<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 9.00.8112.16446"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV>I was under the impression the following from 2.11 was what I was looking for:</DIV>
<DIV> </DIV>
<DIV><STRONG>Allow EAP-MSCHAPv2 to send error message to client. This change allows some clients to prompt the user for a new password. See raddb/eap.conf, mschapv2 section, "send_error".</STRONG></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>I enabled that but am still not getting the prompt to re-enter password. Is additional configuration necessary ?</DIV>
<DIV> </DIV>
<DIV>Thanks</DIV>
<DIV>Jonathan</DIV>
<DIV> </DIV>
<DIV><BR><BR>>>> Alan DeKok <aland@deployingradius.com> 7/30/2012 11:30 AM >>><BR>Jonathan Paul wrote:<BR>> We are running a freeradius 2.1.12 server for access to our wifi. The<BR>> server is configured to authenticate users through ldap back to our<BR>> Novell Edirectory. We are required to change our passwords every 6<BR>> months. The password change occurs, but users are not prompted for this<BR>> new password on their mac when they try to get on the wifi the next<BR>> time. We were previously running 2.1.10 and built a new server this<BR>> summer as I was under the impression this was supposed to be fixed in<BR>> this version. Is there a config change necessary to prompt for a new<BR>> password when authentication fails ? <BR><BR> The git "master" branch supports password changes via MS-CHAP.<BR>Version 2.1.12 does not.<BR><BR> Alan DeKok.<BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR><BR></DIV></BODY></HTML>