MSCHAP vs MSCHAPv2 for VPN

Alan DeKok aland at deployingradius.com
Wed Oct 13 21:43:39 CEST 2010


freeradius at corwyn.net wrote:
> 
> 
> Using freeradius 2.1.8, I have a sonicwall firewall that authenticates
> VPN users against the freeradius server. The VPN clients are the native
> MSFT VPN client.
> 
> When the client is configured for L2TP, MS-CHAP, the client connects.
> When the client is configured for L2TP MSChapv2, the client fails to
> connect with an error "It was not possible to verify the identity of the
> server"
>...
> Wed Oct 13 14:50:57 2010 : Debug: Exec-Program output: NT_KEY:
> DDE9BB9EA12ED17BE5F358CB53EE6A8F

  Change the version of Samba that you're using.  3.5.5 contains a fix
which addresses this issue.

  Alan DeKok.



More information about the Freeradius-Users mailing list