<html>
<head>
<meta content="text/html; charset=WINDOWS-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Alan,<br>
<br>
I've been searching the lists for most of the day but haven't been
able to come right. What I've noticed recently is that if I add the
user on the test box with no password, and then try to sign on via
ssh I see the following in the radiusd debug output:<br>
<br>
<pre wrap="">User-Password = "<i><b>mypassword</b></i>"</pre>
<br>
However, the user is still not authenticated via the FreeRADIUS
server. If I explicitly go and add that user to the <b>/etc/raddb/users</b>
file, then authentication works via PAP. How do I tell FreeRADIUS to
use MS-CHAP for all users?<br>
<br>
Greetings,<br>
<br>
Jonathan<br>
<br>
<br>
On 06/01/2012 03:25 PM, Alan DeKok wrote:
<blockquote cite="mid:4FC8C2B4.4020307@deployingradius.com"
type="cite">
<pre wrap="">Jonathan van der Wat wrote:
</pre>
<blockquote type="cite">
<pre wrap="">When attempting to ssh to the test box as an Active Directory user I
receive the following debug output:
rad_recv: Access-Request packet from host 172.16.132.140 port 32768,
id=12, length=95
User-Name = "jonathanv"
User-Password = "\010\n\r\177INCORRECT"
</pre>
</blockquote>
<pre wrap="">
Please see the list archives. This question comes up a lot.
Some *OTHER* PAM module is destroying the password. Go fix that.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br><br>
<p style="font-family: Verdana; font-size:10pt; color:#666666;" align="justify">
<b>Disclaimer</b>
</p>
<p style="font-family: Verdana; font-size:8pt; color:#666666;" align="justify">
The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.
<br><br>
This email has been scanned for viruses and malware, and automatically archived by <b>Mimecast SA (Pty) Ltd</b>, an innovator in Software as a Service (SaaS) for business. <b>Mimecast Unified Email Management
<span class="style1">™</span> (UEM)</b> offers email continuity, security, archiving and compliance with all current legislation. To find out more, <a href="http://www.mimecast.co.za/uem-ppc">contact Mimecast</a>.
<font color=white>itevomcid</font>
</p>
</body>
</html>