thanks for your quick reply. I have re-look the configs and readme, and figure it out the issue why connection was not established. It was the pptp config file misconfiguration. I got the successfull connection. Then i tested with ldap authentication - configured /etc/modules/ldap section according to my ldap stuff and in sites-enabled/default enabled the ldap part.
localhost#radtest radiustest thepassword localhost 1812 testing123
Sending Access-Request of id 211 to 127.0.0.1 port 1812
User-Name = "radiustest"
User-Password = "thepassword"
NAS-IP-Address = 192.168.1.1
NAS-Port = 1812
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=211, length=20
So this looks good, then I tried from windows machine and i get authentication failed.
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user nemandi authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.
++[pap] returns noop
Found Auth-Type = MSCHAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group MS-CHAP {...}
[mschap] No Cleartext-Password configured. Cannot create LM-Password.
[mschap] No Cleartext-Password configured. Cannot create NT-Password.
[mschap] Creating challenge hash with username: radiustest
[mschap] Told to do MS-CHAPv2 for radiustest with NT-Password
[mschap] FAILED: No NT/LM-Password. Cannot perform authentication.
[mschap] FAILED: MS-CHAP2-Response is incorrect
++[mschap] returns reject
Failed to authenticate the user.
Using Post-Auth-Type Reject
As per log it mschap need cleartext password, and ldap does not store password in clear text. I do not want to integrate to windows server or samba stuff if possible. How can I achieve ldap authentication without installing samba and adding radius server into active directory ?
Regards,
Khapare
On Sat, Apr 28, 2012 at 5:26 PM, Alan DeKok
<aland@deployingradius.com> wrote:
Khapare Joshi wrote:
> i think radius and pptp are talking together now, but when i connect to
> vpn server from windows machine it looks authentication is working -
> however it doesnt get connected "it says registering your comptuer on
> the network" and returns back.
>
> What I am missing here.
The RADIUS server is returning Access-Accept. This means that it
thinks the user is OK.
> Apr 27 16:40:33 ioj-d00 pppd[2869]: LCP terminated by peer
> (^@M-h^NM-^Z^@<M-Mt^@^@^@^@)
PPPD thinks that the PC is closing the connection.
> what i am missing !!
Not much. Find out why the PC is closing the connection.
Alan DeKok.