Hi Alan It seems you voted for the winning party. However the customer was adamant they had the correct password, we changes the password to something simple and the device immediately logged in successfully. What confused me was the " Using clear text password "1234" for user f3207920@surf4sure.net authentication" which I thought meant that the end device was using the given password. After capturing the traffic I realised that with CHAP there is no way freeradius knows what password the end device is using so it must mean what freeradius is using to generate the CHAP hash Thanks for your response Daniel -----Original Message----- From: freeradius-users-bounces+daniel=intelliworkspace.com@lists.freeradius.org [mailto:freeradius-users-bounces+daniel=intelliworkspace.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 14 September 2012 20:55 To: FreeRadius users mailing list Subject: Re: Chap Authentication Error Daniel Niasoff wrote:
This is what I see in the logs
Fri Sep 14 17:22:37 2012 : Info: [chap] login attempt by "f3207920@surf4sure.net" with CHAP password Fri Sep 14 17:22:37 2012 : Info: [chap] Using clear text password "1234" for user f3207920@surf4sure.net authentication. Fri Sep 14 17:22:37 2012 : Info: [chap] Password check failed
Well, that's clear.
However if I try to repeat the test using radtest with -t chap it works fine.
Fri Sep 14 17:22:32 2012 : Info: [chap] login attempt by "f3207920@surf4sure.net" with CHAP password Fri Sep 14 17:22:32 2012 : Info: [chap] Using clear text password "1234" for user f3207920@surf4sure.net authentication. Fri Sep 14 17:22:32 2012 : Info: [chap] chap user f3207920@surf4sure.net authenticated successfully
Now where do I go from here?
Fix the client so it works. You can believe one of two things: a) FreeRADIUS randomly does CHAP wrong b) the client is broken My vote is (b). Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html