----- Original Nachricht ---- Von: Stefan Winter <stefan.winter@restena.lu> An: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Datum: 03.05.2006 11:59 Betreff: Re: ntlm_auth is not used by mschap

...

Now i try to authenticate the user roka: ---------------------------------------------------

Debian:/tmp# radtest roka Gerti1000 localhost 1645 testing123 Sending Access-Request of id 116 to 127.0.0.1:1812 User-Name = "roka" User-Password = "Gerti1000" NAS-IP-Address = Debian NAS-Port = 1645 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=116, length=20

You send a packet that does not contain any MS-CHAP attributes. Because of that, the server is not doing MS-CHAP:

...

modcall[authorize]: module "mschap" returns noop for request 0

As this line tells you.

Send a MS-CHAP request, and look what happens then.

Stefan

-- Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi Stefan, You say i do not send a MS-CHAP Request. Hmm ... Finally it should work with Windows-XP Supplicant: In my WindowsXP 802.1X Network-Configuration I can choose between "MD5Challenge" , or "secure EAP(PEAP)" or "Smartcart or other Certificate" What ist the right one? Or is mschap basically the wrong authentication method for my equipment? Robert Viel oder wenig? Schnell oder langsam? Unbegrenzt surfen + telefonieren ohne Zeit- und Volumenbegrenzung? DAS TOP ANGEBOT JETZT bei Arcor: günstig und schnell mit DSL - das All-Inclusive-Paket für clevere Doppel-Sparer, nur 44,85 € inkl. DSL- und ISDN-Grundgebühr! http://www.arcor.de/rd/emf-dsl-2