Thanks Alan, That worked perfectly. Now the next problem: I'm trying to set up freeradius to do ntlm and mysql. Currently mysql only works when I comment out the ntlm_auth line in the mschap section. I'm thinking because it is sending the username/password to the Domain Controller, which won't auth it because the info is in the mysql database when the ntlm line is present. How can I make the mschap module use both ntlm and mysql? -- Chris Liles -----Original Message----- From: freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org [mailto:freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Wednesday, May 17, 2006 7:08 PM To: FreeRadius users mailing list Subject: Re: peap with mysql "Chris Liles" <Chris.Liles@air2web.com> wrote:
To get peap working with a mysql backend do I need to store the LM and NT hashes of the password?
No.
I currently have my db setup like this:
mysql> select * from radcheck; +----+----------+---------------+----+--------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+--------+ | 1 | temptest | User-Password | == | authme |
You should ":=", not "==".
Currently it works fine with NTRadPing, but not from the MS Supplicant :(
Debug mode will tell you why: there's no User-Password in the MS-CHAP request to do "==" comparisons on. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html