Right now I'm only using mschap and the users file to authenticate a user, but I'm getting: modcall: entering group Auth-Type for request 7 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for wifi with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect although on my users file I have: "wifi" Crypt-Password == "BcFvDSx8ydTSk" "wifi" lmPassword == "02D093CE93078E8FAAD3B435B51404EE" "wifi" ntPassword == "CAF13C4F321B608B27FD75D2549BA53C" can't I have my users file only with encrypted passwords? thanks -- **_____________________** * *André Ventura Lemos** **Software Engineer** **Critical Software, SA** **MSN:** **tux@tuxslare.org** **GSM:** **+351916401042** **TLF:** **+351239989100** DISCLAIMER: This message may contain confidential information or privileged material and is intended only for the individual(s) named. If you are not a named addressee and mistakenly received this message you should not copy or otherwise disseminate it: please delete this e-mail from your system and notify the sender immediately. E-mail transmissions are not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete or contain viruses. Therefore, the sender does not accept liability for any errors or omissions in the contents of this message that arise as a result of e-mail transmissions. Please request a hard copy version if verification is required. Critical Software.
=?ISO-8859-1?Q?Andr=E9_Lemos?= <alemos@criticalsoftware.com> wrote:
Right now I'm only using mschap and the users file to authenticate a user, but I'm getting: ...
Read the REST of the debug log. It will show you that the entries you added to the "users" file aren't being matched.
although on my users file I have:
"wifi" Crypt-Password == "BcFvDSx8ydTSk" "wifi" lmPassword == "02D093CE93078E8FAAD3B435B51404EE" "wifi" ntPassword == "CAF13C4F321B608B27FD75D2549BA53C"
There is no "lmPassword" attribute, or "ntPassword" attribute in FreeRADIUS. Even if there was, you're using "==", which the "man users" page says is a comparison. Since there is no "lmPassword" in the packet, the comparison will always fail, and that entry will never be matched. Again, debugging mode tells you that these entries are not being matched. That's why you should read ALL of the debug logs, not just thelast little bit.
can't I have my users file only with encrypted passwords?
Yes, but you have to use the correct attribute names, and use ":=" wifi NT-Password := 0xCAF13C4F321B608B27FD75D2549BA53C That will work. Alan DeKok.
André Lemos wrote:
Right now I'm only using mschap and the users file to authenticate a user, but I'm getting:
modcall: entering group Auth-Type for request 7 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for wifi with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
although on my users file I have:
"wifi" Crypt-Password == "BcFvDSx8ydTSk" "wifi" lmPassword == "02D093CE93078E8FAAD3B435B51404EE" "wifi" ntPassword == "CAF13C4F321B608B27FD75D2549BA53C"
can't I have my users file only with encrypted passwords?
Wrong syntax. You want: wifi Crypt-Password := "blah", NT-Password := "foo" Note that the := operator is used to set, and all the configure items are on the same line.
thanks
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
André Lemos -
Phil Mayers