pptp and freeradius

saeed1803 saeed1803 at gmail.com
Wed Aug 24 19:29:10 CEST 2011


Hi dear friends

I have a problem with configuration vpn & freeradius
When I connect with Windows clients, displayed this error :

 host 127.0.0.1 port 38970, id=139, length=148
    Service-Type = Framed-User
    Framed-Protocol = PPP
    User-Name = "test"
    MS-CHAP-Challenge = 0x089bd88d04fc9c4263f9ef8c0b7680d6
    MS-CHAP2-Response =
0x5c00f40d55fc21260615b32b54a23b2b85cc00000000000000008ae59dc6918fdc10855be5c58cf809be14426f2fba994eea
    Calling-Station-Id = "192.168.56.100"
    NAS-IP-Address = 127.0.1.1
    NAS-Port = 1
# Executing section authorize from file
/usr/local/etc/raddb/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
[mschap] Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
++[mschap] returns ok
++[digest] returns noop
[suffix] No '@' in User-Name = "test", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
[files] users: Matched entry DEFAULT at line 172
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication
may fail because of this.
++[pap] returns noop
Found Auth-Type = MSCHAP
# Executing group from file /usr/local/etc/raddb/sites-enabled/default
+- entering group MS-CHAP {...}
[mschap] No Cleartext-Password configured.  Cannot create LM-Password.
[mschap] No Cleartext-Password configured.  Cannot create NT-Password.
[mschap] Creating challenge hash with username: test
[mschap] Told to do MS-CHAPv2 for test with NT-Password
[mschap] FAILED: No NT/LM-Password.  Cannot perform authentication.
[mschap] FAILED: MS-CHAP2-Response is incorrect
++[mschap] returns reject
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /usr/local/etc/raddb/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> test
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 139 to 127.0.0.1 port 38970
    MS-CHAP-Error = "\\E=691 R=1"
Waking up in 4.9 seconds.
Cleaning up request 0 ID 139 with timestamp +592

Tell me how do I solve this problem, please
I really need your help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110824/fa795f6a/attachment.html>


More information about the Freeradius-Users mailing list