RADIUS AUTHENTICATOR---need HELP using MSCHAP and NTPASSWORD
I use Squid and RADIUS. Squid use Squid_radius_authenticator to authenticate a client and write a log in which there is the username and the http request. THE PROBLEM IS: In the radcheck table i put a value: "AUTH-TYPE" and set "MS-CHAP" for the user. his password is stored in NT-HASH format. when the authenticator try to authenticate the user, this is the output "....... rad_check_password: Found Auth-Type MS-CHAP auth: type "MS-CHAP" Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 6 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: Found NT-Password rlm_mschap: No MS-CHAP-Challenge in the request modcall[authenticate]: module "mschap" returns reject for request 6 modcall: leaving group MS-CHAP (returns reject) for request 6 auth: Failed to validate the user. Login incorrect:[username/password]" can anybody help me? please.
This pretty much sums up the problem:
rlm_mschap: No MS-CHAP-Challenge in the request
This is not a valid MS-CHAP request. You might want to look at the actual attributes passed to see if this is really an MS-CHAP request. It will contain Microsoft VSAs containing a MS-CHAP-Challenge and a MS-CHAP-Response. ego seek wrote:
I use Squid and RADIUS.
Squid use Squid_radius_authenticator to authenticate a client and write a log in which there is the username and the http request.
THE PROBLEM IS: In the radcheck table i put a value: "AUTH-TYPE" and set "MS-CHAP" for the user. his password is stored in NT-HASH format. when the authenticator try to authenticate the user, this is the output
"....... rad_check_password: Found Auth-Type MS-CHAP auth: type "MS-CHAP" Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 6 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: Found NT-Password rlm_mschap: No MS-CHAP-Challenge in the request modcall[authenticate]: module "mschap" returns reject for request 6 modcall: leaving group MS-CHAP (returns reject) for request 6 auth: Failed to validate the user. Login incorrect:[username/password]"
can anybody help me? please.
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
ego seek -
Michael Lecuyer