problem connecting from windows xp to pptp server
Hi, I'm trying to connect to pptp server (with freeradius + mysql) with no success. when trying with radtest or NTradping from remote server it's work fine (the server return me Access-Acept) here is my radiusd dump : rad_recv: Access-Request packet from host 127.0.0.1:32787, id=39, length=69 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "danielmi" Calling-Station-Id = "192.168.8.244" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "danielmi", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 radius_xlat: 'danielmi' rlm_sql (sql): sql_set_user escaped user --> 'danielmi' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'danielmi' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'danielmi' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'danielmi' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'danielmi' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'danielmi' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'danielmi' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'danielmi' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'danielmi' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request Any idea why I keep getting failed message. thanks Danny :-) No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM
Yes. There is no password in your request: rad_recv: Access-Request packet from host 127.0.0.1:32787, id=39, length=69 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "danielmi" Calling-Station-Id = "192.168.8.244" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Check your connection properties and see if "Check for name, password etc." is ticked (Options tab). Ivan Kalik Kalik Informatika ISP
Hi, All the check options are checked. Maybe the PPTPD strip the CHAP-Password in some way ? Danny Milshtein -----Original Message----- From: freeradius-users-bounces+danny=videocells.com@lists.freeradius.org [mailto:freeradius-users-bounces+danny=videocells.com@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Sunday, May 27, 2007 9:05 PM To: FreeRadius users mailing list Subject: Re: problem connecting from windows xp to pptp server Yes. There is no password in your request: rad_recv: Access-Request packet from host 127.0.0.1:32787, id=39, length=69 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "danielmi" Calling-Station-Id = "192.168.8.244" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Check your connection properties and see if "Check for name, password etc." is ticked (Options tab). Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM
Yes. Then that radius client is broken. You will need to sort it out with the lot that made PPTP server. Post "Where's my password" question on their list. Ivan Kalik Kalik Informatika ISP Dana 28/5/2007, "Danny Milshtein" <danny@videocells.com> piše:
Hi,
All the check options are checked.
Maybe the PPTPD strip the CHAP-Password in some way ?
Danny Milshtein
-----Original Message----- From: freeradius-users-bounces+danny=videocells.com@lists.freeradius.org [mailto:freeradius-users-bounces+danny=videocells.com@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Sunday, May 27, 2007 9:05 PM To: FreeRadius users mailing list Subject: Re: problem connecting from windows xp to pptp server
Yes. There is no password in your request:
rad_recv: Access-Request packet from host 127.0.0.1:32787, id=39,
length=69
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "danielmi"
Calling-Station-Id = "192.168.8.244"
NAS-IP-Address = 127.0.0.1
NAS-Port = 0
Check your connection properties and see if "Check for name, password
etc." is ticked (Options tab).
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM
No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM
Please could you have a look at the following link: it can cope with an issue where the radiuclient library used by poptop isn't using the required radius dictionnary needed to do MS-CHAP authentication. See: http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg32239.h tml * You can get in this post 2 dictionary files for radiusclient (NOT for freeradius, that means they should be used in you pptp server, not your radius server). * create the 2 dictionary files in your /etc/radiusclient directory * Add the 2 following lines in your /etc/radiusclient/dictionary: INCLUDE /etc/radiusclient/dictionary.microsoft INCLUDE /etc/radiusclient/dictionary.merit Use INCLUDE and not $INCLUDE (If this fails, try $INCLUDE instead) HTH, Thibault -----Message d'origine----- De : freeradius-users-bounces+thibault.lemeur=supelec.fr@lists.freeradius.org [mailto:freeradius-users-bounces+thibault.lemeur=supelec.fr@lists.freeradius .org] De la part de Danny Milshtein Envoyé : lundi 28 mai 2007 08:59 À : 'FreeRadius users mailing list' Objet : RE: problem connecting from windows xp to pptp server Hi, All the check options are checked. Maybe the PPTPD strip the CHAP-Password in some way ? Danny Milshtein -----Original Message----- From: freeradius-users-bounces+danny=videocells.com@lists.freeradius.org [mailto:freeradius-users-bounces+danny=videocells.com@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Sunday, May 27, 2007 9:05 PM To: FreeRadius users mailing list Subject: Re: problem connecting from windows xp to pptp server Yes. There is no password in your request: rad_recv: Access-Request packet from host 127.0.0.1:32787, id=39, length=69 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "danielmi" Calling-Station-Id = "192.168.8.244" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Check your connection properties and see if "Check for name, password etc." is ticked (Options tab). Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM
I already have that 2 dictionary files. I don't understand why I can't see the CHAP-Password Parameter in the radius client request. is their any where that I can do sniffing or search for a log to see what happen between the pppt server to the radius client (there are in the same server) Great Thanks for all those people who response. Danny _____ From: freeradius-users-bounces+danny=videocells.com@lists.freeradius.org [mailto:freeradius-users-bounces+danny=videocells.com@lists.freeradius.org] On Behalf Of Thibault Le Meur Sent: Monday, May 28, 2007 1:59 PM To: 'FreeRadius users mailing list' Subject: RE : problem connecting from windows xp to pptp server Please could you have a look at the following link: it can cope with an issue where the radiuclient library used by poptop isn't using the required radius dictionnary needed to do MS-CHAP authentication. See: HYPERLINK "http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg32239. html"http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg32 239.html * You can get in this post 2 dictionary files for radiusclient (NOT for freeradius, that means they should be used in you pptp server, not your radius server). * create the 2 dictionary files in your /etc/radiusclient directory * Add the 2 following lines in your /etc/radiusclient/dictionary: INCLUDE /etc/radiusclient/dictionary.microsoft INCLUDE /etc/radiusclient/dictionary.merit Use INCLUDE and not $INCLUDE (If this fails, try $INCLUDE instead) HTH, Thibault -----Message d'origine----- De : freeradius-users-bounces+thibault.lemeur=supelec.fr@lists.freeradius.org [mailto:freeradius-users-bounces+thibault.lemeur=supelec.fr@lists.freeradius .org] De la part de Danny Milshtein Envoyé : lundi 28 mai 2007 08:59 À : 'FreeRadius users mailing list' Objet : RE: problem connecting from windows xp to pptp server Hi, All the check options are checked. Maybe the PPTPD strip the CHAP-Password in some way ? Danny Milshtein -----Original Message----- From: freeradius-users-bounces+danny=videocells.com@lists.freeradius.org [mailto:freeradius-users-bounces+danny=videocells.com@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Sunday, May 27, 2007 9:05 PM To: FreeRadius users mailing list Subject: Re: problem connecting from windows xp to pptp server Yes. There is no password in your request: rad_recv: Access-Request packet from host 127.0.0.1:32787, id=39, length=69 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "danielmi" Calling-Station-Id = "192.168.8.244" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Check your connection properties and see if "Check for name, password etc." is ticked (Options tab). Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/821 - Release Date: 5/27/2007 3:05 PM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/821 - Release Date: 5/27/2007 3:05 PM
participants (3)
-
Danny Milshtein -
Thibault Le Meur -
tnt＠kalik.co.yu