<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">ok so i edited
/etc/raddb/sites-enabled/default <br>
and<br>
<br>
commented pap from authorize { ... }<br>
and commented <br>
Auth-Type PAP {<br>
pap<br>
}<br>
from authenticate { ... } <br>
but i still have the same error .<br>
<br>
i have also created a new user betatesting1 <br>
i have also tested in the local shell (although it attempts
mschapv1) and it gives me the same error <br>
<br>
<blockquote><small>[root@be-vpn ~]# radtest -t mschap betatesting1
secret 127.0.0.1 1812 myubersecretpassword<br>
Sending Access-Request of id 13 to 127.0.0.1 port 1812<br>
User-Name = "betatesting1"<br>
NAS-IP-Address = 127.0.0.1<br>
NAS-Port = 1812<br>
Message-Authenticator =
0x00000000000000000000000000000000<br>
MS-CHAP-Challenge = 0xdca09b5922346674<br>
MS-CHAP-Response =
0x000100000000000000000000000000000000000000000000000048cc2307c5dcb95d9cdc59f621d5d7e4b17c391d8ab5b4f4<br>
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812,
id=13, length=112<br>
MS-CHAP-Error = "\000E=691 R=1
C=f20ec16aa685d6a06f1ed900857d9c0e V=3 M=Re-enter (or reset)
the password"<br>
</small></blockquote>
<br>
On 8/6/2013 6:31 PM, Phil Mayers wrote:<br>
</div>
<blockquote cite="mid:520116C1.9050008@imperial.ac.uk" type="cite">On
06/08/13 16:04, Horatiu Nimigean wrote:
<br>
<blockquote type="cite">i have pptpd on a centos 6 box configured
to use radius for auth.
<br>
radius in turn checks credentials in ldap.
<br>
the user in ldap has a samba extension and a configured password
(i used
<br>
ldap account manager to set it up) it also has a sambaNTPassword
field
<br>
and it's populated.
<br>
rpm -q freeradius gives freeradius-2.1.12-4.el6_3.x86_64
<br>
<br>
the auth fails however when i try conencting from my windows8
client.
<br>
i need to mention that i am sure i'm inputting correct
passwords.
<br>
</blockquote>
<br>
I you are *really* sure of this (have you created a test user with
a simple password?), then it might be the PAP module "helpfully"
fiddling with the password:
<br>
<br>
<blockquote type="cite"> [pap] Normalizing NT-Password from hex
encoding
<br>
[pap] Normalizing SSHA1-Password from base64 encoding
<br>
</blockquote>
<br>
Try commenting out "pap", since you're not using it
<br>
-
<br>
List info/subscribe/unsubscribe? See
<a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
<br>
<br>
</blockquote>
<br>
</body>
</html>