DEFAULT at line 183
>  modcall[authorize]: module "files" returns ok for request 11
>modcall: leaving group authorize (returns ok) for request 11
>  rad_check_password:  Found Auth-Type MS-CHAP
>auth: type "MS-CHAP"
>  Processing the authenticate section of radiusd.conf
>modcall: entering group MS-CHAP for request 11
>  rlm_mschap: No User-Password configured.  Cannot create LM-Password.
>  rlm_mschap: No User-Password configured.  Cannot create NT-Password.
>  rlm_mschap: Told to do MS-CHAPv2 for root with NT-Password
>radius_xlat: Running registered xlat function of module mschap for string
>'Challenge'
> mschap2: 4d
>radius_xlat: Running registered xlat function of module mschap for string
>'NT-Response'
>radius_xlat:  '/path/to/ntlm_auth --request-nt-key --username=root
>--challenge=f1090a99b916ef69
>--nt-response=8c6daec89825fb28b90bb60b737fb683a4a80f6252935547'
>Exec-Program: /path/to/ntlm_auth --request-nt-key --username=root
>--challenge=f1090a99b916ef69
>--nt-response=8c6daec89825fb28b90bb60b737fb683a4a80f6252935547
>Exec-Program output: Exec-Program: FAILED to execute /path/to/ntlm_auth: No
>such file or directory
>Exec-Program-Wait: plaintext: Exec-Program: FAILED to execute
>/path/to/ntlm_auth: No such file or directory
>Exec-Program: returned: 1
>  rlm_mschap: External script failed.
>  rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
>  modcall[authenticate]: module "mschap" returns reject for request 11
>modcall: leaving group MS-CHAP (returns reject) for request 11
>auth: Failed to validate the user.
>Delaying request 11 for 1 seconds
>Finished request 11
>Going to the next request
>--- Walking the entire request list ---
>Waking up in 1 seconds...
>--- Walking the entire request list ---
>Waking up in 1 seconds...
>--- Walking the entire request list ---
>Sending Access-Reject of id 30 to 127.0.0.1 port 32770
>Waking up in 4 seconds...
>--- Walking the entire request list ---
>Cleaning up request 11 ID 30 with timestamp 47152198
>Nothing to do.  Sleeping until we see a request.
>
>