Hi Guys, While testing 802.1x in our lab we are getting the following error on radius: Debug: [mschap] No Cleartext-Password configured. Cannot create LM-Password. Debug: [mschap] No Cleartext-Password configured. Cannot create NT-Password. Debug: [mschap] Creating challenge hash with username: test951 Debug: [mschap] Client is using MS-CHAPv2 for test951, we need NT-Password Debug: [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. Debug: [mschap] FAILED: MS-CHAP2-Response is incorrect Debug: ++[mschap] = reject There are valid entries in the radius tables. select * from radcheck where username = 'test951'; +-----------+--------------+--------------------+----+--------------+ | id | username | attribute | op | value | +-----------+--------------+--------------------+----+--------------+ | 115850045 | jerrytest951 | Cleartext-Password | := | jerrytest951 | Please suggest! Thanks, Amardeep
Hi, That is just a typo mistake. I have tried using the same username. Thanks On Thu, Jan 30, 2020 at 12:35 PM Никита Борисенков <bna@sunlink.ru> wrote:
Debug: [mschap] Creating challenge hash with username: test951
| 115850045 | jerrytest951 | Cleartext-Password | := | jerrytest951 |
test951 != jerrytest951
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Debug: [mschap] No Cleartext-Password configured. Cannot create LM-Password. Debug: [mschap] No Cleartext-Password configured. Cannot create NT-Password. Debug: [mschap] Creating challenge hash with username: test951 Debug: [mschap] Client is using MS-CHAPv2 for test951, we need NT-Password Debug: [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. Debug: [mschap] FAILED: MS-CHAP2-Response is incorrect Debug: ++[mschap] = reject There are valid entries in the radius tables. select * from radcheck where username = 'test951'; +-----------+--------------+--------------------+----+--------------+ | id | username | attribute | op | value | +-----------+--------------+--------------------+----+--------------+ | 115850045 | test951 | Cleartext-Password | := | test951 | On Thu, Jan 30, 2020 at 12:37 PM Amardeep Singh <aman.xsaintz@gmail.com> wrote:
Hi,
That is just a typo mistake. I have tried using the same username.
Thanks
On Thu, Jan 30, 2020 at 12:35 PM Никита Борисенков <bna@sunlink.ru> wrote:
Debug: [mschap] Creating challenge hash with username: test951
| 115850045 | jerrytest951 | Cleartext-Password | := | jerrytest951 |
test951 != jerrytest951
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Debug: [mschap] No Cleartext-Password configured. Cannot create LM-Password. Debug: [mschap] No Cleartext-Password configured. Cannot create NT-Password. Debug: [mschap] Creating challenge hash with username: test951 Debug: [mschap] Client is using MS-CHAPv2 for test951, we need NT-Password Debug: [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. Debug: [mschap] FAILED: MS-CHAP2-Response is incorrect Debug: ++[mschap] = reject
There are valid entries in the radius tables.
select * from radcheck where username = 'test951'; +-----------+--------------+--------------------+----+--------------+ | id | username | attribute | op | value | +-----------+--------------+--------------------+----+--------------+ | 115850045 | test951 | Cleartext-Password | := | test951 |
On Thu, Jan 30, 2020 at 12:37 PM Amardeep Singh <aman.xsaintz@gmail.com> wrote:
Hi,
That is just a typo mistake. I have tried using the same username.
Thanks
On Thu, Jan 30, 2020 at 12:35 PM Никита Борисенков <bna@sunlink.ru> wrote:
Debug: [mschap] Creating challenge hash with username: test951
| 115850045 | jerrytest951 | Cleartext-Password | := | jerrytest951 |
test951 != jerrytest951
Yes, I only then noticed the name in the select request. Need full debug output from "freeradius -X"
Hi, just a guess:
Debug: [mschap] Client is using MS-CHAPv2 for test951, we need NT-Password
and
| 115850045 | test951 | Cleartext-Password | := | test951 |
Did you try to update the table with something like: | 115850045 | test951 | NT-Password | := | 0x... | to provide a NT-Password ? --- Sent from my iPh... sent from my coffee machine. On Thu, 30 Jan 2020, Amardeep Singh wrote:
Debug: [mschap] No Cleartext-Password configured. Cannot create LM-Password. Debug: [mschap] No Cleartext-Password configured. Cannot create NT-Password. Debug: [mschap] Creating challenge hash with username: test951 Debug: [mschap] Client is using MS-CHAPv2 for test951, we need NT-Password Debug: [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. Debug: [mschap] FAILED: MS-CHAP2-Response is incorrect Debug: ++[mschap] = reject
There are valid entries in the radius tables.
select * from radcheck where username = 'test951'; +-----------+--------------+--------------------+----+--------------+ | id | username | attribute | op | value | +-----------+--------------+--------------------+----+--------------+ | 115850045 | test951 | Cleartext-Password | := | test951 |
On Thu, Jan 30, 2020 at 12:37 PM Amardeep Singh <aman.xsaintz@gmail.com> wrote:
Hi,
That is just a typo mistake. I have tried using the same username.
Thanks
On Thu, Jan 30, 2020 at 12:35 PM Никита Борисенков <bna@sunlink.ru> wrote:
Debug: [mschap] Creating challenge hash with username: test951
| 115850045 | jerrytest951 | Cleartext-Password | := | jerrytest951 |
test951 != jerrytest951
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu, 2020-01-30 at 12:28 +0530, Amardeep Singh wrote:
While testing 802.1x in our lab we are getting the following error on radius:
Debug: [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. Debug: [mschap] FAILED: MS-CHAP2-Response is incorrect Debug: ++[mschap] = reject ... Please suggest!
http://wiki.freeradius.org/list-help -- Matthew
http://deployingradius.com/documents/configuration/active_directory.html Tells all you need to know, change your samba settings. Greetz, Louis
-----Oorspronkelijk bericht----- Van: Freeradius-Users [mailto:freeradius-users-bounces+belle=bazuin.nl@lists.freerad ius.org] Namens Matthew Newton Verzonden: donderdag 30 januari 2020 14:49 Aan: FreeRadius users mailing list Onderwerp: Re: 802.1x radius issue
On Thu, 2020-01-30 at 12:28 +0530, Amardeep Singh wrote:
While testing 802.1x in our lab we are getting the following error on radius:
Debug: [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. Debug: [mschap] FAILED: MS-CHAP2-Response is incorrect Debug: ++[mschap] = reject ... Please suggest!
http://wiki.freeradius.org/list-help
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu, 2020-01-30 at 14:52 +0100, L.P.H. van Belle via Freeradius- Users wrote:
http://deployingradius.com/documents/configuration/active_directory.html
Tells all you need to know, change your samba settings.
It's nothing to do with Samba. But there's no way to tell _what_ the problem is without full debug output. Which is what we ask all the time, and nobody ever cares to provide. -- Matthew
participants (5)
-
Amardeep Singh -
L.P.H. van Belle -
Matthew Newton -
Tommy Scheunemann -
Никита Борисенков