Baptiste Delporte wrote:
Mon Feb 19 09:30:08 2007 : Error: rlm_mschap: Invalid LM-Password Mon Feb 19 09:30:08 2007 : Error: rlm_mschap: Invalid NT-Password
That happens only when an LM-Password and NT-Password are added for the user, AND where they're not the right format.
/Authentication works perfectly with the same config files (eap.conf, radiusd.conf,users...) with an older version (1.0.1 and even 1.1.3) of freeradius on the same server.
Run the server in debugging mode in 1.1.3, and in 1.1.4. See what's different. The PAP module changed in 1.1.4, but I don't see why it would break MSCHAP.
In both cases, I get this line when I run freeradius in debug mode :
/rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.
That happens if there's no way to authenticate the user. But it shouldn't result in the above messages from the mschap module.
/And I can't find if there's a link between that warning and the authentication failure for some of my users.
Perhaps you could try posting the whole debug output, rather than tiny pieces. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog