<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt"><div>Thank's for the answer Ivan.<br><br>I have tried now both with or without encryption<br><br><font face="Tahoma" size="2">Module: Instantiating mschap<br> mschap {<br> use_mppe = yes<br> require_encryption = no<br> require_strong = no<br> with_ntdomain_hack = yes<br><br><font size="3"><span style="font-family: times new roman,new york,times,serif;">unfortunately the result is still the same </span></font><br><br>Found Auth-Type = EAP<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/mschapv2<br>[eap] processing type mschapv2<br>rlm_eap_mschapv2: Invalid response type
4<br>[eap] Handler failed in EAP/mschapv2<br>[eap] Failed in EAP select<br>++[eap] returns invalid<br>Failed to authenticate the user.<br><br><font size="3"><span style="font-family: times new roman,new york,times,serif;">Does it make sense to enable the encryption for mschap since the eap tunnel (as far I have understood) is the whole way from the client to the radius server.</span><br style="font-family: times new roman,new york,times,serif;"></font></font></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><div style="font-family: arial,helvetica,sans-serif; font-size: 13px;"><font face="Tahoma" size="2"><hr size="1"><b><span style="font-weight: bold;">Von:</span></b> Ivan Kalik <tnt@kalik.net><br><b><span style="font-weight: bold;">An:</span></b> FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br><b><span style="font-weight: bold;">Gesendet:</span></b> Donnerstag, den 17.
September 2009, 16:55:33 Uhr<br><b><span style="font-weight: bold;">Betreff:</span></b> Re: Authentication with eap/mschapv2<br></font><br>> I would like to authenticate my Windows XP wireless users with freeradius<br>> against a AD. Test with the local ntlm_auth against the AD worked fine as<br>> well radtest with a local user in the users file.<br>><br>> I have read in the archive that "Code 4 is MS-CHAP failure. It means<br>> that the client told the server<br>> it didn't like the previous packet"<br>><br>> But I have no idea what the server does not like.<br>> mschap {<br>> use_mppe = no<br>> require_encryption = yes<br><br>You have disabled MPPE (Microsoft Point-to-Point Encryption) yet you<br>require encryption.<br><br>Ivan Kalik<br>Kalik Informatika ISP<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html"
target="_blank">http://www.freeradius.org/list/users.html</a><br></div></div></div><br>
</body></html>