<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><div id="yiv1358002259"><div id="yiv1576072427">with Cleartext-password or User-Password I have the same error. radius -x and my configs for chap are here. I searched a lot and test it but not found why it can't find clear text password. Should I add other thing? or change another file?<br>It worked for pap and I added :<br>in users :<br>
<br>
DEFAULT Client-IP-Address == 10.10.10.2 , Auth-Type := Vpn, Autz-Type := Vpn, Post-Auth-Type := Vpn, Session-type := Vpn<br>
<br>
in radius.conf:<br>
ldap ldap-Vpn{<br>
....<br>
password_attribute =
userPassword<br>
password_header = "{clear}"<br>
<br>
}<br>
authorize {<br>
chap<br>
Autz-Type Vpn{<br>
ldap-Vpn<br>
chap<br>
}<br>
}<br>
<br>
authenticate {<br>
Auth-Type CHAP {<br>
chap<br>
}<br>
Auth-Type Vpn{<br>
chap<br>
<br>
}<br>
<br>
}<br>
<br>radiusd -x <br>Starting - reading configuration files ...<br>Using deprecated naslist file. Support for this will go away soon.<br>Module: Loaded exec <br>rlm_exec: Wait=yes but no output defined. Did you mean output=none?<br>Module: Instantiated exec (exec) <br>Module: Loaded expr <br>Module: Instantiated expr (expr) <br>Module: Loaded CHAP <br>Module: Instantiated chap (chap) <br>Module: Loaded MS-CHAP <br>Module: Instantiated mschap (mschap) <br>Module: Loaded LDAP <br>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<br>rlm_ldap: Creating new attribute ldap-Dial-Ldap-Group<br>rlm_ldap: Registering ldap_groupcmp for ldap-Dial-Ldap-Group<br>rlm_ldap: Registering ldap_xlat with xlat_name
ldap-Dial<br>rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap<br>rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<br>rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<br>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<br>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<br>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<br>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<br>rlm_ldap: LDAP userPassword mapped to RADIUS Cleartext-Password<br>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<br>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<br>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<br>rlm_ldap: LDAP radiusServiceType mapped to RADIUS
Service-Type<br>rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol<br>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<br>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<br>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route<br>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<br>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<br>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<br>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<br>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<br>rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service<br>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<br>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<br>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<br>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to
RADIUS Framed-IPX-Network<br>rlm_ldap: LDAP radiusClass mapped to RADIUS Class<br>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<br>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<br>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action<br>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<br>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<br>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<br>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<br>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<br>rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<br>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<br>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<br>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS
Reply-Message<br>conns: 0x90f2d90<br>Module: Instantiated ldap (ldap-Vpn) <br>Module: Loaded always <br>Module: Instantiated always (ok) <br>Module: Loaded preprocess <br>Module: Instantiated preprocess (preprocess) <br>Module: Loaded detail <br>Module: Instantiated detail (auth_log) <br>Module: Loaded realm <br>Module: Instantiated realm (suffix) <br>Module: Loaded SQL Counter <br>Module: Instantiated sqlcounter (monthly-Vpn) <br>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<br>rlm_ldap: Creating new attribute ldap-Vpn-Ldap-Group<br>rlm_ldap: Registering ldap_groupcmp for ldap-Vpn-Ldap-Group<br>rlm_ldap: Registering ldap_xlat with xlat_name ldap-Vpn<br>rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap<br>rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<br>rlm_ldap: LDAP
radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<br>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<br>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<br>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<br>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<br>rlm_ldap: LDAP userPassword mapped to RADIUS Cleartext-Password<br>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<br>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<br>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<br>rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type<br>rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol<br>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<br>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<br>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS
Framed-Route<br>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<br>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<br>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<br>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<br>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<br>rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service<br>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<br>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<br>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<br>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network<br>rlm_ldap: LDAP radiusClass mapped to RADIUS Class<br>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<br>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<br>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS
Termination-Action<br>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<br>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<br>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<br>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<br>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<br>rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<br>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<br>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<br>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message<br>conns: 0x90fa4c8<br>Module: Instantiated ldap (ldap-Vpn) <br>Module: Instantiated sqlcounter (monthly-Vpn) <br>Module: Loaded files <br>Module: Instantiated files (files) <br>Module: Loaded Acct-Unique-Session-Id <br>Module: Instantiated acct_unique (acct_unique) <br>Module:
Instantiated detail (detail) <br>Module: Loaded SQL <br>rlm_sql (sql-Vpn): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked<br>rlm_sql (sql-Vpn): Attempting to connect to radius@localhost:/vpnradius<br>rlm_sql (sql-Vpn): starting 0<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #0<br>rlm_sql_mysql: Starting connect to MySQL server for #0<br>rlm_sql (sql-Vpn): Connected new DB handle, #0<br>rlm_sql (sql-Vpn): starting 1<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #1<br>rlm_sql_mysql: Starting connect to MySQL server for #1<br>rlm_sql (sql-Vpn): Connected new DB handle, #1<br>rlm_sql (sql-Vpn): starting 2<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #2<br>rlm_sql_mysql: Starting connect to MySQL server for #2<br>rlm_sql (sql-Vpn): Connected new DB handle, #2<br>rlm_sql (sql-Vpn): starting 3<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #3<br>rlm_sql_mysql: Starting connect to MySQL server for
#3<br>rlm_sql (sql-Vpn): Connected new DB handle, #3<br>rlm_sql (sql-Vpn): starting 4<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #4<br>rlm_sql_mysql: Starting connect to MySQL server for #4<br>rlm_sql (sql-Vpn): Connected new DB handle, #4<br>Module: Instantiated sql (sql-Vpn) <br>Module: Instantiated detail (reply_log) <br>Initializing the thread pool...<br>Listening on authentication *:1812<br>Listening on accounting *:1813<br>Ready to process requests.<br><br><br><br>rad_recv: Access-Request packet from host 10.10.10.2:1866, id=78, length=246<br> Acct-Session-Id = "120"<br> NAS-IP-Address = 10.10.10.2<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> NAS-Port = 128<br>
MS-RAS-Vendor = 311<br> MS-RAS-Version = "MSRASV5.20"<br> NAS-Port-Type = Virtual<br> Tunnel-Type:0 = PPTP<br> Tunnel-Medium-Type:0 = IP<br> Calling-Station-Id = "10.10.10.24"<br> Tunnel-Client-Endpoint:0 = "10.10.10.24"<br> Microsoft-Attr-35 = 0x4d5352415356352e3130<br> Microsoft-Attr-34 = 0x4d535241532d302d4955542d3834433132343936333646<br> User-Name = "test"<br> CHAP-Challenge = 0x45c8e77e0465ea843dc5b419ccb3ca01<br> CHAP-Password =
0x008a7f35b2a09df3aa79b659a9909ca15f<br> Message-Authenticator = 0x540b9a3a9a929db1621fd2cb4fa1b2cc<br> rlm_chap: Setting 'Auth-Type := CHAP'<br>rlm_ldap: - authorize<br>rlm_ldap: performing user authorization for test<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: (re)connect to 10.10.10.27:389, authentication 0<br>rlm_ldap: bind as / to 10.10.10.27:389<br>rlm_ldap: waiting for bind result ...<br>rlm_ldap: Bind was successful<br>rlm_ldap: checking if remote access for test is allowed by vpnAccess<br>rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21<br>rlm_ldap: extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 0<br>rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11<br>rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval :=
300<br>rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21<br>rlm_ldap: extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 1080000<br>rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11<br>rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval := 300<br>rlm_ldap: looking for check items in directory...<br>rlm_ldap: looking for reply items in directory...<br>rlm_ldap: Adding radiusSessionTimeout as Session-Timeout, value 10 & op=11<br>rlm_ldap: user test authorized to use remote access<br>rlm_ldap: ldap_release_conn: Release Id: 0<br> rlm_chap: login attempt by "test" with CHAP password<br> rlm_chap: Could not find clear text password for user test<br>Login incorrect (rlm_chap: Clear text password not available): [test] (from client vpntist port 128 cli 10.10.10.24)<br><br><br><br>I saw the problem in faq but I didn't find
what is my mistake. The config is:<br><br><br>--- On <b>Wed, 2/24/10, Alan Buxey <i><A.L.M.Buxey@lboro.ac.uk></i></b> wrote:<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk><br>Subject: Re: rlm-ldap error for chap<br>To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org><br>Date: Wednesday, February 24, 2010, 7:45 PM<br><br><div class="plainMail">Hi,<br><br>> Now to make matters a touch bit more complicated FreeRADIUS changed how <br>> it accessed the clear text password in its set of attributes. In older <br>> versions of FreeRADIUS it was known as User-Password, but
that produced <br>> an unfortunate ambiguity and it was later modified to be<br>> Cleartext-Password, I'm sorry but I don't remember the version this was <br>> modified in.<br><br>version 1.1.4 brought this into play.<br><br>alan<br>-<br>List info/subscribe/unsubscribe? See <a rel="nofollow" target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></blockquote></div></div></td></tr></table><br>