mschap2 over peap, how to use cleartext password defined on the freeradius server instead of using Windows AD?

[Difan Zhao]

Greetings!

 

I did read the "mschap" module file and I did see that in order to use a
cleartext password, I need to set "MS-CHAP-Use-NTLM-Auth := No" however
I don't know where to set it.

 

I tried to set it in "hints" file like the following. I added it to the
beginning of the file and the rest is just default.

 

enseo_stb

        MS-CHAP-Use-NTLM-Auth := No

 

The "enseo_stb" is the username. I do see that it matched the line in
the preprocess in the debug however the authentication still failed. I
don't have this user account set in Windows AD. I do have it set in my
users file.

 

Enseo_stb   Cleartext-Password := "password"

 

Any advice?? Thank you!!

 

  

Difan Zhao

Network Engineer

difan.zhao at guest-tek.com

www.guest-tek.com <http://www.guest-tek.com/> 

Office: 403-509-1010 ext 3048

Cell: 403-689-7514

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100107/f21ca8ff/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 3785 bytes
Desc: image002.jpg
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100107/f21ca8ff/attachment.jpg>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: radiusd -X.txt
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100107/f21ca8ff/attachment.txt>