Strange problem regarding PPTP and FreeRADIUS
Hello All I have configured PopTop server to work with FreeRADIUS. pptpd is configured to use mschap-v2 and mppe-128 and I have enabled the corresponding module in FreeRADIUS. When I turn on the debugging mode of FreeRADIUS, I get the following: rad_recv: Access-Request packet from host 192.168.1.15 port 55483, id=227, length=153 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "\000ila" MS-CHAP-Challenge = 0x78b650db2a6af8bc8bc3435c7a385905 MS-CHAP2-Response = 0x6e009982bf378318ac706da61a063b70682d0000000000000000e3dbbe517ba9dc7a18dfe5660208bdc1f370b5d7836516f8 NAS-IP-Address = 0x0f01a8c0e85adab7e41be2bf081ce2bfb005dab7e41be2bf32 NAS-Port = 0 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' ++[mschap] returns ok [suffix] No '@' in User-Name = "", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound [files] users: Matched entry DEFAULT at line 172 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = MSCHAP +- entering group MS-CHAP {...} [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Told to do MS-CHAPv2 for with NT-Password [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject Please note those two highlighted lines, the User-Name is "\000ila" while what I have used as the username is "ali". Also, NAS-IP-Address is somehow encrypted. I searched a lot, but I could not find any similar problem. Any ideas? Warm Regards Ali Majdzadeh Kohbanani
Might this be a PopTop issue? What platform are you using?
Please note those two highlighted lines, the User-Name is "\000ila" while what I have used as the username is "ali". Also, NAS-IP-Address is somehow >encrypted. I searched a lot, but I could not find any similar problem. Any ideas?
Regards, E.S.
Ali Majdzadeh wrote:
Hello All I have configured PopTop server to work with FreeRADIUS. pptpd is configured to use mschap-v2 and mppe-128 and I have enabled the corresponding module in FreeRADIUS. When I turn on the debugging mode of FreeRADIUS, I get the following:
rad_recv: Access-Request packet from host 192.168.1.15 port 55483, id=227, length=153 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "\000ila"
That's wrong.
MS-CHAP-Challenge = 0x78b650db2a6af8bc8bc3435c7a385905 MS-CHAP2-Response = 0x6e009982bf378318ac706da61a063b70682d0000000000000000e3dbbe517ba9dc7a18dfe5660208bdc1f370b5d7836516f8 NAS-IP-Address = 0x0f01a8c0e85adab7e41be2bf081ce2bfb005dab7e41be2bf32
That's *very* wrong.
Please note those two highlighted lines, the User-Name is "\000ila" while what I have used as the username is "ali". Also, NAS-IP-Address is somehow encrypted. I searched a lot, but I could not find any similar problem. Any ideas?
Whoever implemented the RADIUS client did it wrong. Very, very, wrong. Alan DeKok.
Alan Hi Thanks for your response. I was using radiusclient and I replaced it by the latest version from FreeRADIUS. Fortunately, the problem solved but I could not manage to solve the following issue which I found in pptpd's logs: /etc/radiusclient/radiusclient.conf: line 16: unrecognized keyword: radius_deadtime I think it is related to radius.so plugin which pppd uses. Does this mean that radius.so and radiusclient are not compatible? Warm Regards Ali Majdzadeh Kohbanani 2010/9/12 Alan DeKok <aland@deployingradius.com>
Ali Majdzadeh wrote:
Hello All I have configured PopTop server to work with FreeRADIUS. pptpd is configured to use mschap-v2 and mppe-128 and I have enabled the corresponding module in FreeRADIUS. When I turn on the debugging mode of FreeRADIUS, I get the following:
rad_recv: Access-Request packet from host 192.168.1.15 port 55483, id=227, length=153 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "\000ila"
That's wrong.
MS-CHAP-Challenge = 0x78b650db2a6af8bc8bc3435c7a385905 MS-CHAP2-Response =
0x6e009982bf378318ac706da61a063b70682d0000000000000000e3dbbe517ba9dc7a18dfe5660208bdc1f370b5d7836516f8
NAS-IP-Address =
0x0f01a8c0e85adab7e41be2bf081ce2bfb005dab7e41be2bf32
That's *very* wrong.
Please note those two highlighted lines, the User-Name is "\000ila" while what I have used as the username is "ali". Also, NAS-IP-Address is somehow encrypted. I searched a lot, but I could not find any similar problem. Any ideas?
Whoever implemented the RADIUS client did it wrong. Very, very, wrong.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Ali Majdzadeh -
Edvin Seferovic | Kolpinghaus St.Pölten