Ricardo89 wrote:
If a windows client first enter his credentials erroneous the Ferraris send a error message, next if the user enter the correct credentials the radius server doesn't authenticate the client.
No.
Checking the source code, in the file run_eap_mschapv2, when the client sends the correct password after sending the wrong ones i could check the windows sends a message with the code PW_EAP_MSCHAPV2_FAILURE instead of a PW_EAP_MSCHAPV2_CHALLENGE.
So... the Windows box sending a failure means you conclude that FreeRADIUS is at fault?
I detect that the error was in that file because in the with the message "rlm_eap_mschapv2:Unexpected response received" i also print the value of the data->code and it was 4 that matches with PW_EAP_MSCHAPV2_FAILURE. Can you help me?
That message is sent by the Windows box to FreeRADIUS. It says that the Windows box didn't like the response from FreeRADIUS. i.e. the Windows box is caching the *wrong* password. Go fix it. Ask Microsoft how this is done. Alan DeKok.