FreeRadius2+daloRAIUS mschap problem: No Cleartext-Password configured

Denis Iskandarov d.iskandarov at
Fri Sep 10 12:04:53 CEST 2010

My setup:
CentOS 5.5 x32
daloRADIUS 0.9-8 SVN (0.9.-9)

used for 802.1x EAP-TLS and EAP-TTLS (maybe for peap in future as
well) with Ubiquiti and Mikrotik network equipment

setup works perfectly without sql with text conf files.
when creating user in sql getting next error:
(Output omitted)

Found Auth-Type = MSCHAP
+- entering group MS-CHAP {...}
[mschap] No Cleartext-Password configured.  Cannot create LM-Password.
[mschap] No Cleartext-Password configured.  Cannot create NT-Password.
[mschap] Told to do MS-CHAPv2 for ubnt123 with NT-Password
[mschap] FAILED: No NT/LM-Password.  Cannot perform authentication.
[mschap] FAILED: MS-CHAP2-Response is incorrect
++[mschap] returns reject
Failed to authenticate the user.
Login incorrect: [ubnt123] (from client ubnt port 0 via TLS tunnel)
} # server inner-tunnel
[ttls] Got tunneled reply code 3
        MS-CHAP-Error = "\223E=691 R=1"
[ttls] Got tunneled Access-Reject
[eap] Handler failed in EAP/ttls
[eap] Failed in EAP select
++[eap] returns invalid
Failed to authenticate the user.
Login incorrect: [ubnt123] (from client ubnt port 0 cli 00-15-6D-5A-4F-5E)
Using Post-Auth-Type Reject
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> ubnt123
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 4 for 1 seconds

I found some topics in regarding this same error in different setups
but nothing helped me me to solve this problem.
Please help.
Thanks in advance.

More information about the Freeradius-Users mailing list