On Apr 16, 2012, at 11:51 AM, pessimist wrote:
Found Auth-Type = CHAP +- entering group CHAP {...} [chap] login attempt by "ABC" with CHAP password [chap] Using clear text password "123" for user ABC authentication. [chap] Password check failed ++[chap] returns reject Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> ABC attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds
greetings, your output looks similar to mine. I recently setup a bunch of mac computers using 802.1x with hp/3com switches. try connecting with flat file username and password, bypass sql for now. verify radius works at with md5/leap, else set switch to eap and pass tickets. -j