question regarding PEAP/MSCHAPv2 (ERROR: FAILED: No NT/LM-Password. Cannot perform authentication)

David Aldwinckle daldwinc at uwaterloo.ca
Fri Oct 30 13:09:51 CET 2015


The server tells you what is wrong:

(6) eap_mschapv2:   Auth-Type MS-CHAP {
(6) mschap: WARNING: No Cleartext-Password configured.  Cannot create
NT-Password
(6) mschap: WARNING: No Cleartext-Password configured.  Cannot create
LM-Password
(6) mschap: Creating challenge hash with username:
tstather at mpimf-heidelberg.mpg.de<mailto:tstather at mpimf-heidelberg.mpg.de>
(6) mschap: Client is using MS-CHAPv2
(6) mschap: ERROR: FAILED: No NT/LM-Password.  Cannot perform authentication
(6) mschap: ERROR: MS-CHAP2-Response is incorrect

Do you have clear-text or NT hash passwords in LDAP?

See: http://deployingradius.com/documents/protocols/compatibility.html

Dave



More information about the Freeradius-Users mailing list