Failing to authenticate using FreeRadius(in OpenBSD) + XP as a client +Linksys AP (WRT54v2.2) using peap
Hi, This is with reference to the above mentioned subject, we are trying to authenticate client in PEAP-MSCHAPv2 configuration. For which we are getting the following error: modsingle[authenticate]: calling mschap (rlm_mschap) for request 6 rlm_mschap: No Cleartext-Password configured. Cannot create LM-Password. rlm_mschap: No Cleartext-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for test100 with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modsingle[authenticate]: returned from mschap (rlm_mschap) for request 6 ++[mschap] returns reject rlm_eap: Freeing handler modsingle[authenticate]: returned from eap (rlm_eap) for request 6 ++[eap] returns reject auth: Failed to validate the user. PEAP: Tunneled authentication was rejected. rlm_eap_peap: FAILURE modsingle[authenticate]: returned from eap (rlm_eap) for request 6 ++[eap] returns handled rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Had sent TLV failure. User was rejected earlier in this session. The version of FreeRadius is 2.0.5. Please help me out to solve the issue. regards, Venkat We are also attaching the total log and the clients.conf, eap.conf and radiusd.conf. and the log file as .rar file.
Venkata LK Mula wrote:
modsingle[authenticate]: calling mschap (rlm_mschap) for request 6 rlm_mschap: No Cleartext-Password configured. Cannot create LM-Password. rlm_mschap: No Cleartext-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for test100 with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modsingle[authenticate]: returned from mschap (rlm_mschap) for request 6 ++[mschap] returns reject modsingle[authenticate]: returned from eap (rlm_eap) for request 6 ++[eap] returns reject auth: Failed to validate the user.
It seems that all is working OK, except that you had not defining any valid source for the user password. How are you planning to authenticate users ? (file ? pam ? ldap ? samba ? other ?) Could you post your "inner-tunnel" configuration file ?
What is in this entry: users: Matched entry test100 at line 172 Ivan Kalik Kalik Informatika ISP Dana 15/8/2008, "Venkata LK Mula" <vlkmula@saitechnology.com> piše:
Hi,
This is with reference to the above mentioned subject, we are trying to authenticate client in PEAP-MSCHAPv2 configuration.
For which we are getting the following error:
modsingle[authenticate]: calling mschap (rlm_mschap) for request 6 rlm_mschap: No Cleartext-Password configured. Cannot create LM-Password. rlm_mschap: No Cleartext-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for test100 with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modsingle[authenticate]: returned from mschap (rlm_mschap) for request 6 ++[mschap] returns reject rlm_eap: Freeing handler modsingle[authenticate]: returned from eap (rlm_eap) for request 6 ++[eap] returns reject auth: Failed to validate the user. PEAP: Tunneled authentication was rejected. rlm_eap_peap: FAILURE modsingle[authenticate]: returned from eap (rlm_eap) for request 6 ++[eap] returns handled
rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Had sent TLV failure. User was rejected earlier in this session.
The version of FreeRadius is 2.0.5.
Please help me out to solve the issue.
regards, Venkat
We are also attaching the total log and the clients.conf, eap.conf and radiusd.conf. and the log file as .rar file.
participants (3)
-
Ivan Kalik -
Maurizio Cimaschi -
Venkata LK Mula