problem in integeration with poptop

hadi golestani hadi.golestani at gmail.com
Tue Oct 16 21:46:47 CEST 2007


I've change it to /usr/bin/ntlm_auth ( found from locate ntlm )
but still same error.
What I must add to users file to test my radius from radtest or vpn client?

sorry for bothering I'm too newbie.

On 10/16/07, tnt at kalik.co.yu <tnt at kalik.co.yu> wrote:
>
> Well path to ntlm_auth obviously isn't /path/to/ntlm_auth.
>
> Ivan Kalik
> Kalik Informatika ISP
>
>
> Dana 16/10/2007, "hadi golestani" <hadi.golestani at gmail.com> piše:
>
> >hi,
> >I've installed poptop and freeradius well and both are working,
> >but when I try to connect from a vpn connection or even radtest some
> error
> >occured.
> >what I need to add to users.conf for a simple radtest connection or a vpn
> >client?
> >
> >it's the output of debug mode for vpn client, some thing like this has
> been
> >printed for radtest also:
> >
> >
> >rad_recv: Access-Request packet from host 127.0.0.1:32770, id=30,
> length=132
> >
> >        Service-Type = Framed-User
> >        Framed-Protocol = PPP
> >        User-Name = "root"
> >        MS-CHAP-Challenge = 0x4d1a9b1028ef83957754c83ce0f55e01
> >        MS-CHAP2-Response =
>
> >0x9e000d1394f73d58cc731cd6cf58de7cb74f00000000000000008c6daec89825fb28b90bb60b737fb683a4a80f6252935547
> >
> >        NAS-IP-Address = 127.0.0.1
> >        NAS-Port = 0
> >  Processing the authorize section of radiusd.conf
> >modcall: entering group authorize for request 11
> >  modcall[authorize]: module "preprocess" returns ok for request 11
> >  modcall[authorize]: module "chap" returns noop for request 11
> >  rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
> >  modcall[authorize]: module "mschap" returns ok for request 11
> >    rlm_realm: No '@' in User-Name = "root", looking up realm NULL
> >    rlm_realm: No such realm "NULL"
> >  modcall[authorize]: module "suffix" returns noop for request 11
> >  rlm_eap: No EAP-Message, not doing EAP
> >  modcall[authorize]: module "eap" returns noop for request 11
> >    users: Matched entry DEFAULT at line 152
> >    users: Matched entry DEFAULT at line 171
> >    users: Matched entry DEFAULT at line 183
> >  modcall[authorize]: module "files" returns ok for request 11
> >modcall: leaving group authorize (returns ok) for request 11
> >  rad_check_password:  Found Auth-Type MS-CHAP
> >auth: type "MS-CHAP"
> >  Processing the authenticate section of radiusd.conf
> >modcall: entering group MS-CHAP for request 11
> >  rlm_mschap: No User-Password configured.  Cannot create LM-Password.
> >  rlm_mschap: No User-Password configured.  Cannot create NT-Password.
> >  rlm_mschap: Told to do MS-CHAPv2 for root with NT-Password
> >radius_xlat: Running registered xlat function of module mschap for string
> >'Challenge'
> > mschap2: 4d
> >radius_xlat: Running registered xlat function of module mschap for string
> >'NT-Response'
> >radius_xlat:  '/path/to/ntlm_auth --request-nt-key --username=root
> >--challenge=f1090a99b916ef69
> >--nt-response=8c6daec89825fb28b90bb60b737fb683a4a80f6252935547'
> >Exec-Program: /path/to/ntlm_auth --request-nt-key --username=root
> >--challenge=f1090a99b916ef69
> >--nt-response=8c6daec89825fb28b90bb60b737fb683a4a80f6252935547
> >Exec-Program output: Exec-Program: FAILED to execute /path/to/ntlm_auth:
> No
> >such file or directory
> >Exec-Program-Wait: plaintext: Exec-Program: FAILED to execute
> >/path/to/ntlm_auth: No such file or directory
> >Exec-Program: returned: 1
> >  rlm_mschap: External script failed.
> >  rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
> >  modcall[authenticate]: module "mschap" returns reject for request 11
> >modcall: leaving group MS-CHAP (returns reject) for request 11
> >auth: Failed to validate the user.
> >Delaying request 11 for 1 seconds
> >Finished request 11
> >Going to the next request
> >--- Walking the entire request list ---
> >Waking up in 1 seconds...
> >--- Walking the entire request list ---
> >Waking up in 1 seconds...
> >--- Walking the entire request list ---
> >Sending Access-Reject of id 30 to 127.0.0.1 port 32770
> >Waking up in 4 seconds...
> >--- Walking the entire request list ---
> >Cleaning up request 11 ID 30 with timestamp 47152198
> >Nothing to do.  Sleeping until we see a request.
> >
> >
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071016/c9969051/attachment.html>


More information about the Freeradius-Users mailing list