Strange Problem with chap.

[tnt at kalik.net]

>>>I am using chilli-coova as hotspot and making its authentication via
>>>freeradius.
>>>I dont know if you have any experience with this software but, It has 2
>>>kind of login pages. One is a cgi page with clean password, other is a
>>>java script making chap authentication.
>>>
>>>here is the problem.
>>>On freeradius i am using rlm_perl authentication for my users.
>>>When i use cgi page or radtest tool and send clean password, everything
>>>works flawless...
>>>But if i decide to use chap somthing strange happens..
>>>If i type correct user/pass freeradus denies it.. But it i type the
>>>password wrong, freeradius accepts it..
>>>
>>
>> No. If you type correct user/pass your perl script rejects it (sub
>> authorize). But if you type the password wrong your perl script accepts
>> it.
>>
>> Ivan Kalik
>> Kalik Informatika ISP
>>
>So ? Couldnt get it..Sorry..
>
>Does freeradius not accept rlm_perl type authentication when it gets a
>chap-type auth request? Even if i didnt add it to the virtualserver
>config.

Freeradius is working fine. Your perl script isn't.

>Is there a solution except changing my clients auth type from chap to
>clear-text?
>

Fix the script. If you don't know how to authenticate chap in perl - then
don't do it. Enable chap in authorize and authenticate and pass the
cleartext password to freeradius.

Ivan Kalik
Kalik Informatika ISP