Hi again I did do some more reading and finally got radius to authenticate mschap, I am using the users file to add users for the time being and no SQL. A user can authenticate properly See Going to the next request Waking up in 4.9 seconds. Cleaning up request 3 ID 100 with timestamp +136 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 57868, id=101, length=132 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "test" MS-CHAP-Challenge = 0x65c4689b30c27f604fcca7ba1370fdba MS-CHAP2-Response = 0x31004bfca25ae57e8617e1e2d3cebde289040000000000000000c4cd490b424b34bfa53ad8b65fb786d994c6f647dbdd001a NAS-IP-Address = 127.0.0.1 NAS-Port = 0 # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' ++[mschap] returns ok ++[digest] returns noop [suffix] No '@' in User-Name = "test", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry test at line 76 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING: Auth-Type already set. Not setting to PAP ++[pap] returns noop Found Auth-Type = MSCHAP # Executing group from file /etc/raddb/sites-enabled/default +- entering group MS-CHAP {...} [mschap] Creating challenge hash with username: test [mschap] Told to do MS-CHAPv2 for test with NT-Password [mschap] adding MS-CHAPv2 MPPE keys ++[mschap] returns ok # Executing section post-auth from file /etc/raddb/sites-enabled/default +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 101 to 127.0.0.1 port 57868 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.3.33 Framed-IP-Netmask = 255.255.255.0 Framed-Routing = Broadcast-Listen Framed-Filter-Id = "std.ppp" Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP MS-CHAP2-Success = 0x31533d43303035333346323444353031324334354144323433334634334344343931374636363944453733 MS-MPPE-Recv-Key = 0x494fa970f9bb475a70b1b37179089b1d MS-MPPE-Send-Key = 0x546cdc52da0bf3818284fe5e6c48332d MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004 Finished request 4. but I get the following error on the pptpd side May 23 13:30:01 pptp-test-100-13 pppd[7512]: rc_check_reply: received invalid reply digest from RADIUS server Any input please ? Regards On Wed, May 23, 2012 at 3:17 PM, Matthew Newton <mcn4@leicester.ac.uk>wrote:
On Wed, May 23, 2012 at 02:02:02PM +0200, Alan DeKok wrote:
Matthew Newton wrote:
I'm not sure who looks after them now, or if they are maintained. I've just found radiusclient-ng, which looks more recent, but have no experience of it.
But this is all mildly off-topic for FreeRADIUS...
radiusclient-ng is no longer developed.
It has become freeradius-client. :) See http://freeradius.org
Ah - thanks. I had it on my list to hack at the radiusclient code to try and update it. 30 minutes ago, that list entry changed to radiusclient-ng.
Looks like I'll be looking at the freeradius-client code instead now... if I ever get time!
Cheers,
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- *Ali Jawad * *Information Systems Manager* *Splendor Telecom (www.splendor.net) Beirut, Lebanon Phone: +9611373725/ext 116 FAX: +9611375554*