On 19.09.2014 20:26, Nicolás Guerra wrote:
please forgive my ignorance, I'm new in freeRADIUS, I'm just trying to make it work as I'd been asked (users should authenticate with the userPassword attr).
You can't. Unless the userPassword attributed stores the password in plain text, it is mathematically impossible to get this to work with MS-CHAPv2. And by saying "impossible" I mean "impossible". It will never work. It can never work. Stop trying to get it to work. You have some options: a) Store the password also in a different attribute in plain text. Use that instead of the userPassword attribute for MS-CHAPv2. b) Store the password also in the sambaNTPassword attribute, hashed in the format it needs to be. c) Don't use MS-CHAPv2 but PAP. This will not work with any Windows prior to Windows 8. If you need to support Windows XP/Vista/7 without additional tools, this is no option for you. Grüße, Sven.