CHAP auth and Cleartext-Password
Dagnis Zemturis
Dagnis.Zemturis at cs.rtu.lv
Fri Sep 19 12:43:38 CEST 2008
Hello!
I have problems with CHAP and Cleartext-Password.
I'm running freeradius.net v.2.1 on SUSE 10 server.
I've configured following user in /raddb/users at the end of text file:
=====================================================================================
# # Last default: shell on the local terminal server.
# #
# DEFAULT
# Service-Type = Administrative-User
#=======================my users========================
0014853077be Cleartext-Password := "0014853077be"
#00148518fe47 User-Password == "00148518fe47"
#=======================My users========================
# On no match, the user is denied access.
"users" 218L, 6786C
=====================================================================================
When I'm trying to make mac-auth from the HP switch (running radiusd in debug mode), I recieve following error:
[chap] Cleartext-Password is required for authentication
Here is part of debug info:
=====================================================================================
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
...................................
Calling-Station-Id = "00-14-85-30-77-be"
Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
CHAP-Password = 0x1f08e1d048be8f22c9435f00a4a0095cb6
Message-Authenticator = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Found Auth-Type = CHAP
+- entering group CHAP {...}
[chap] login attempt by "0014853077be" with CHAP password
[chap] Cleartext-Password is required for authentication
++[chap] returns invalid
Failed to authenticate the user.
Using Post-Auth-Type Reject
+- entering group REJECT {...}
expand: %{User-Name} -> 0014853077be
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
=====================================================================================
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080919/02c4b27e/attachment.html>
More information about the Freeradius-Users
mailing list