(5) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject

[jaseywang]

Hi aland
I finally find the cause, its due to the incorrect dictionary.microsoft
config file, the pptp debug log give me some hint
Mar 27 12:09:57 iZ2597ft3dqZ pppd[26789]: rc_avpair_new: unknown attribute
11
Mar 27 12:09:57 iZ2597ft3dqZ pppd[26789]: rc_avpair_new: unknown attribute
25
Mar 27 12:09:58 iZ2597ft3dqZ pppd[26789]: Peer wyx1 failed CHAP
authentication


Thanks for your help!

On Mon, Mar 27, 2017 at 2:47 AM, Alan DeKok <aland at deployingradius.com>
wrote:

> On Mar 26, 2017, at 1:08 PM, jaseywang <jaseywang at gmail.com> wrote:
> > I use daloradius to add a new user wyx1(cleartext-password), and it
> passed
> > "test user connectivity" test, below is the daloradius/radtest and
> radiusd
> > -X output:
>
>   Note that the server receives a User-Password attribute.
>
> > But when  I use the same account to connect the pptp server, it
> > says Authentication failed:
>
>   Because it doesn't receive a User-Password attribute.
>
> > And the responding pptp log:
>
> ...
>
> > Mar 27 00:56:07 iZ2597ft3dqZ pppd[23203]: Peer wyx1 failed CHAP
> > authentication
>
>   Nope.  It never sent a CHAP-Password request.
>
>   Fix PPTP to send User-Password or CHAP-Password.
>
> > config file:
> >
> > # cat /etc/raddb/clients.conf:
>
>   We don't nee to see that.
>
>   PLEASE follow the instructions in the FAQ: post "radiusd -X'.  We don't
> need to see any configuration files.
>
> > # cat /usr/share/radiusclient-ng/dictionary
> > # grep -v "#" dictionary  | grep -v ^$
>
>   And don't post that.  We already have it.  It's not helpful.
>
>   What does help is reading the debug output.  If you had compared the two
> packets, you would see that PPTP doesn't send User-Password, or
> CHAP-Password.  And from the "radiusd -X" output, the server is then unable
> to authenticate the user... because there's no password.
>
>   Fix PPTP.  No amount of poking FreeRADIUS will solve the problem.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html