<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas","serif";
color:black;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><pre><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>You NAS is sending the password in clear text and is not doing CHAP, so the RADIUS server needs to find either a clear text password or a hashed password. Where are you storing usernames/passwords? Make sure that you have an entry with for </span>User-Name = <a href="mailto:aewais@domain.ca">aewais@domain.ca</a> and Cleartext-Password := "password".<o:p></o:p></pre><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal>-------- Original Message -------- <o:p></o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal align=right style='text-align:right'><b>Subject: <o:p></o:p></b></p></td><td style='padding:0in 0in 0in 0in'><p class=MsoNormal>Auth configuration help<o:p></o:p></p></td></tr><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal align=right style='text-align:right'><b>Date: <o:p></o:p></b></p></td><td style='padding:0in 0in 0in 0in'><p class=MsoNormal>Wed, 24 Aug 2011 21:53:46 -0400<o:p></o:p></p></td></tr><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal align=right style='text-align:right'><b>From: <o:p></o:p></b></p></td><td style='padding:0in 0in 0in 0in'><p class=MsoNormal>Dom <a href="mailto:dversace@tekcorner.ca"><dversace@tekcorner.ca></a><o:p></o:p></p></td></tr><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal align=right style='text-align:right'><b>To: <o:p></o:p></b></p></td><td style='padding:0in 0in 0in 0in'><p class=MsoNormal><a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a><o:p></o:p></p></td></tr></table><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><pre>I was hoping someone could help. We have a cisco 3825 with radius <o:p></o:p></pre><pre>server pointed to our freeradius installation. When I test radius <o:p></o:p></pre><pre>authentication using NTRadping using CHAP authentication everything <o:p></o:p></pre><pre>works fine. However when we try to connect via a standard dsl <o:p></o:p></pre><pre>connection we get these failures. I was hoping someone could help point <o:p></o:p></pre><pre>me in the right direction to fix the issue.<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Thanks<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>rad_recv: Access-Request packet from host 64.34.66.5 port 1645, id=26, <o:p></o:p></pre><pre>length=134<o:p></o:p></pre><pre> Framed-Protocol = PPP<o:p></o:p></pre><pre> User-Name = <a href="mailto:aewais@domain.ca">"aewais@domain.ca"</a><o:p></o:p></pre><pre> User-Password = "password"<o:p></o:p></pre><pre> Calling-Station-Id = "bas105300000096"<o:p></o:p></pre><pre> Connect-Info = "1000000000"<o:p></o:p></pre><pre> NAS-Port-Type = Virtual<o:p></o:p></pre><pre> NAS-Port = 26<o:p></o:p></pre><pre> NAS-Port-Id = "Uniq-Sess-ID26"<o:p></o:p></pre><pre> Service-Type = Framed-User<o:p></o:p></pre><pre> NAS-IP-Address = 64.34.xxxx.xxxx<o:p></o:p></pre><pre># Executing section authorize from file <o:p></o:p></pre><pre>/etc/freeradius/sites-enabled/default<o:p></o:p></pre><pre>+- entering group authorize {...}<o:p></o:p></pre><pre>++[preprocess] returns ok<o:p></o:p></pre><pre>++[chap] returns noop<o:p></o:p></pre><pre>++[mschap] returns noop<o:p></o:p></pre><pre>++[digest] returns noop<o:p></o:p></pre><pre>[suffix] Looking up realm "tekcorner.ca" for User-Name = <a href="mailto:aewais@domain.ca">"aewais@domain.ca"</a><o:p></o:p></pre><pre>[suffix] No such realm "domain.ca"<o:p></o:p></pre><pre>++[suffix] returns noop<o:p></o:p></pre><pre>[eap] No EAP-Message, not doing EAP<o:p></o:p></pre><pre>++[eap] returns noop<o:p></o:p></pre><pre>[files] users: Matched entry DEFAULT at line 172<o:p></o:p></pre><pre>++[files] returns ok<o:p></o:p></pre><pre>++[expiration] returns noop<o:p></o:p></pre><pre>++[logintime] returns noop<o:p></o:p></pre><pre>[pap] WARNING! No "known good" password found for the user. <span style='color:#1F497D'><--- </span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>The PAP module could not find a password for the user.</span><o:p></o:p></pre><pre>Authentication may fail because of this.<o:p></o:p></pre><pre>++[pap] returns noop<o:p></o:p></pre><pre>ERROR: No authenticate method (Auth-Type) found for the request: <o:p></o:p></pre><pre>Rejecting the user<o:p></o:p></pre><pre>Failed to authenticate the user.<o:p></o:p></pre><pre>Using Post-Auth-Type Reject<o:p></o:p></pre><pre># Executing group from file /etc/freeradius/sites-enabled/default<o:p></o:p></pre><pre>+- entering group REJECT {...}<o:p></o:p></pre><pre>[attr_filter.access_reject] expand: %{User-Name} -> <a href="mailto:aewais@domain.ca">aewais@domain.ca</a><o:p></o:p></pre><pre> attr_filter: Matched entry DEFAULT at line 11<o:p></o:p></pre><pre>++[attr_filter.access_reject] returns updated<o:p></o:p></pre><pre>Delaying reject of request 0 for 1 seconds<o:p></o:p></pre><pre>Going to the next request<o:p></o:p></pre><pre>Waking up in 0.9 seconds.<o:p></o:p></pre><pre>Sending delayed reject for request 0<o:p></o:p></pre><pre>Sending Access-Reject of id 26 to 64.34.xxx.xxx port 1645<o:p></o:p></pre><pre>Waking up in 4.9 seconds.<o:p></o:p></pre><pre>Cleaning up request 0 ID 26 with timestamp +97<o:p></o:p></pre><pre>Ready to process requests.<o:p></o:p></pre></div></body></html>