Hello, Ok, I removed freeradius and re-installed the package. The only configuration changes I made where: username and password in sql.conf Uncommented sql options in radius.conf I also add the dictionary.mirosoft file to the /etc/radiusclient/ directory as I came across a document that said to do so. I am still receiving the same error as before, in the mysql database I have: mysql> select * from radcheck; +----+----------+-----------+----+----------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+----------+ | 1 | testuser | Password | == | testpass | +----+----------+-----------+----+----------+ 1 row in set (0.00 sec) mysql> select * from radgroupcheck; +----+-----------+-----------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+-------+ | 1 | static | Auth-Type | := | Local | +----+-----------+-----------+----+-------+ 1 row in set (0.00 sec) mysql> select * from usergroup; +----+----------+-----------+ | id | UserName | GroupName | +----+----------+-----------+ | 1 | testuser | static | +----+----------+-----------+ Any hints would be appreciated, thanks. Michael Alan DeKok wrote:
Michael Gale <michael.gale@pason.com> wrote:
My client is a XP Pro laptop using MS-CHAP v2 I believe
Nope. It's not sending MS-CHAP in the request packet.
I have followed the documents from the following locations: http://poptop.sourceforge.net/dox/radius_mysql.html http://www.frontios.com/freeradius.html
And heavily edited the standard configurations files, probably.
Please don't. The standard configuration is there for a reason: it works.
modcall[authorize]: module "mschap" returns noop for request 0
That works, at least. The server isn't trying to do MS-CHAP.
modcall: entering group Auth-Type for request 0 rlm_mschap: No MS-CHAP-Challenge in the request
This only happens if you force MS-CHAP authentication. Don't. You've probably added entries in SQL to force "Auth-Type = MS-CHAP". Don't.
And the request is unhelpful:
rad_recv: Access-Request packet from host 127.0.0.1:32804, id=83, length=65 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "testuser" Calling-Station-Id = "10.10.0.3" NAS-IP-Address = 127.0.0.1 NAS-Port = 0
There's no password or MS-CHAP attributes in it. The request cannot be authenticated.
Use the standard FreeRADIUS config files. They work. Make pptp send MS-CHAP attributes.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html