Almost there... Radiusclient not sending password with MSChapv2

tnt at kalik.net tnt at kalik.net
Tue Dec 8 00:31:44 CET 2009


> I almost have a working Radius setup...

It's working.

> Well almost, because when I try to setup a pptp tunnel with my Windows XP,
> I see the following om my radius server:
>
> Packet number 1 has just been sniffed
>         From:    127.0.0.1:54717
>         To:      127.0.0.1:1812
>         Type:    Access-Request
>         Service-Type = Framed-User
>         Framed-Protocol = PPP
>         User-Name = "wim"
>         MS-CHAP-Challenge = 0x75a4e7aeb06f3c93be685de0afae4cc2
>         MS-CHAP2-Response =
> 0x60007f150b2e344755f9e0462ded8d7d68520000000000000000cf323d8cd21faeb820272ccadd6b188a8ae287bd7481f1c4
>         Calling-Station-Id = "8.08"
>         NAS-IP-Address = XX.XX.XX.XX
>         NAS-Port = 0
> Packet number 2 has just been sniffed
>         From:    127.0.0.1:1812
>         To:      127.0.0.1:54717
>         Type:    Access-Accept
>         Service-Type = Framed-User
>         Framed-Protocol = PPP
>         Framed-IP-Address = 172.16.2.10
>         Framed-IP-Netmask = 255.255.255.0
>         MS-CHAP2-Success =
> 0x60533d45314438443736334142433330343132383837384533434639323534413541373639313346443535
>         MS-MPPE-Recv-Key =
> 0x97fc624e0e2ff930716882df647c7ec4fc8a2d9c946e54d2befdc26d5292aec3562a
>         MS-MPPE-Send-Key =
> 0x9ca67e3969c47454af91493d646e4cdf8fd93dcf3435868ffd42fb3c6c992fb5b989
>         MS-MPPE-Encryption-Policy = 0x00000002
>         MS-MPPE-Encryption-Types = 0x00000004
>

See. Access-Accept with MPPE keys. That all looks fine.

> My XP tells me that the username/password is invalid (Error 961). I
> suspect the password attibute to be empty..

There is no password attribute in mschap. Problem is with your NAS - for
some reason it is not creating the tunnel. Debug ppp on your NAS.

Ivan Kalik




More information about the Freeradius-Users mailing list