Error: "user supplied User-Password does NOT match local User-Password" even though they do.
Hello, I've been using FreeRadius for quite some time now, but after a recent update (to 2.0.4, debian lenny variant) all users in a certain group have stopped authenticating properly, with the above error -- even though as far as I can tell the password transmitted (and logged) is identical to the one in the database. I've attached a sample of the logfile, with names and passwords slightly edited but otherwise accurate: I've tried everything I could think of, including deleting the user and entering the data anew by hand, but the error persists. Any suggestions to dig further and help me find what I may have missed would be welcome. Regards, -- Rens Houben <shadur@systemec.nl>
I've been using FreeRadius for quite some time now, but after a recent update (to 2.0.4, debian lenny variant) all users in a certain group have stopped authenticating properly, with the above error -- even though as far as I can tell the password transmitted (and logged) is identical to the one in the database.
I've attached a sample of the logfile, with names and passwords slightly edited but otherwise accurate:
I've tried everything I could think of, including deleting the user and entering the data anew by hand, but the error persists.
Any suggestions to dig further and help me find what I may have missed would be welcome.
Remove forcing of Auth-Type Local. Let the server set the auth type. Ivan Kalik Kalik Informatika ISP
On Fri, 2009-08-28 at 11:26 +0100, Ivan Kalik wrote:
Remove forcing of Auth-Type Local. Let the server set the auth type.
That resulted in a different error message: ++[sql] returns ok ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "foo" rlm_pap: No password configured for the user. Cannot do authentication ++[pap] returns fail auth: Failed to validate the user. Login incorrect: [shadur/foo] (from client giganews port 1) Delaying reject of request 1 for 1 seconds -- Rens Houben <shadur@systemec.nl>
participants (2)
-
Ivan Kalik -
Rens Houben