MSCHAPV2 authenticate including the suffix

Alan DeKok aland at deployingradius.com
Tue Jun 10 14:37:00 CEST 2014


Dean Goldhill wrote:
> When using just MSCHAPV2 (CHAP messages are NOT encapsulated inside the EAP message) - This does not work.
> 
> But, the same thing as before:
> If the username does not have a suffix (user instead of user at domain) both in the SQL database and on the supplicant, then it also works with just MSCHAPV2 (CHAP messages are NOT encapsulated inside the EAP message).
> As soon as I try to authenticate a user that has a suffix, they get rejected.
>
> Can anyone suggest something to try?

  The full debug log would help.

  Alan DeKok.


More information about the Freeradius-Users mailing list