MS-CHAP2-Response is incorrect with Freeradius 2.1.12

François Lacombe fl.infosreseaux at gmail.com
Sun Aug 30 22:57:22 CEST 2015


Thank you Alan for this answer

2015-08-29 15:22 GMT+02:00 Alan DeKok <aland at deployingradius.com>:
>
>   It means that the passwords don't match.

It's difficult to believe it : the password is "abc" for this test...
and I'm pretty sure they match.

Is there a way to test eap-maschapv2 method in local instead of using
the NAS currently used ?

>
>> It seems this line appears when NT or LM-Password are missing in the
>> LDAP, but here Freeradius find them successfully earlier.
>
>   No, the message does NOT appear when the NT-Password is missing.

I don't understand : someone here
(http://lists.freeradius.org/pipermail/freeradius-users/2010-March/045323.html)
is reporting a log like that :
[mschap] Told to do MS-CHAPv2 for bernard with NT-Password
[mschap] FAILED: No NT/LM-Password.  Cannot perform authentication.
[mschap] FAILED: MS-CHAP2-Response is incorrect

Thanks in advance


François

--
François Lacombe
@InfosReseaux



More information about the Freeradius-Users mailing list