Cleartext-Password to Crypt-Password

[Aurélio de Souza Ribeiro Neto]

Hello,

     It´s not working.... take a look in my debug log

(...)
(24) mschap: Found MS-CHAP attributes. Setting 'Auth-Type  = mschap'
(24)     [mschap] = ok
(24) files: users: Matched entry DEFAULT at line 167
(24)     [files] = ok
(...)
(24) sql: User found in radcheck table
(24) sql: Conditional check items matched, merging assignment check items
(24) sql:   Simultaneous-Use := 4
(24) sql:   Pool-Name := "main_pool"
(24) sql:   Crypt-Password := "syJtFE6Llqxw6"
(...)
(24) sql: User found in radreply table, merging reply items
(24) sql:   Simultaneous-Use := 4
(24) sql:   Pool-Name := "main_pool"
(24) sql:   Crypt-Password := "syJtFE6Llqxw6"
(...)
(24) pap: WARNING: Auth-Type already set.  Not setting to PAP
(24)     [pap] = noop
(24)   } # authorize = ok
(24) Found Auth-Type = mschap
(24) # Executing group from file /etc/freeradius/sites-enabled/default
(24)   Auth-Type mschap {
(24) mschap: WARNING: No Cleartext-Password configured.  Cannot create 
NT-Password
(24) mschap: Client is using MS-CHAPv1 with NT-Password
(24) mschap: ERROR: FAILED: No NT-Password.  Cannot perform authentication
(24) mschap: ERROR: MS-CHAP2-Response is incorrect

     Thanks for any hint....

Aurélio




Em 28/01/2021 11:18, Matt Zagrabelny via Freeradius-Users escreveu:
> On Thu, Jan 28, 2021 at 7:51 AM Aurélio de Souza Ribeiro Neto <
> netolistas at mpc.com.br> wrote:
>
>> Hello all,
>>
>>       I'm using FreeRadius 3.0.21 and MySQL.
>>
>>       I'm trying to convert Cleartext-Password to Crypt-Password, so I
>> changed the radcheck attribute table to Crypt-Password and the password
>> I did update after run radcrypt --des to that cleartext password, and
>> I'm having authentication error.
>>
>>       What else I need to do?
>>
> It sounds like you need to generate the UNIX crypt hash and store that hash
> in your data store.
>
> Maybe check out this link:
>
> https://unix.stackexchange.com/questions/134827/how-to-create-an-encrypted-password
>
> On Debian, the makepasswd tool is under the package with the same name.
>
> -m
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html