EAP (PEAP)+ntlm_auth doesn't send password by it self

Cesar Ortega cesar8489 at hotmail.com
Tue Mar 23 00:49:41 CET 2010

Hi Alan,


> Date: Sun, 21 Mar 2010 16:19:28 +0000
> From: A.L.M.Buxey at lboro.ac.uk
> To: freeradius-users at lists.freeradius.org
> Subject: Re: EAP (PEAP)+ntlm_auth doesn't send password by it self
> Hi,
> > [ntlm_auth] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details
> > [ntlm_auth] ... expanding second conditional
> you still havent fixed that basic thing - check out the default config from
> the 2.1.8 tarball

Today I tried unsuccessful to figure out how solve the ":-" issue. I read "man unlang" but I could not find anything...

> > [ntlm_auth] No MS-CHAP-Challenge in the request.
> > [ntlm_auth] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=
> > [ntlm_auth] No MS-CHAP-Response or MS-CHAP2-Response was found in the request.
> > [ntlm_auth] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=
> > hex decode of failed! (only got 0 bytes)
> okay - so no challenge in the request - so what type of EAP authentication
> are you doing?

I have been thinking it could be by a wrong configuration of the Cisco AP 1100. I will follow the instructions described at http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801c40b6.shtml#NetEAP

However, I just want to do transparent authentications using PEAP with Microsoft Challenge Authentication Protocol (MS-CHAP) Version 2 without certificates (have you a recipe?)(http://cisco.com/en/US/prod/collateral/wireless/ps5678/ps430/prod_qas0900aecd801764f1_ps4570_Products_Q_and_A_Item.html)

I will let you know as soon as put my hands in action again.


Connect to the next generation of MSN Messenger 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100322/6e7479a8/attachment.html>

More information about the Freeradius-Users mailing list