Problems wpa2-tls eap mschapv2 ldap

[Roberto Ortega Ramiro]

Hi again, i have found this response

http://lists.freeradius.org/pipermail/freeradius-users/2008-November/033229.html

Tomorrow i will try with Authorize section.

Thank you.


2013/6/3 Roberto Ortega Ramiro <roberto.ortega at esj.es>

> Hi, i see this problem
>
>
> # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
> +- entering group MS-CHAP {...}
> [mschap] No Cleartext-Password configured.  Cannot create LM-Password.
> [mschap] No Cleartext-Password configured.  Cannot create NT-Password.
> [mschap] Creating challenge hash with username: clemente.blanch
> [mschap] Told to do MS-CHAPv2 for clemente.blanch with NT-Password
> [mschap] FAILED: No NT/LM-Password.  Cannot perform authentication.
> [mschap] FAILED: MS-CHAP2-Response is incorrect
> ++[mschap] returns reject
> Failed to authenticate the user.
> } # server inner-tunnel
> [ttls] Got tunneled reply code 3
> MS-CHAP-Error = "RE=691 R=1"
> [ttls] Got tunneled Access-Reject
> [eap] Handler failed in EAP/ttls
>
>
> what must i change in /inner-tunnel file for authentification over ldap?
>
> I have to uncomment the ldap in every sections?
> authorize
> authenticate
> post-auth
>
> I'm not at work now i will probe tomorrow as soon as i arrive.
>
> Thank you.
>
>
>
>
> 2013/6/3 Alan DeKok <aland at deployingradius.com>
>
>> Roberto Ortega Ramiro wrote:
>> > Hello, here request 46, i don`t know where is the problem.
>> >
>> > Is it possible the problem were on the access point?
>>
>>   No.
>>
>>   If you read the debug output, the problem should be clear.
>>
>>   If it's not clear, you haven't read the debug output.
>>
>>   Alan DeKok.
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>
>
> --
> --
> Un saludo.
> ____________________
>
> Roberto Ortega
> Profesor de Informática.
> http://www.proyectoret.es
>
> Escuelas San José Valencia
> Avd.Cortes Valencianas nº1
> 46015 Valencia
> R4600489A
> Tf:963499011 ext. 262
> Fax:963488835
> http://www.escuelassj.com
>
> No imprimas este correo si no es necesario. Protejamos el medio ambiente.
>



-- 
-- 
Un saludo.
____________________

Roberto Ortega
Profesor de Informática.
http://www.proyectoret.es

Escuelas San José Valencia
Avd.Cortes Valencianas nº1
46015 Valencia
R4600489A
Tf:963499011 ext. 262
Fax:963488835
http://www.escuelassj.com

No imprimas este correo si no es necesario. Protejamos el medio ambiente.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130603/c3b9b985/attachment-0001.html>