Hello.Please help me.I try to setup FreeRadius (FreeBSD 7.2-RELEASE amd64)to setup as proxy.Windows clients can`t connect this default settings in pppoe connection (on tab security enabled all auth protocols) server send 691 error.If i disable all protocols except mschapv1 everything works fine without errors. Please tell me what I am doing wrong.All settings in the conf files by default, changed only proxy.conf and client.conf. I tried 2.1.10 ,2.1.9 versions. ----------------------------------------Auth Fail --------------------------------------------------------------------- rad_recv: Access-Request packet from host 127.0.0.1 port 61233, id=68, length=277 NAS-Identifier = "PPPoE.mk.loc" NAS-IP-Address = 172.20.192.4 Message-Authenticator = 0x33297e1e26330d6c0df04a4b015b446c Acct-Session-Id = "7056520-TA233-3766-144" NAS-Port = 144 NAS-Port-Type = Ethernet Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "0022687293f7" NAS-Port-Id = "vlan3766" Vendor-12341-Attr-12 = 0x54413233332d333736362d313434 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Client-Endpoint:0 = "00:22:68:72:93:f7" User-Name = "test-user@moco" MS-CHAP-Challenge = 0xbb1e68bfac6b679afbba56b6670fde86 MS-CHAP2-Response = 0x0100a945a3ba1dad2b9d2e95511c58f8464a0000000000000000aab387818928b6f430030d50fc68517c64c578458737b561 Mon Feb 7 10:28:40 2011 : Info: +- entering group authorize {...} Mon Feb 7 10:28:40 2011 : Info: ++[preprocess] returns ok Mon Feb 7 10:28:40 2011 : Info: ++[chap] returns noop Mon Feb 7 10:28:40 2011 : Info: [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' Mon Feb 7 10:28:40 2011 : Info: ++[mschap] returns ok Mon Feb 7 10:28:40 2011 : Info: ++[digest] returns noop Mon Feb 7 10:28:40 2011 : Info: [suffix] Looking up realm "moco" for User-Name = "test-user@moco" Mon Feb 7 10:28:40 2011 : Info: [suffix] Found realm "moco" Mon Feb 7 10:28:40 2011 : Info: [suffix] Adding Stripped-User-Name = "test-user" Mon Feb 7 10:28:40 2011 : Info: [suffix] Adding Realm = "moco" Mon Feb 7 10:28:40 2011 : Info: [suffix] Proxying request from user test-user to realm moco Mon Feb 7 10:28:40 2011 : Info: [suffix] Preparing to proxy authentication request to realm "moco" Mon Feb 7 10:28:40 2011 : Info: ++[suffix] returns updated Mon Feb 7 10:28:40 2011 : Info: [eap] No EAP-Message, not doing EAP Mon Feb 7 10:28:40 2011 : Info: ++[eap] returns noop Mon Feb 7 10:28:40 2011 : Info: [files] users: Matched entry DEFAULT at line 172 Mon Feb 7 10:28:40 2011 : Info: ++[files] returns ok Mon Feb 7 10:28:40 2011 : Info: ++[expiration] returns noop Mon Feb 7 10:28:40 2011 : Info: ++[logintime] returns noop Mon Feb 7 10:28:40 2011 : Info: ++[pap] returns noop Mon Feb 7 10:28:40 2011 : Info: WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 255 to 172.20.192.19 port 1812 NAS-Identifier = "PPPoE.mk.loc" NAS-IP-Address = 172.20.192.4 Message-Authenticator = 0x00000000000000000000000000000000 Acct-Session-Id = "7056520-TA233-3766-144" NAS-Port = 144 NAS-Port-Type = Ethernet Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "0022687293f7" NAS-Port-Id = "vlan3766" Vendor-12341-Attr-12 = 0x54413233332d333736362d313434 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Client-Endpoint:0 = "00:22:68:72:93:f7" User-Name = "test-user" MS-CHAP-Challenge = 0xbb1e68bfac6b679afbba56b6670fde86 MS-CHAP2-Response = 0x0100a945a3ba1dad2b9d2e95511c58f8464a0000000000000000aab387818928b6f430030d50fc68517c64c578458737b561 Proxy-State = 0x3638 Mon Feb 7 10:28:40 2011 : Info: Proxying request 65 to home server 172.20.192.19 port 1812 Sending Access-Request of id 255 to 172.20.192.19 port 1812 NAS-Identifier = "PPPoE.mk.loc" NAS-IP-Address = 172.20.192.4 Message-Authenticator = 0x00000000000000000000000000000000 Acct-Session-Id = "7056520-TA233-3766-144" NAS-Port = 144 NAS-Port-Type = Ethernet Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "0022687293f7" NAS-Port-Id = "vlan3766" Vendor-12341-Attr-12 = 0x54413233332d333736362d313434 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Client-Endpoint:0 = "00:22:68:72:93:f7" User-Name = "test-user" MS-CHAP-Challenge = 0xbb1e68bfac6b679afbba56b6670fde86 MS-CHAP2-Response = 0x0100a945a3ba1dad2b9d2e95511c58f8464a0000000000000000aab387818928b6f430030d50fc68517c64c578458737b561 Proxy-State = 0x3638 Mon Feb 7 10:28:40 2011 : Debug: Going to the next request Mon Feb 7 10:28:40 2011 : Debug: Waking up in 0.4 seconds. rad_recv: Access-Reject packet from host 172.20.192.19 port 1812, id=255, length=43 Reply-Message = "Authorization failed." Mon Feb 7 10:28:40 2011 : Info: +- entering group post-proxy {...} Mon Feb 7 10:28:40 2011 : Info: [eap] No pre-existing handler found Mon Feb 7 10:28:40 2011 : Info: ++[eap] returns noop Mon Feb 7 10:28:40 2011 : Auth: Login incorrect (Home Server says so): [test-user/<via Auth-Type = mschap>] (from client localhost port 144 cli 0022687293f7) Mon Feb 7 10:28:40 2011 : Info: Using Post-Auth-Type Reject Mon Feb 7 10:28:40 2011 : Info: +- entering group REJECT {...} Mon Feb 7 10:28:40 2011 : Info: [attr_filter.access_reject] expand: %{User-Name} -> test-user@moco Mon Feb 7 10:28:40 2011 : Debug: attr_filter: Matched entry DEFAULT at line 11 Mon Feb 7 10:28:40 2011 : Info: ++[attr_filter.access_reject] returns updated Mon Feb 7 10:28:40 2011 : Info: Delaying reject of request 65 for 1 seconds Mon Feb 7 10:28:40 2011 : Debug: Going to the next request Mon Feb 7 10:28:40 2011 : Debug: Waking up in 0.4 seconds. ---------------------------------------------------------------------------Auth OK---------------------------------------------------------------------------------------------- rad_recv: Access-Request packet from host 127.0.0.1 port 51279, id=215, length=269 NAS-Identifier = "PPPoE.mk.loc" NAS-IP-Address = 172.20.192.4 Message-Authenticator = 0x539b02bddfa871d7d243e10a9f9a5446 Acct-Session-Id = "7057178-TA233-3766-393" NAS-Port = 393 NAS-Port-Type = Ethernet Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "0022687293f7" NAS-Port-Id = "vlan3766" Vendor-12341-Attr-12 = 0x54413233332d333736362d333933 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Client-Endpoint:0 = "00:22:68:72:93:f7" User-Name = "test-user@moco" MS-CHAP-Challenge = 0xbb1e68f8719180f3 MS-CHAP-Response = 0x0101000000000000000000000000000000000000000000000000d31328621ef9a79e6c1967d3fe23b98a82f34c9603465d55 Mon Feb 7 10:39:38 2011 : Info: +- entering group authorize {...} Mon Feb 7 10:39:38 2011 : Info: ++[preprocess] returns ok Mon Feb 7 10:39:38 2011 : Info: ++[chap] returns noop Mon Feb 7 10:39:38 2011 : Info: [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' Mon Feb 7 10:39:38 2011 : Info: ++[mschap] returns ok Mon Feb 7 10:39:38 2011 : Info: ++[digest] returns noop Mon Feb 7 10:39:38 2011 : Info: [suffix] Looking up realm "moco" for User-Name = "test-user@moco" Mon Feb 7 10:39:38 2011 : Info: [suffix] Found realm "moco" Mon Feb 7 10:39:38 2011 : Info: [suffix] Adding Stripped-User-Name = "test-user" Mon Feb 7 10:39:38 2011 : Info: [suffix] Adding Realm = "moco" Mon Feb 7 10:39:38 2011 : Info: [suffix] Proxying request from user test-user to realm moco Mon Feb 7 10:39:38 2011 : Info: [suffix] Preparing to proxy authentication request to realm "moco" Mon Feb 7 10:39:38 2011 : Info: ++[suffix] returns updated Mon Feb 7 10:39:38 2011 : Info: [eap] No EAP-Message, not doing EAP Mon Feb 7 10:39:38 2011 : Info: ++[eap] returns noop Mon Feb 7 10:39:38 2011 : Info: [files] users: Matched entry DEFAULT at line 172 Mon Feb 7 10:39:38 2011 : Info: ++[files] returns ok Mon Feb 7 10:39:38 2011 : Info: ++[expiration] returns noop Mon Feb 7 10:39:38 2011 : Info: ++[logintime] returns noop Mon Feb 7 10:39:38 2011 : Info: ++[pap] returns noop Mon Feb 7 10:39:38 2011 : Info: WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 132 to 172.20.192.19 port 1812 NAS-Identifier = "PPPoE.mk.loc" NAS-IP-Address = 172.20.192.4 Message-Authenticator = 0x00000000000000000000000000000000 Acct-Session-Id = "7057178-TA233-3766-393" NAS-Port = 393 NAS-Port-Type = Ethernet Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "0022687293f7" NAS-Port-Id = "vlan3766" Vendor-12341-Attr-12 = 0x54413233332d333736362d333933 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Client-Endpoint:0 = "00:22:68:72:93:f7" User-Name = "test-user" MS-CHAP-Challenge = 0xbb1e68f8719180f3 MS-CHAP-Response = 0x0101000000000000000000000000000000000000000000000000d31328621ef9a79e6c1967d3fe23b98a82f34c9603465d55 Proxy-State = 0x323135 Mon Feb 7 10:39:38 2011 : Info: Proxying request 24 to home server 172.20.192.19 port 1812 Sending Access-Request of id 132 to 172.20.192.19 port 1812 NAS-Identifier = "PPPoE.mk.loc" NAS-IP-Address = 172.20.192.4 Message-Authenticator = 0x00000000000000000000000000000000 Acct-Session-Id = "7057178-TA233-3766-393" NAS-Port = 393 NAS-Port-Type = Ethernet Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "0022687293f7" NAS-Port-Id = "vlan3766" Vendor-12341-Attr-12 = 0x54413233332d333736362d333933 Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Client-Endpoint:0 = "00:22:68:72:93:f7" User-Name = "test-user" MS-CHAP-Challenge = 0xbb1e68f8719180f3 MS-CHAP-Response = 0x0101000000000000000000000000000000000000000000000000d31328621ef9a79e6c1967d3fe23b98a82f34c9603465d55 Proxy-State = 0x323135 Mon Feb 7 10:39:38 2011 : Debug: Going to the next request Mon Feb 7 10:39:38 2011 : Debug: Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 172.20.192.19 port 1812, id=132, length=703 Service-Type = Framed-User Framed-Protocol = PPP Session-Timeout = 864000 Acct-Interim-Interval = 180 MS-MPPE-Encryption-Policy = 0x00000001 MS-MPPE-Encryption-Types = 0x00000006 MS-CHAP-MPPE-Keys = 0x2e6b0d1ca7472bb173f893b5365eb36218b1a3efe287dd370000000000000000 Vendor-12341-Attr-6 = 0x38392e3233362e3139322e302f3138 Vendor-12341-Attr-6 = 0x38312e39352e3232342e302f3230 Vendor-12341-Attr-6 = 0x38392e3134362e36342e302f3138 Vendor-12341-Attr-6 = 0x38322e3231352e36342e302f3138 Vendor-12341-Attr-6 = 0x38332e36392e3132382e302f3139 Vendor-12341-Attr-6 = 0x38332e3232312e3136312e302f3234 Vendor-12341-Attr-6 = 0x38332e3232312e3136302e302f3139 Vendor-12341-Attr-6 = 0x3231372e32392e3131322e302f3230 Vendor-12341-Attr-6 = 0x38342e35342e36342e302f3138 Vendor-12341-Attr-6 = 0x38352e3131372e3232342e302f3139 Vendor-12341-Attr-6 = 0x38372e3233372e3233322e302f3231 Vendor-12341-Attr-6 = 0x39312e3138382e3132382e302f3139 Vendor-12341-Attr-6 = 0x39312e3139362e37362e302f3232 Vendor-12341-Attr-6 = 0x3231332e3230362e33322e302f3139 Vendor-12341-Attr-6 = 0x3231372e31322e38302e302f3230 Vendor-12341-Attr-6 = 0x3139352e3135382e302e302f3139 Vendor-12341-Attr-6 = 0x3139332e32372e3230362e302f3233 Vendor-12341-Attr-6 = 0x37372e3232302e3139322e302f3139 Vendor-12341-Attr-6 = 0x38302e38302e3230382e302f3230 Vendor-12341-Attr-6 = 0x3231332e3233302e36342e302f3138 Vendor-12341-Attr-6 = 0x39312e3230342e3233362e302f3232 Vendor-12341-Attr-6 = 0x36322e3230392e3132382e302f3230 Vendor-12341-Attr-7 = 0x696e23313d616c6c20726174652d6c696d697420313032343030302031323830303020313238303030 Vendor-12341-Attr-7 = 0x6f757423313d616c6c20726174652d6c696d697420313032343030302031323830303020313238303030 Mon Feb 7 10:39:38 2011 : Info: +- entering group post-proxy {...} Mon Feb 7 10:39:38 2011 : Info: [eap] No pre-existing handler found Mon Feb 7 10:39:38 2011 : Info: ++[eap] returns noop Mon Feb 7 10:39:38 2011 : Info: Found Auth-Type = MSCHAP Mon Feb 7 10:39:38 2011 : Info: Found Auth-Type = Accept Mon Feb 7 10:39:38 2011 : Error: Warning: Found 2 auth-types on request for user 'test-user' Mon Feb 7 10:39:38 2011 : Info: Auth-Type = Accept, accepting the user Mon Feb 7 10:39:38 2011 : Auth: Login OK: [test-user/<via Auth-Type = mschap>] (from client localhost port 393 cli 0022687293f7) Mon Feb 7 10:39:38 2011 : Info: +- entering group post-auth {...} Mon Feb 7 10:39:38 2011 : Info: ++[exec] returns noop Sending Access-Accept of id 215 to 127.0.0.1 port 51279 Service-Type = Framed-User Framed-Protocol = PPP Session-Timeout = 864000 Acct-Interim-Interval = 180 MS-MPPE-Encryption-Policy = 0x00000001 MS-MPPE-Encryption-Types = 0x00000006 MS-CHAP-MPPE-Keys = 0x2e6b0d1ca7472bb173f893b5365eb36218b1a3efe287dd370000000000000000 Vendor-12341-Attr-6 = 0x38392e3233362e3139322e302f3138 Vendor-12341-Attr-6 = 0x38312e39352e3232342e302f3230 Vendor-12341-Attr-6 = 0x38392e3134362e36342e302f3138 Vendor-12341-Attr-6 = 0x38322e3231352e36342e302f3138 Vendor-12341-Attr-6 = 0x38332e36392e3132382e302f3139 Vendor-12341-Attr-6 = 0x38332e3232312e3136312e302f3234 Vendor-12341-Attr-6 = 0x38332e3232312e3136302e302f3139 Vendor-12341-Attr-6 = 0x3231372e32392e3131322e302f3230 Vendor-12341-Attr-6 = 0x38342e35342e36342e302f3138 Vendor-12341-Attr-6 = 0x38352e3131372e3232342e302f3139 Vendor-12341-Attr-6 = 0x38372e3233372e3233322e302f3231 Vendor-12341-Attr-6 = 0x39312e3138382e3132382e302f3139 Vendor-12341-Attr-6 = 0x39312e3139362e37362e302f3232 Vendor-12341-Attr-6 = 0x3231332e3230362e33322e302f3139 Vendor-12341-Attr-6 = 0x3231372e31322e38302e302f3230 Vendor-12341-Attr-6 = 0x3139352e3135382e302e302f3139 Vendor-12341-Attr-6 = 0x3139332e32372e3230362e302f3233 Vendor-12341-Attr-6 = 0x37372e3232302e3139322e302f3139 Vendor-12341-Attr-6 = 0x38302e38302e3230382e302f3230 Vendor-12341-Attr-6 = 0x3231332e3233302e36342e302f3138 Vendor-12341-Attr-6 = 0x39312e3230342e3233362e302f3232 Vendor-12341-Attr-6 = 0x36322e3230392e3132382e302f3230 Vendor-12341-Attr-7 = 0x696e23313d616c6c20726174652d6c696d697420313032343030302031323830303020313238303030 Vendor-12341-Attr-7 = 0x6f757423313d616c6c20726174652d6c696d697420313032343030302031323830303020313238303030 Mon Feb 7 10:39:38 2011 : Info: Finished request 24. Mon Feb 7 10:39:38 2011 : Debug: Going to the next request