On 28 Sep 2011, at 21:18, Alan DeKok wrote:
scoth wrote:
I'm stuck in my testing. I have configured and reconfigured my freeradius and keep getting back to the same error: [mschap] ERROR: User-Name (RC24558\jojo) is not the same as MS-CHAP Name (jojo) from EAP-MSCHAPv2
That data is sent by the Windows box, and isn't under the control of FreeRADIUS.
Sometimes Windows does this... I'm not really sure why.
I was able to use the mschap-username to successfully authenticate to ldap but then fail in the authentication because the usernames are not the same.
Any help is greatly appreciated.
Set up a fake user account with a username "test", and password "hello". Do the same test. If you get the same error, submit the debug output to bugzilla.freeradius.org. I'll see if there's a way for the server to figure out the correct thing to do here.
Which standard says that the MSCHAPv2 identity and the PEAP Inner identity have to match? I thought it was in the PEAPv0 draft but that doesn't actually mention MSCHAPv2 anywhere... -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !