Paul Thornton wrote:
I've got a problem which I now know isn't FreeRADIUS misbehaving but seems to be some CHAP-related issue, but I can't see what. With advanced apologies for being somewhat off-topic, I'm wondering if anyone has any ideas?
It isn't a CHAP issue. Read the debug output. There's no CHAP in the request.
In my test setup, all attempts to use CHAP or MSCHAP-v2 for authentication fail, basically because there is no CHAP challenge or password sent with the Access-Request. Not unreasonably, the radius server rejects the request:
No. The request has no CHAP or MS-CHAP attributes in it. So of *course* authentication fails. You can't authenticate someone if they don't supply authentication credentials.
I've also set up a FreeBSD PPPoE server to check that this wasn't a client-side problem;
It's the fault of the RADIUS client. RADIUS clients decide what goes into a request. If the request is missing something, blame the client.
Has anyone had a similar problem or can suggest anything? I've been going around in circles here all day and ended up going nowhere.
Fix the PPP server so that it works. This isn't a FreeRADIUS problem. Alan DeKok.