[mschap] FAILED: MS-CHAP2-Response is incorrect

[Arran Cudbard-Bell]

On 28 Sep 2011, at 09:50, sekchel lee wrote:

> mysql> select * from radcheck;
> +----+------------+---------------+----+------------------------------------+
> | id | username   | attribute     | op | value                              |
> +----+------------+---------------+----+------------------------------------+
> |  1 | testuser | User-Password | := | $1$vQGXHdnO$7DjKbeUeAadrsfGg8thE2. |

No... that's not going to work.

1) The server doesn't know what type of password is stored in User-Password
2) That looks like a crypt hash (I might be wrong), MSCHAPv2 will only work with an NT-Password hash or a Cleartext-Password

Once you've figured out what type of password you want to store, write to it either the NT-Password attribute or the Cleartext-Password attribute.


Arran Cudbard-Bell
a.cudbardb at freeradius.org

Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110928/3ede725c/attachment.html>