Windows 7 prompting several times

Alan DeKok aland at deployingradius.com
Mon Apr 2 13:14:53 CEST 2012


Ricardo89 wrote:
> If a windows client first enter his credentials erroneous the Ferraris send
> a error message, next if the user enter the correct credentials the radius
> server doesn't authenticate the client.

  No.

> Checking the source code, in the file run_eap_mschapv2, when the client
> sends the correct password after sending the wrong ones i could check the
> windows sends a message with the code PW_EAP_MSCHAPV2_FAILURE instead of a
> PW_EAP_MSCHAPV2_CHALLENGE.

  So... the Windows box sending a failure means you conclude that
FreeRADIUS is at fault?

> I detect that the error was in that file because in the with the message
> "rlm_eap_mschapv2:Unexpected response received" i also print the value of
> the data->code and it was 4 that matches with PW_EAP_MSCHAPV2_FAILURE.
> Can you help me?

  That message is sent by the Windows box to FreeRADIUS.  It says that
the Windows box didn't like the response from FreeRADIUS.

  i.e. the Windows box is caching the *wrong* password.

  Go fix it.  Ask Microsoft how this is done.

  Alan DeKok.


More information about the Freeradius-Users mailing list