MS-CHAP Auth fail, password cache ?

Alan DeKok aland at
Mon Jul 11 14:22:39 CEST 2011

Bastien Semene wrote:
> I express myself very badly, sorry.
> The configuration I put in my first mail is the current configuration,
> running, after restart.
> The debug and commands output are from the current - reloaded -
> configuration.
> There's only 1 entry in the radcheck table, and it's current password is
> "blabla".

  There is nothing magic about the server.  If it authenticates the user
with the "wrong" password, it's because you didn't update the password.

> I don't understand how radius can still authenticate with the old password.
> An output of the users file and MySQL table is available in my first
> mail. I don't know where the old password can be still stored.

  You probably have two databases.  FreeRADIUS is using one, and you've
updated the other.

  Alan DeKok.

More information about the Freeradius-Users mailing list