RADIUS AUTHENTICATOR---need HELP using MSCHAP and NTPASSWORD

Michael Lecuyer mjl at theorem.com
Mon Oct 30 14:25:43 CET 2006


This pretty much sums up the problem:

 >   rlm_mschap: No MS-CHAP-Challenge in the request

This is not a valid MS-CHAP request. You might want to look at the 
actual attributes passed to see if this is really an MS-CHAP request. It 
will contain Microsoft VSAs containing a MS-CHAP-Challenge and a 
MS-CHAP-Response.

ego seek wrote:
> I use Squid and RADIUS.
> 
> Squid use Squid_radius_authenticator to authenticate a client and write 
> a log in which there is the username and the http request.
> 
> THE PROBLEM IS:
> In the radcheck table i put a value: "AUTH-TYPE" and set "MS-CHAP" for 
> the user. his password is stored in NT-HASH format.
> when the authenticator try to authenticate the user, this is the output
> 
> 
> ".......
> rad_check_password:  Found Auth-Type MS-CHAP
> auth: type "MS-CHAP"
>   Processing the authenticate section of radiusd.conf
> modcall: entering group MS-CHAP for request 6
>   rlm_mschap: No User-Password configured.  Cannot create LM-Password.
>   rlm_mschap: Found NT-Password
>   rlm_mschap: No MS-CHAP-Challenge in the request
>   modcall[authenticate]: module "mschap" returns reject for request 6
> modcall: leaving group MS-CHAP (returns reject) for request 6
> auth: Failed to validate the user.
> Login incorrect:[username/password]"
> 
> 
> can anybody help me?
> please.
> 
> 
> 
> ------------------------------------------------------------------------
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list