Chap Authentication Error

[Daniel Niasoff]

Hi Alan

It seems you voted for the winning party. However the customer was adamant they had the correct password, we changes the password to something simple and the device immediately logged in successfully.

What confused me was the " Using clear text password "1234" for user f3207920 at surf4sure.net authentication" which I thought meant that the end device was using the given password. After capturing the traffic I realised that with CHAP there is no way freeradius knows what password the end device is using so it must mean what freeradius is using to generate the CHAP hash

Thanks for your response

Daniel
-----Original Message-----
From: freeradius-users-bounces+daniel=intelliworkspace.com at lists.freeradius.org [mailto:freeradius-users-bounces+daniel=intelliworkspace.com at lists.freeradius.org] On Behalf Of Alan DeKok
Sent: 14 September 2012 20:55
To: FreeRadius users mailing list
Subject: Re: Chap Authentication Error

Daniel Niasoff wrote:
> This is what I see in the logs
> 
> Fri Sep 14 17:22:37 2012 : Info: [chap] login attempt by "f3207920 at surf4sure.net" with CHAP password Fri Sep 14 17:22:37 2012 : Info: [chap] Using clear text password "1234" for user f3207920 at surf4sure.net authentication.
> Fri Sep 14 17:22:37 2012 : Info: [chap] Password check failed

  Well, that's clear.

> However if I try to repeat the test using radtest with -t chap it works fine.
> 
> Fri Sep 14 17:22:32 2012 : Info: [chap] login attempt by "f3207920 at surf4sure.net" with CHAP password Fri Sep 14 17:22:32 2012 : Info: [chap] Using clear text password "1234" for user f3207920 at surf4sure.net authentication.
> Fri Sep 14 17:22:32 2012 : Info: [chap] chap user f3207920 at surf4sure.net authenticated successfully
> 
> Now where do I go from here?

  Fix the client so it works.

  You can believe one of two things:

a) FreeRADIUS randomly does CHAP wrong

b) the client is broken

  My vote is (b).

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html