Using Cleartext-Password with MS-CHAP-Use-NTLM-Auth := No

Alan DeKok aland at
Mon Feb 3 02:48:11 CET 2020

On Feb 2, 2020, at 7:53 PM, Richard Green < at> wrote:
> Thank you, using the files mod sets the password nicely, however the MS-CHAP2-Response is reported to be incorrect, sorry I could not find any more detailed docs to help me use the module's inbuilt functionality.
> (0)   } # authorize = ok
> (0) Found Auth-Type = mschap
> (0) # Executing group from file /etc/raddb/sites-enabled/default
> (0)   Auth-Type mschap {
> (0) multiotpmschap: Found Cleartext-Password, hashing to create NT-Password
> (0) multiotpmschap: Found Cleartext-Password, hashing to create LM-Password
> (0) multiotpmschap: Client is using MS-CHAPv1 with NT-Password
> (0) multiotpmschap: ERROR: MS-CHAP2-Response is incorrect

  The password entered by the client is incorrect.  i.e. it doesn't match what's on the server.

  There really aren't any other choices.

  Set the password to something simple, like "hello", and retest.

  Alan DeKok.

More information about the Freeradius-Users mailing list