Hi dear friends
I have a problem with configuration vpn & freeradius When I connect with Windows clients, displayed this error :
host 127.0.0.1 port 38970, id=139, length=148 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "test" MS-CHAP-Challenge = 0x089bd88d04fc9c4263f9ef8c0b7680d6 MS-CHAP2-Response = 0x5c00f40d55fc21260615b32b54a23b2b85cc00000000000000008ae59dc6918fdc10855be5c58cf809be14426f2fba994eea Calling-Station-Id = "192.168.56.100" NAS-IP-Address = 127.0.1.1 NAS-Port = 1 # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' ++[mschap] returns ok ++[digest] returns noop [suffix] No '@' in User-Name = "test", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry DEFAULT at line 172 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = MSCHAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group MS-CHAP {...} [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Creating challenge hash with username: test [mschap] Told to do MS-CHAPv2 for test with NT-Password [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject Failed to authenticate the user. Using Post-Auth-Type Reject # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> test attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 139 to 127.0.0.1 port 38970 MS-CHAP-Error = "\\E=691 R=1" Waking up in 4.9 seconds. Cleaning up request 0 ID 139 with timestamp +592
Tell me how do I solve this problem, please I really need your help
On 08/24/2011 04:07 PM, saeed1803 wrote:
Hi dear friends I have a problem with configuration vpn & freeradius Tell me how do I solve this problem, please I really need your help
You're being rude. * it's rude to post a question more than once (you've posted 3 times now) * it's rude to demand immediate help from volunteers FWIW the answer to your question is right in the debug output you posted, did you read it?
[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Creating challenge hash with username: test [mschap] Told to do MS-CHAPv2 for test with NT-Password [mschap] FAILED: No NT/LM-Password. Cannot perform authentication.
Since you've haven't supplied the full debug output (as is stated just about everywhere) we can't tell how you are looking up your users. Go back to wherever you defined your test user and make sure you've defined a clear text password.
participants (2)
-
John Dennis -
saeed1803