Hey TNT, On Thu, Nov 27, 2008 at 2:54 PM, <tnt@kalik.net> wrote:
i force in WIndows Client to use only mschap2, but the problem continue:
- Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 150.162.67.254:32858, id=109, length=53 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "douglas" NAS-IP-Address = 1.1.1.1 NAS-Port = 0
This is nothing to do with freeradius. I don't see your NAS sending mschap attributes.
How I can fix that? Where i configure that?
In PPTP debug show:
..
Nov 27 11:35:39 epiderme pppd[12254]: rc_avpair_new: unknown attribute 11 Nov 27 11:35:39 epiderme pppd[12254]: rc_avpair_new: unknown attribute 25
Has your radius client got mschap dictionary?
I'm using the RadiusClient1 of Debian. -- epiderme:/etc/radiusclient# ls -l total 52 -rw-r--r-- 1 root root 6502 2008-11-26 13:10 dictionary -rw-r--r-- 1 root root 12388 2006-10-29 08:54 dictionary.ascend -rw-r--r-- 1 root root 1517 2006-10-29 08:54 dictionary.compat -rw-r--r-- 1 root root 599 2006-10-29 08:54 dictionary.merit -rw-r--r-- 1 root root 135 2006-10-29 08:54 issue -rw-r--r-- 1 root root 410 2006-10-29 08:54 port-id-map -rw-r--r-- 1 root root 2630 2008-11-24 15:24 radiusclient.conf -rwxr-xr-x 1 root root 2621 2008-11-24 13:33 radiusclient.conf.EPI -rw------- 1 root root 272 2008-11-24 13:12 servers -- -- epiderme:/etc/radiusclient# cat radiusclient.conf auth_order radius,local login_tries 4 login_timeout 60 nologin /etc/nologin issue /etc/radiusclient/issue authserver ldap.telemedicina.ufsc.br acctserver ldap.telemedicina.ufsc.br servers /etc/radiusclient/servers dictionary /etc/radiusclient/dictionary login_radius /usr/sbin/login.radius seqfile /var/run/radius.seq mapfile /etc/radiusclient/port-id-map default_realm radius_timeout 10 radius_retries 3 login_local /bin/login -- But I don't found the attributes to MS-CHAP: -- epiderme:/etc/radiusclient# cat dictionary | grep MS-CHAP epiderme:/etc/radiusclient# cat dictionary | grep MSCHAP epiderme:/etc/radiusclient# cat dictionary | grep mschap -- Just to CHAP: -- epiderme:/etc/radiusclient# cat dictionary | grep -i chap ATTRIBUTE CHAP-Password 3 string ATTRIBUTE Chap-Challenge 60 string -- That's correct? Thanks a lot in advanced, Douglas
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Douglas Macedo dmacedo@gmail.com -- Avalia-se a inteligência de um indivíduo pela quantidade de incertezas que ele é capaz de suportar. (Immanuel Kant)