Alan,

I've been searching the lists for most of the day but haven't been able to come right. What I've noticed recently is that if I add the user on the test box with no password, and then try to sign on via ssh I see the following in the radiusd debug output:

User-Password = "mypassword"

However, the user is still not authenticated via the FreeRADIUS server. If I explicitly go and add that user to the /etc/raddb/users file, then authentication works via PAP. How do I tell FreeRADIUS to use MS-CHAP for all users?

Greetings,

Jonathan


On 06/01/2012 03:25 PM, Alan DeKok wrote: 
Jonathan van der Wat wrote:

When attempting to ssh to the test box as an Active Directory user I
receive the following debug output:

rad_recv: Access-Request packet from host 172.16.132.140 port 32768,
id=12, length=95
    User-Name = "jonathanv"
    User-Password = "\010\n\r\177INCORRECT"

  Please see the list archives.  This question comes up a lot.

  Some *OTHER* PAM module is destroying the password.  Go fix that.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Disclaimer

The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.

This email has been scanned for viruses and malware, and automatically archived by Mimecast SA (Pty) Ltd, an innovator in Software as a Service (SaaS) for business. Mimecast Unified Email Management ™ (UEM) offers email continuity, security, archiving and compliance with all current legislation. To find out more, contact Mimecast. itevomcid