Hi, I have problem with PAP autentification on freeradius-3.0.0, but on freeradius-2.2.1 everythink works correct. Could you please help me, thx. Debug output for freeradius-3.0.0: radiusd@tdrad1test:/storage/app/radius/raddb/auth-new$ /storage/app/radius/freeradius-3.0.0/sbin/radiusd -X -d /storage/app/radius/raddb/auth-new radiusd: FreeRADIUS Version 3.0.0, for host x86_64-unknown-linux-gnu, built on May 14 2013 at 16:22:54 Copyright (C) 1999-2013 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Starting - reading configuration files ... ... Listening on proxy address * port 0 Listening on auth address * port 1812 as server default Listening on auth address * port 1645 as server default Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 50633, id=15, length=115 NAS-Port-Type = Virtual Service-Type = Framed-User Calling-Station-Id = "421905012405" Called-Station-Id = "l2tp.vps" Framed-Protocol = PPP User-Name = "l2tp@radiustest.sk" User-Password = "l2tp" Connect-Info = "8640000" NAS-IP-Address = 213.151.234.114 (0) # Executing section authorize from file /storage/app/radius/raddb/auth-new/sites-enabled/default (0) group authorize { (0) - entering group authorize {...} (0) [chap] = noop (0) suffix : Looking up realm "radiustest.sk" for User-Name = "l2tp@radiustest.sk" (0) suffix : Found realm "DEFAULT" (0) suffix : Adding Stripped-User-Name = "l2tp" (0) suffix : Adding Realm = "DEFAULT" (0) suffix : Authentication realm is LOCAL. (0) [suffix] = ok rlm_perl: Added pair NAS-Port-Type = Virtual rlm_perl: Added pair Service-Type = Framed-User rlm_perl: Added pair Called-Station-Id = l2tp.vps rlm_perl: Added pair Calling-Station-Id = 421905012405 rlm_perl: Added pair Framed-Protocol = PPP rlm_perl: Added pair User-Name = l2tp@radiustest.sk rlm_perl: Added pair User-Password = l2tp rlm_perl: Added pair Connect-Info = 8640000 rlm_perl: Added pair Realm = DEFAULT rlm_perl: Added pair Stripped-User-Name = l2tp rlm_perl: Added pair NAS-IP-Address = 213.151.234.114 rlm_perl: Added pair Current-Time = 1368711260 rlm_perl: Added pair Password-With-Header = {SSHA}cAgh2LCe5649EzEAbc+nAfIOvOyOJSmU+sKiPA== rlm_perl: Added pair VPDN_SERVICE_ID = User-GPRS-L2TP (0) [perl] = ok (0) [pap] = updated (0) Found Auth-Type = PAP (0) # Executing group from file /storage/app/radius/raddb/auth-new/sites-enabled/default (0) group PAP { (0) - entering group PAP {...} (0) pap : login attempt with password "l2tp" (0) pap : Using SSHA encryption. (0) ERROR: pap : SSHA password check failed (0) pap : Passwords don't match (0) [pap] = reject (0) Failed to authenticate the user. (0) Login incorrect (pap: SSHA password check failed): [l2tp@radiustest.sk/l2tp] (from client localhost port 0 cli 421905012405) Debug output for freeradius-2.2.1: radiusd@tdrad1test:/storage/app/radius/raddb/auth$ /storage/app/radius/freeradius/sbin/radiusd -X -d /storage/app/radius/raddb/auth radiusd: FreeRADIUS Version 2.2.1, for host x86_64-unknown-linux-gnu, built on May 2 2013 at 09:22:02 Copyright (C) 1999-2013 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Starting - reading configuration files ... ... Listening on authentication address * port 1812 Listening on authentication address * port 1645 Listening on proxy address * port 37677 Listening on command file ../../log/radius/radius_auth.sock Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 57436, id=196, length=115 NAS-Port-Type = Virtual Service-Type = Framed-User Calling-Station-Id = "421905012405" Called-Station-Id = "l2tp.vps" Framed-Protocol = PPP User-Name = "l2tp@radiustest.sk" User-Password = "l2tp" Connect-Info = "8640000" NAS-IP-Address = 213.151.234.114 # Executing section authorize from file /storage/app/radius/raddb/auth/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [suffix] Looking up realm "radiustest.sk" for User-Name = "l2tp@radiustest.sk" [suffix] Found realm "DEFAULT" [suffix] Adding Stripped-User-Name = "l2tp" [suffix] Adding Realm = "DEFAULT" [suffix] Authentication realm is LOCAL. ++[suffix] returns ok ++[files] returns noop rlm_perl: Added pair NAS-Port-Type = Virtual rlm_perl: Added pair Service-Type = Framed-User rlm_perl: Added pair Called-Station-Id = l2tp.vps rlm_perl: Added pair Calling-Station-Id = 421905012405 rlm_perl: Added pair Framed-Protocol = PPP rlm_perl: Added pair User-Name = l2tp@radiustest.sk rlm_perl: Added pair User-Password = l2tp rlm_perl: Added pair Connect-Info = 8640000 rlm_perl: Added pair Realm = DEFAULT rlm_perl: Added pair Stripped-User-Name = l2tp rlm_perl: Added pair NAS-IP-Address = 213.151.234.114 rlm_perl: Added pair Current-Time = 1368709398 rlm_perl: Added pair Password-With-Header = {SSHA}cAgh2LCe5649EzEAbc+nAfIOvOyOJSmU+sKiPA== rlm_perl: Added pair VPDN_SERVICE_ID = User-GPRS-L2TP ++[perl] returns ok [pap] Normalizing SSHA1-Password from base64 encoding ++[pap] returns updated Found Auth-Type = PAP # Executing group from file /storage/app/radius/raddb/auth/sites-enabled/default +- entering group PAP {...} [pap] login attempt with password "l2tp" [pap] Using SSHA encryption. [pap] User authenticated successfully ++[pap] returns ok Login OK: [l2tp@radiustest.sk/l2tp] (from client localhost port 0 cli 421905012405) Peter Balšianok Data Service Operation Coordinator, Voice & Data Services Operations Orange Slovensko, a. s. Metodova 8, 821 08 Bratislava tel: +421 908 00 2405 mobil: +421 905 012 405 e-mail: peter.balsianok@orange.sk<mailto:peter.balsianok@orange.sk>