Freeradius doesn't detect EAP when authenticating against MySQL

Andrew Rowson freeradius at growse.com
Mon Sep 10 09:47:09 CEST 2007



On Mon, 10 Sep 2007 07:31:04 +0200, Alan DeKok <aland at deployingradius.com>
wrote:
> Andrew Rowson wrote:
>> Looking over it, it seems that a problem comes up with the MSCHAP bit:
>>
>>   rlm_mschap: No User-Password configured.  Cannot create LM-Password.
>>   rlm_mschap: No User-Password configured.  Cannot create NT-Password.
>>   rlm_mschap: Told to do MS-CHAPv2 for growse with NT-Password
>>   rlm_mschap: FAILED: No NT/LM-Password.  Cannot perform authentication.
>>   rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
>>   modcall[authenticate]: module "mschap" returns reject for request 14
>>
>> This appears to imply that there's no User-Password entry found anywhere
>> for the user in the database. This would be correct, as the attribute in
>> the radcheck table is set to Cleartext-Password. Anything other than
>> Cleartext-Password and freeradius doesn't attempt an auth-type of EAP,
>> but Local instead, going back to my original problem.
> 
>   What does the database contain?  Cleartext-Password == password,
> or Cleartext-Password := password ?
> 

The database contains Cleartext-Password == password. I've tried it with
:=, but if I remember correctly that fails as well, with the Auth-type
being set to local again. I'll see if I can get a log of that failure as
well, if it'd be helpful?

Andrew




More information about the Freeradius-Users mailing list