RE: EAP-PEAP + Windows 7 with SSO and Password change
Hi Alan, i'm sorry to bother you again. I compiled now the "GIT" version (it's the same as download version), and i got the same results. The FR is really 3.0.0. you can see that in the debug log. There is no differences in the results as before i did. So what's wrong ? I used also a cleaned config base (remove the old, and install the git config). But all the time the same: Exec-Program output: Must change password (0xc0000224) Exec-Program-Wait: plaintext: Must change password (0xc0000224) Exec-Program: returned: 1 (8) mschap : External script failed. (8) mschap : FAILED: MS-CHAP2-Response is incorrect (8) [mschap] = reject rlm_eap_mschapv2: No MS-CHAPv2-Success or MS-CHAP-Error was found. (8) eap : Handler failed in EAP/mschapv2 (8) eap : Failed in EAP select (8) [eap] = invalid (8) Failed to authenticate the user. } # server inner-tunnel (8) peap : Got tunneled reply code 3 MS-CHAP-Error = "\271E=691 R=1" EAP-Message = 0x04b90004 : : And on the Client side i get failed login, and no Password Change window ! regards, C.
well, i downloaded the zip file, because the server did not have git protocoll allowed per firewall.
*Your* firewall is blocking git.
You do realize that github allows HTTP replication, right?
There's a button labelled "HTTP" on:
https://github.com/alandekok/freeradius-server
Click it.
But i checked the git version against the zip downloaded version, and it >is the same version.
Then you need to fix that. Release 2.1.7 does NOT have the functionality you want. I really don't know how else to say that. It doesn't do MS-CHAP password changes.
Only the "master" branch has it. It should take you all of 5 minutes to go to github and download the master branch using HTTP.
Alan DeKok.
-- Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
CD DD wrote:
Hi Alan,
i'm sorry to bother you again.
I compiled now the "GIT" version (it's the same as download version), and i got the same results.
The FR is really 3.0.0. you can see that in the debug log. There is no differences in the results as before i did.
So what's wrong ? I used also a cleaned config base (remove the old, and install the git config). But all the time the same:
Did you read raddb/mods-available/mschap? It contains instructions for configuring password changes. You need to configure the "passchange" subsection with the right paths, and then allow retries, and give it a retry message. Alan DeKok.
participants (2)
-
Alan DeKok -
CD DD