MS-CHAP2-Response is incorrect with Freeradius 2.1.12

Alan DeKok aland at deployingradius.com
Sat Aug 29 15:22:06 CEST 2015


On Aug 29, 2015, at 7:25 AM, François Lacombe <fl.infosreseaux at gmail.com> wrote:
> During any authentication process, Freeradius is throwing the line
> "Info : [mschap] FAILED : MS-CHAP2-Response is incorrect" without any
> more detail (line 622).

  It means that the passwords don't match.

> It seems this line appears when NT or LM-Password are missing in the
> LDAP, but here Freeradius find them successfully earlier.

  No, the message does NOT appear when the NT-Password is missing.

> Would you have any hint to fix this problem and make Freeradius
> authenticate my users ?

  Have the user enter the correct password.

  And upgrade.  There are fixes to the MS-CHAP module which allow it to better handle non-ASCII passwords.

  Alan DeKok.




More information about the Freeradius-Users mailing list