Connect problem

[Alan DeKok]

On Jul 1, 2016, at 5:02 AM, Henrik Kressner <kressner at synkro.dk> wrote:
> I get this response:
> ....
> (133) eap: Peer sent packet with method EAP MSCHAPv2 (26)
> (133) eap: Calling submodule eap_mschapv2 to process data
> (133) eap_mschapv2: # Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
> (133) eap_mschapv2:   Auth-Type MS-CHAP {
> (133) mschap: WARNING: No Cleartext-Password configured.  Cannot create NT-Password
> (133) mschap: WARNING: No Cleartext-Password configured.  Cannot create LM-Password
> (133) mschap: Creating challenge hash with username: bob
> (133) mschap: Client is using MS-CHAPv2
> (133) mschap: ERROR: FAILED: No NT/LM-Password.  Cannot perform authentication
> (133) mschap: ERROR: MS-CHAP2-Response is incorrect
> (133)     [mschap] = reject
> (133)   } # Auth-Type MS-CHAP = reject
> (133) eap: Sending EAP Failure (code 4) ID 24 length 4
> (133) eap: Freeing handler
> ....
> 
> 
> What does it mean?

  It means that  the server can't authenticate the user, because it has no idea what the *good* password is for the user.

  As the message says, set Cleartext-Password.  It will then work.

  Alan DeKok.