Re: help on rlm_mschap: FAILED: MS-CHAP2-Response is incorrect

Jie Yang wrote:

Hi, All, When I tried to develop PEAP at client side, i found I am always rejected by the server. The following is the log. what might be wrong?

You almost certainly need to strip the "@domain" off the username before mschap sees it - the username is used in calculating the challenge response. See the "realms" module, specifically you'll want the "suffix" instance in authorize, "spirentcom.com" as a LOCAL realm in proxy.conf and proxying turned on.