<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=ks_c_5601-1987">
<META content="MSHTML 6.00.2900.3157" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2>Hello,</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>I have a freeradius 1.1.7 server setup with ppp and pptp using
a mysql <BR>DB for user authentication.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>--with-mysql-lib-dir=/usr/lib/mysql
<BR>--with-mysql-include-dir=/usr/include/mysql </FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>rpmbuild -bb redhat/freeradius.spec</FONT></DIV>
<DIV><FONT size=2>rpm -Uvh freeradius-1.1.7-0.i386.rpm</FONT></DIV>
<DIV><FONT size=2>rpm -Uvh freeradius-debuginfo-1.1.7-0.i386.rpm</FONT></DIV>
<DIV>-------------------------------------------------------------<BR><FONT
size=2>options.pptpd<BR>refuse-pap<BR>refuse-chap<BR>refuse-mschap<BR>#require-mppe-128
<==disable<BR>require-mschap-v2</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>plugin radius.so<BR>radius-config-file
/usr/local/etc/radiusclient/radiusclient.conf<BR>plugin radattr.so</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV><FONT size=2>
<DIV>-------------------------------------------------------------<BR>radiusd.conf
</DIV>
<DIV> </DIV>
<DIV>use_mppe = no </DIV>
<DIV> </DIV>
<DIV>authorize {<BR> preprocess<BR>
chap<BR> mschap<BR>
suffix<BR> eap<BR>
files<BR> sql<BR> pap<BR>
}</DIV>
<DIV> </DIV>
<DIV>accounting {<BR> unix<BR> radutmp<BR>
sql<BR> }</DIV>
<DIV> </DIV>
<DIV>-------------------------------------------------------------<BR></DIV>
<DIV>Here is my debug output:</DIV>
<DIV> </DIV>
<DIV><BR>Listening on accounting *:1813<BR>Ready to process
requests.<BR>rad_recv: Access-Request packet from host 127.0.0.1:32981, id=154,
length=151<BR>--- Walking the entire request list ---<BR>Waking up in 31
seconds...<BR>Threads: total/active/spare threads = 5/0/5<BR>Thread 1 got
semaphore<BR>Thread 1 handling request 0, (1 handled so
far)<BR> Service-Type =
Framed-User<BR> Framed-Protocol =
PPP<BR> User-Name =
"testuser"<BR> MS-CHAP-Challenge =
0x46dec3e9097bc536b786971f662d900d<BR>
MS-CHAP2-Response =
0xf80040b7092f930cb6002b55b7e1d2e1998900000000000000009c17dfe89020dea63a8232e83dffe3600e77bc95a87b1918<BR>
Calling-Station-Id =
"12x.xx.xx.xx"<BR> NAS-IP-Address =
127.0.0.1<BR> NAS-Port = 0<BR>
Processing the authorize section of radiusd.conf<BR>modcall: entering group
authorize for request 0<BR> modcall[authorize]: module "preprocess"
returns ok for request 0<BR> modcall[authorize]: module "chap" returns
noop for request 0<BR> rlm_mschap: Found MS-CHAP attributes. Setting
'Auth-Type = mschap'<BR> modcall[authorize]: module "mschap" returns
ok for request 0<BR> rlm_realm: No <A
href="mailto:'@'">'@'</A> in User-Name = "testuser", looking up realm
NULL<BR> rlm_realm: No such realm "NULL"<BR>
modcall[authorize]: module "suffix" returns noop for request 0<BR>
rlm_eap: No EAP-Message, not doing EAP<BR> modcall[authorize]: module
"eap" returns noop for request 0<BR> users: Matched entry
DEFAULT at line 153<BR> users: Matched entry DEFAULT at line
172<BR> users: Matched entry DEFAULT at line 184<BR>
modcall[authorize]: module "files" returns ok for request
0<BR>radius_xlat: 'testuser'<BR>rlm_sql (sql): sql_set_user escaped user
--> 'testuser'<BR>radius_xlat: 'SELECT id, UserName, Attribute, Value,
op FROM
radcheck WHERE
Username =
'testuser' ORDER BY
id'<BR>rlm_sql (sql): Reserving sql socket id: 4<BR>radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = 'testuser' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY
radgroupcheck.id'<BR>radius_xlat: 'SELECT id, UserName, Attribute, Value,
op FROM
radreply WHERE
Username =
'testuser' ORDER BY
id'<BR>radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = 'testuser' AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY
radgroupreply.id'<BR>rlm_sql (sql): Released sql socket id: 4<BR>
modcall[authorize]: module "sql" returns ok for request 0<BR>rlm_pap: Found
existing Auth-Type, not changing it.<BR> modcall[authorize]: module "pap"
returns noop for request 0<BR>modcall: leaving group authorize (returns ok) for
request 0<BR> rad_check_password: Found Auth-Type MS-CHAP<BR>auth:
type "MS-CHAP"<BR> Processing the authenticate section of
radiusd.conf<BR>modcall: entering group MS-CHAP for request 0<BR>
rlm_mschap: Told to do MS-CHAPv2 for testuser with NT-Password<BR>
rlm_mschap: FAILED: MS-CHAP2-Response is incorrect<BR>
modcall[authenticate]: module "mschap" returns reject for request 0<BR>modcall:
leaving group MS-CHAP (returns reject) for request 0<BR>auth: Failed to validate
the user.<BR>Delaying request 0 for 1 seconds<BR>Finished request 0<BR>Going to
the next request<BR>Thread 1 waiting to be assigned a request<BR>rad_recv:
Access-Request packet from host 127.0.0.1:32981, id=154, length=151<BR>Sending
Access-Reject of id 154 to 127.0.0.1 port 32981<BR>--- Walking the entire
request list ---<BR>Cleaning up request 0 ID 154 with timestamp
46d95613<BR>Nothing to do. Sleeping until we see a
request.</FONT></DIV></BODY></HTML>