MSCHAP vs MSCHAPv2 for VPN

[Alan DeKok]

freeradius at corwyn.net wrote:
> 
> 
> Using freeradius 2.1.8, I have a sonicwall firewall that authenticates
> VPN users against the freeradius server. The VPN clients are the native
> MSFT VPN client.
> 
> When the client is configured for L2TP, MS-CHAP, the client connects.
> When the client is configured for L2TP MSChapv2, the client fails to
> connect with an error "It was not possible to verify the identity of the
> server"
>...
> Wed Oct 13 14:50:57 2010 : Debug: Exec-Program output: NT_KEY:
> DDE9BB9EA12ED17BE5F358CB53EE6A8F

  Change the version of Samba that you're using.  3.5.5 contains a fix
which addresses this issue.

  Alan DeKok.