I tried but it still failing to authenticate me... does this really mean my password is wrong? (8) ldap : Performing search in 'ou=people,dc=georgetown,dc=edu' with filter '(uid=ml623)', scope 'sub' (8) ldap : Waiting for search result... (8) ldap : User object found at DN "uid=ml623,ou=People,dc=georgetown,dc=edu" (8) ldap : Processing user attributes (8) ldap : control:Password-With-Header += ''{MD4}6DDDAF...'' rlm_ldap (ldap): Released connection (4) (8) [ldap] = ok (8) if (&control:Password-With-Header =~ /^.MD4.(.*)$/) (8) if (&control:Password-With-Header =~ /^.MD4.(.*)$/) -> TRUE (8) if (&control:Password-With-Header =~ /^.MD4.(.*)$/) { (8) update control { (8) EXPAND {nt}%{1} (8) --> {nt}6DDDAF... (8) Password-With-Header := '"{nt}6DDDAF..."' (8) } # update control = noop (8) } # if (&control:Password-With-Header =~ /^.MD4.(.*)$/) = noop (8) if ((ok || updated) && User-Password) (8) if ((ok || updated) && User-Password) -> FALSE (8) [expiration] = noop (8) [logintime] = noop (8) WARNING: pap : Auth-Type already set. Not setting to PAP (8) [pap] = noop (8) } # authorize = updated (8) Found Auth-Type = EAP (8) # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel (8) authenticate { (8) eap : Expiring EAP session with state 0xc06f3685c0672c5f (8) eap : Finished EAP session with state 0xc06f3685c0672c5f (8) eap : Previous EAP request found for state 0xc06f3685c0672c5f, released from the list (8) eap : Peer sent MSCHAPv2 (26) (8) eap : EAP MSCHAPv2 (26) (8) eap : Calling eap_mschapv2 to process EAP data (8) eap_mschapv2 : # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel (8) eap_mschapv2 : Auth-Type MS-CHAP { (8) WARNING: mschap : No Cleartext-Password configured. Cannot create LM-Password (8) WARNING: mschap : NT-Password has not been normalized by the 'pap' module. Authentication will fail (8) mschap : Creating challenge hash with username: ml623 (8) mschap : Client is using MS-CHAPv2 (8) ERROR: mschap : FAILED: No NT/LM-Password. Cannot perform authentication (8) ERROR: mschap : MS-CHAP2-Response is incorrect (8) [mschap] = reject (8) } # Auth-Type MS-CHAP = reject (8) eap : Freeing handler (8) [eap] = reject (8) } # authenticate = reject (8) Failed to authenticate the user. On Tue, Mar 10, 2015 at 10:57 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Mar 10, 2015, at 10:54 AM, Mohamed Lrhazi < Mohamed.Lrhazi@georgetown.edu> wrote:
What do I need to change this to:
Nothing. Try it and see.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html