<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
Le 27.11.2008 07:17, Douglas Macedo a écrit :
<blockquote
cite="mid:55d4c5160811270917q64d028d4ja41234b9c2541260@mail.gmail.com"
type="cite">Hey TNT,<br>
<br>
<div class="gmail_quote">On Thu, Nov 27, 2008 at 2:54 PM, <span
dir="ltr"><<a moz-do-not-send="true" href="mailto:tnt@kalik.net">tnt@kalik.net</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">>i force in WIndows Client to use only
mschap2, but the problem continue:<br>
><br>
>-<br>
>Module: Instantiated radutmp (radutmp)<br>
>Listening on authentication *:1812<br>
>Listening on accounting *:1813<br>
>Ready to process requests.<br>
>rad_recv: Access-Request packet from host <a moz-do-not-send="true"
href="http://150.162.67.254:32858" target="_blank">150.162.67.254:32858</a>,
id=109,<br>
>length=53<br>
> Service-Type = Framed-User<br>
> Framed-Protocol = PPP<br>
> User-Name = "douglas"<br>
> NAS-IP-Address = <a moz-do-not-send="true"
href="http://1.1.1.1" target="_blank">1.1.1.1</a><br>
> NAS-Port = 0<br>
<br>
</div>
This is nothing to do with freeradius. I don't see your NAS sending<br>
mschap attributes.<br>
</blockquote>
<div><br>
How I can fix that? Where i configure that? <br>
</div>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>
>In PPTP debug show:<br>
><br>
..<br>
<div class="Ih2E3d">>Nov 27 11:35:39 epiderme pppd[12254]:
rc_avpair_new: unknown attribute 11<br>
>Nov 27 11:35:39 epiderme pppd[12254]: rc_avpair_new: unknown
attribute 25<br>
<br>
</div>
Has your radius client got mschap dictionary?<br>
</blockquote>
<div><br>
I'm using the RadiusClient1 of Debian. <br>
<br>
--<br>
epiderme:/etc/radiusclient# ls -l<br>
total 52<br>
-rw-r--r-- 1 root root 6502 2008-11-26 13:10 dictionary<br>
-rw-r--r-- 1 root root 12388 2006-10-29 08:54 dictionary.ascend<br>
-rw-r--r-- 1 root root 1517 2006-10-29 08:54 dictionary.compat<br>
-rw-r--r-- 1 root root 599 2006-10-29 08:54 dictionary.merit<br>
-rw-r--r-- 1 root root 135 2006-10-29 08:54 issue<br>
-rw-r--r-- 1 root root 410 2006-10-29 08:54 port-id-map<br>
-rw-r--r-- 1 root root 2630 2008-11-24 15:24 radiusclient.conf<br>
-rwxr-xr-x 1 root root 2621 2008-11-24 13:33 radiusclient.conf.EPI<br>
-rw------- 1 root root 272 2008-11-24 13:12 servers<br>
--<br>
</div>
</div>
</blockquote>
<br>
Copy microsoft dictionnary from your freeradius install to your pptp
server, and add it to the dictionnary list.<br>
Additionnaly (this may not be related to your problem) having multiple
require-<protocols> in pptpd config is a non-sense, if you want
to enable multiples protocols for authentications, use +pap, +chap,
+mschap.... instead of require-...<br>
<br>
<blockquote
cite="mid:55d4c5160811270917q64d028d4ja41234b9c2541260@mail.gmail.com"
type="cite">
<div class="gmail_quote">
<div><br>
--<br>
epiderme:/etc/radiusclient# cat radiusclient.conf<br>
auth_order radius,local<br>
login_tries 4<br>
login_timeout 60<br>
nologin /etc/nologin<br>
issue /etc/radiusclient/issue<br>
authserver <a moz-do-not-send="true"
href="http://ldap.telemedicina.ufsc.br">ldap.telemedicina.ufsc.br</a><br>
acctserver <a moz-do-not-send="true"
href="http://ldap.telemedicina.ufsc.br">ldap.telemedicina.ufsc.br</a><br>
servers /etc/radiusclient/servers<br>
dictionary /etc/radiusclient/dictionary<br>
login_radius /usr/sbin/login.radius<br>
seqfile /var/run/radius.seq<br>
mapfile /etc/radiusclient/port-id-map<br>
default_realm<br>
radius_timeout 10<br>
radius_retries 3<br>
login_local /bin/login<br>
--<br>
<br>
<br>
But I don't found the attributes to MS-CHAP:<br>
<br>
--<br>
epiderme:/etc/radiusclient# cat dictionary | grep MS-CHAP<br>
epiderme:/etc/radiusclient# cat dictionary | grep MSCHAP<br>
epiderme:/etc/radiusclient# cat dictionary | grep mschap<br>
--<br>
<br>
Just to CHAP:<br>
<br>
--<br>
epiderme:/etc/radiusclient# cat dictionary | grep -i chap<br>
ATTRIBUTE CHAP-Password 3 string<br>
ATTRIBUTE Chap-Challenge 60 string<br>
--<br>
<br>
That's correct? <br>
</div>
</div>
</blockquote>
No you need MS-CHAP Attributes<br>
<blockquote
cite="mid:55d4c5160811270917q64d028d4ja41234b9c2541260@mail.gmail.com"
type="cite">
<div class="gmail_quote">
<div><br>
Thanks a lot in advanced,<br>
Douglas<br>
</div>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>
<div class="Wj3C7c"><br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a moz-do-not-send="true"
href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
Douglas Macedo<br>
<a moz-do-not-send="true" href="mailto:dmacedo@gmail.com">dmacedo@gmail.com</a><br>
--<br>
Avalia-se a inteligência de um indivíduo pela quantidade de incertezas
que ele é capaz de suportar.<br>
(Immanuel Kant)<br>
<pre wrap="">
<hr size="4" width="90%">
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></pre>
</blockquote>
</body>
</html>