CHAP auth and Cleartext-Password

Dagnis Zemturis Dagnis.Zemturis at cs.rtu.lv
Fri Sep 19 12:43:38 CEST 2008


Hello!

I have problems with CHAP and Cleartext-Password.
I'm running freeradius.net v.2.1 on SUSE 10 server.

I've configured following user in /raddb/users at the end of text file:
=====================================================================================
# # Last default: shell on the local terminal server.
# #
# DEFAULT
#       Service-Type = Administrative-User

#=======================my users========================

0014853077be  Cleartext-Password := "0014853077be"


#00148518fe47  User-Password == "00148518fe47"


#=======================My users========================



# On no match, the user is denied access.
"users" 218L, 6786C         
=====================================================================================

When I'm trying to make mac-auth from the HP switch (running radiusd in debug mode), I recieve following error:
[chap] Cleartext-Password is required for authentication
                     

Here is part of debug info:
=====================================================================================
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.

...................................

        Calling-Station-Id = "00-14-85-30-77-be"
        Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
        CHAP-Password = 0x1f08e1d048be8f22c9435f00a4a0095cb6
        Message-Authenticator = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Found Auth-Type = CHAP
+- entering group CHAP {...}
[chap] login attempt by "0014853077be" with CHAP password


[chap] Cleartext-Password is required for authentication



++[chap] returns invalid
Failed to authenticate the user.
Using Post-Auth-Type Reject
+- entering group REJECT {...}
        expand: %{User-Name} -> 0014853077be
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
=====================================================================================
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080919/02c4b27e/attachment.html>


More information about the Freeradius-Users mailing list