Eric Van Tol wrote:

Hi all, I've got a really frustrating problem with FreeRADIUS trying to proxy to a Microsoft IAS. I'm using FR 1.0.1 (I know, it's old). The problem is that I have proxying configured, but I keep getting Access-Reject back from the IAS. The IAS says that I used an unknown username or password, but I know that the username and password is correct. I know this because I have a test FR box with the same config and same version (1.0.1) that works fine.

The shared secret is wrong.

I assume that the User-Password is not being passed on properly, but I can't imagine why. I looked into the PAP authentication config and both the working test box and the non-working production box are configured to use 'crypt'. Can anyone point me in the right direction?

Huh? The proxy configuration of "crypt" has *nothing* to do with this. Alan DeKok.

I've got a really frustrating problem with FreeRADIUS trying to proxy to a Microsoft IAS. I'm using FR 1.0.1 (I know, it's old). The problem is that I have proxying configured, but I keep getting Access-Reject back from the IAS. The IAS says that I used an unknown username or password, but I know that the username and password is correct. I know this because I have a test FR box with the same config and same version (1.0.1) that works fine.

I assume that the User-Password is not being passed on properly, but I can't imagine why. I looked into the PAP authentication config and both the working test box and the non-working production box are configured to use 'crypt'. Can anyone point me in the right direction?

You can actually make sense of IAS logs: http://technet.microsoft.com/en-us/library/cc778268.aspx Ivan Kalik Kalik Informatika ISP