Dear Alan, Please find attached debug logs. Following is the error as per the logs. What can be issue please? [mschap] Client is using MS-CHAPv2 for test.fac1, we need NT-Password [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] = reject +} # group MS-CHAP = reject [eap] Freeing handler ++[eap] = reject +} # group authenticate = reject Failed to authenticate the user. Login incorrect: [test.fac1/<via Auth-Type = EAP>] (from client iitap port 0 cli D4-63-C6-9E-33-BD via TLS tunnel) Using Post-Auth-Type Reject On Fri, Mar 22, 2019 at 4:27 PM Alan DeKok <aland@deployingradius.com> wrote:

On Mar 22, 2019, at 1:21 AM, prasad karulkar <prasad@iitdh.ac.in> wrote:

...

I have configured FreeRadius server for my cisco wireless authentication through LDAP. I am facing one issue. When a user setting his password which has $ sign the user cannot able to access wireless.

e.g. : 1. If user's password is : Pass123$ then it does connects to wireless 2. If user's password is : Pass$123 then it does not connect to wireless 3. If we put $ sign any where in between the password user cant able to connect to wireless.

I see from the aaa debugs that the Radius server sent Access-Reject, as you see below:

*radiusTransportThread: Mar 20 10:48:02.130: 3c:f8:62:7e:fd:1a Access-Reject received from RADIUS server 10.250.200.11 (qid:10) with port:1812, pktId:167 for mobile 3c:f8:62:7e:fd:1a receiveId = 6

If only FreeRADIUS had debug output you could read.

Alan DeKok.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html