help on rlm_mschap: FAILED: MS-CHAP2-Response is incorrect

Phil Mayers p.mayers at imperial.ac.uk
Wed Dec 14 11:42:40 CET 2005


Jie Yang wrote:
> Hi, All,
> When I tried to develop PEAP at client side, i found I am always rejected by
> the server. The following is the log. what might be wrong?

You almost certainly need to strip the "@domain" off the username before 
mschap sees it - the username is used in calculating the challenge response.

See the "realms" module, specifically you'll want the "suffix" instance 
in authorize, "spirentcom.com" as a LOCAL realm in proxy.conf and 
proxying turned on.



More information about the Freeradius-Users mailing list