Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

Linux Threads linuxthreads at gmail.com
Thu Aug 29 14:29:18 CEST 2019


HI

after following
http://deployingradius.com/documents/configuration/active_directory.html

and running:

radtest -t mschap myNT_user myNTpass 192.168.1.250 0 client-secret

freeradius -XX

Thu Aug 29 13:29:50 2019 : Debug: (10)     modsingle[authorize]:
returned from pap (rlm_pap)
Thu Aug 29 13:29:50 2019 : Debug: (10)     [pap] = noop
Thu Aug 29 13:29:50 2019 : Debug: (10)   } # authorize = ok
Thu Aug 29 13:29:50 2019 : Debug: (10) Found Auth-Type = mschap
Thu Aug 29 13:29:50 2019 : Debug: (10) # Executing group from file
/etc/freeradius/3.0/sites-enabled/default
Thu Aug 29 13:29:50 2019 : Debug: (10)   authenticate {
Thu Aug 29 13:29:50 2019 : Debug: (10)     modsingle[authenticate]:
calling mschap (rlm_mschap)
Thu Aug 29 13:29:50 2019 : WARNING: (10) mschap: No Cleartext-Password
configured.  Cannot create NT-Password
Thu Aug 29 13:29:50 2019 : WARNING: (10) mschap: No Cleartext-Password
configured.  Cannot create LM-Password
Thu Aug 29 13:29:50 2019 : Debug: (10) mschap: Client is using
MS-CHAPv1 with NT-Password
Thu Aug 29 13:29:50 2019 : ERROR: (10) mschap: FAILED: No
NT/LM-Password.  Cannot perform authentication
Thu Aug 29 13:29:50 2019 : ERROR: (10) mschap: MS-CHAP2-Response is incorrect
Thu Aug 29 13:29:50 2019 : Debug: (10)     modsingle[authenticate]:
returned from mschap (rlm_mschap)
Thu Aug 29 13:29:50 2019 : Debug: (10)     [mschap] = reject
Thu Aug 29 13:29:50 2019 : Debug: (10)   } # authenticate = reject
Thu Aug 29 13:29:50 2019 : Debug: (10) Failed to authenticate the user
Thu Aug 29 13:29:50 2019 : Debug: (10) Using Post-Auth-Type Reject

I hate to ask but do you have any Ideas?

Regards


More information about the Freeradius-Users mailing list