another CHAP issue

[Nick]

Hi Alan,

Spot on as usual.  Removed the NAS-IP-Address entry and auth was successful.

Entry 172 was the start of the below:-

DEFAULT Framed-Protocol == PPP
        Framed-Protocol = PPP,
        Framed-Compression = Van-Jacobson-TCP-IP,
        Tunnel-Type == L2TP,
        Tunnel-Medium-Type == IP,
        Service-Type = Framed-User,
        Tunnel-Password = blahblah,
        Tunnel-Server-Endpoint = 192.168.0.1,
        Tunnel-Client-Auth-ID = Tunnel-21CN,
        Fall-Through = Yes


Thanks again.

Nick

-----Original Message-----
From: freeradius-users-bounces+nick=njryce.net at lists.freeradius.org
[mailto:freeradius-users-bounces+nick=njryce.net at lists.freeradius.org] On
Behalf Of Alan DeKok
Sent: 16 August 2012 16:42
To: FreeRadius users mailing list
Subject: Re: another CHAP issue

Nick wrote:

> testuser at randomdomain.net.uk Cleartext-Password :="test123", 
> NAS-IP-Address == 1.1.1.1
...
> rad_recv: Access-Request packet from host 62.249.192.164 port 31625, 
> id=13, length=145
...
>         NAS-IP-Address = 62.249.255.146

  Do you see an issue there?

> [files] users: Matched entry DEFAULT at line 172

  And what's on line 172?

  Not the entry you added.

> There is a Cleartext-Password set so unsure why this error is 
> occurring.  Any help most appreciated.

  Because you added MORE checks (NAS-IP-Address) that caused it to fail.

  Delete those checks, and it will work.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html