Almost there... Radiusclient not sending password with MSChapv2
Dear list members, I almost have a working Radius setup... Well almost, because when I try to setup a pptp tunnel with my Windows XP, I see the following om my radius server: Packet number 1 has just been sniffed From: 127.0.0.1:54717 To: 127.0.0.1:1812 Type: Access-Request Service-Type = Framed-User Framed-Protocol = PPP User-Name = "wim" MS-CHAP-Challenge = 0x75a4e7aeb06f3c93be685de0afae4cc2 MS-CHAP2-Response = 0x60007f150b2e344755f9e0462ded8d7d68520000000000000000cf323d8cd21faeb820272ccadd6b188a8ae287bd7481f1c4 Calling-Station-Id = "8.08" NAS-IP-Address = XX.XX.XX.XX NAS-Port = 0 Packet number 2 has just been sniffed From: 127.0.0.1:1812 To: 127.0.0.1:54717 Type: Access-Accept Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.2.10 Framed-IP-Netmask = 255.255.255.0 MS-CHAP2-Success = 0x60533d45314438443736334142433330343132383837384533434639323534413541373639313346443535 MS-MPPE-Recv-Key = 0x97fc624e0e2ff930716882df647c7ec4fc8a2d9c946e54d2befdc26d5292aec3562a MS-MPPE-Send-Key = 0x9ca67e3969c47454af91493d646e4cdf8fd93dcf3435868ffd42fb3c6c992fb5b989 MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004 My XP tells me that the username/password is invalid (Error 961). I suspect the password attibute to be empty.. Can anyone give me a hint? -- Wim
On Mon, Dec 07, 2009 at 04:11:32PM +0100, Wim De Hul wrote:
Dear list members,
I almost have a working Radius setup...
Well almost, because when I try to setup a pptp tunnel with my Windows XP, I see the following om my radius server:
Packet number 1 has just been sniffed From: 127.0.0.1:54717 To: 127.0.0.1:1812 Type: Access-Request Service-Type = Framed-User Framed-Protocol = PPP User-Name = "wim" MS-CHAP-Challenge = 0x75a4e7aeb06f3c93be685de0afae4cc2 MS-CHAP2-Response = 0x60007f150b2e344755f9e0462ded8d7d68520000000000000000cf323d8cd21faeb820272ccadd6b188a8ae287bd7481f1c4 Calling-Station-Id = "8.08" NAS-IP-Address = XX.XX.XX.XX NAS-Port = 0 Packet number 2 has just been sniffed From: 127.0.0.1:1812 To: 127.0.0.1:54717 Type: Access-Accept Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.2.10 Framed-IP-Netmask = 255.255.255.0 MS-CHAP2-Success = 0x60533d45314438443736334142433330343132383837384533434639323534413541373639313346443535 MS-MPPE-Recv-Key = 0x97fc624e0e2ff930716882df647c7ec4fc8a2d9c946e54d2befdc26d5292aec3562a MS-MPPE-Send-Key = 0x9ca67e3969c47454af91493d646e4cdf8fd93dcf3435868ffd42fb3c6c992fb5b989 MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004
My XP tells me that the username/password is invalid (Error 961). I suspect the password attibute to be empty..
Can anyone give me a hint?
FYI, I use the 'users' file to store my passwords in clear text: wim Cleartext-Password := "test123"
-- Wim - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Wim
I almost have a working Radius setup...
It's working.
Well almost, because when I try to setup a pptp tunnel with my Windows XP, I see the following om my radius server:
Packet number 1 has just been sniffed From: 127.0.0.1:54717 To: 127.0.0.1:1812 Type: Access-Request Service-Type = Framed-User Framed-Protocol = PPP User-Name = "wim" MS-CHAP-Challenge = 0x75a4e7aeb06f3c93be685de0afae4cc2 MS-CHAP2-Response = 0x60007f150b2e344755f9e0462ded8d7d68520000000000000000cf323d8cd21faeb820272ccadd6b188a8ae287bd7481f1c4 Calling-Station-Id = "8.08" NAS-IP-Address = XX.XX.XX.XX NAS-Port = 0 Packet number 2 has just been sniffed From: 127.0.0.1:1812 To: 127.0.0.1:54717 Type: Access-Accept Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.2.10 Framed-IP-Netmask = 255.255.255.0 MS-CHAP2-Success = 0x60533d45314438443736334142433330343132383837384533434639323534413541373639313346443535 MS-MPPE-Recv-Key = 0x97fc624e0e2ff930716882df647c7ec4fc8a2d9c946e54d2befdc26d5292aec3562a MS-MPPE-Send-Key = 0x9ca67e3969c47454af91493d646e4cdf8fd93dcf3435868ffd42fb3c6c992fb5b989 MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004
See. Access-Accept with MPPE keys. That all looks fine.
My XP tells me that the username/password is invalid (Error 961). I suspect the password attibute to be empty..
There is no password attribute in mschap. Problem is with your NAS - for some reason it is not creating the tunnel. Debug ppp on your NAS. Ivan Kalik
On Mon, Dec 07, 2009 at 11:31:44PM -0000, tnt@kalik.net wrote:
I almost have a working Radius setup...
It's working.
My XP tells me that the username/password is invalid (Error 961). I suspect the password attibute to be empty..
There is no password attribute in mschap. Problem is with your NAS - for some reason it is not creating the tunnel. Debug ppp on your NAS.
Ivan Kalik
I was debugging ppp yesterday evening, I started thinking about it after I saw the ppp0 interface coming up... But that's another mailinglist :-) Thanks for the support so far! I learned a lot :-) -- Wim
participants (2)
-
tnt＠kalik.net -
Wim De Hul