Vista user fails EAP-PEAP with Freeradius 2.1.6

Alan DeKok aland at deployingradius.com
Fri Jul 3 18:04:27 CEST 2009


Anatoly Oreshkin wrote:
...
> [files] users: Matched entry DEFAULT at line 159

  It isn't matching the "users" file entry.

> ++[files] returns ok
> ++[expiration] returns noop
> ++[logintime] returns noop
> ++[pap] returns noop
> Found Auth-Type = EAP
> +- entering group authenticate {...}
> [eap] Request found, released from the list
> [eap] EAP/mschapv2
> [eap] processing type mschapv2
> [mschapv2] +- entering group MS-CHAP {...}
> [mschap] No Cleartext-Password configured.  Cannot create LM-Password.
> [mschap] No Cleartext-Password configured.  Cannot create NT-Password.
> [mschap]   NT Domain delimeter found, should we have enabled
> with_ntdomain_hack?
> [mschap] Told to do MS-CHAPv2 for csd-notebook\oreshkin with NT-Password
> [mschap] FAILED: No NT/LM-Password.  Cannot perform authentication.
> [mschap] FAILED: MS-CHAP2-Response is incorrect

  So the server doesn't have a "known good" password, and can't
authenticate the user.

  Alan DeKok.



More information about the Freeradius-Users mailing list