PEAP mschapv2 E= 691 R=0 code is correct?

엔트로링크(주) dhpark21 at naver.com
Fri Sep 25 13:49:18 CEST 2020


Hi.
 
At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped,
but, FR3.x is not popup. below is debug
--
Released connection (2)
Fri Sep 25 19:55:58 2020 : Debug: (6)       modsingle[post-auth]: returned from sql (rlm_sql)
Fri Sep 25 19:55:58 2020 : Debug: (6)       [sql] = ok
Fri Sep 25 19:55:58 2020 : Debug: (6)       if (reply:MS-CHAP-Error =~ /E=691 R=0/) {
Fri Sep 25 19:55:58 2020 : Debug: No matches
Fri Sep 25 19:55:58 2020 : Debug: (6)       if (reply:MS-CHAP-Error =~ /E=691 R=0/)  -> FALSE
Fri Sep 25 19:55:58 2020 : Debug: (6)       modsingle[post-auth]: calling attr_filter.access_reject (rlm_attr_filter)
Fri Sep 25 19:55:58 2020 : Debug: %{User-Name}
Fri Sep 25 19:55:58 2020 : Debug: Parsed xlat tree:
Fri Sep 25 19:55:58 2020 : Debug: attribute --> User-Name
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EXPAND %{User-Name}
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject:    --> user01
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Matched entry DEFAULT at line 1
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Cleartext-Password" allowed by 0 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=02fa5a91d12763de0ebb5702753e7402 V=3 M=Authentication rejected" allowed by MS-CHAP-Error =* ""
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=3ffb7931c560572bb7e802f970f89497 V=3 M=Authentication failed" allowed by MS-CHAP-Error =* ""
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EAP-Message = 0x04060004 allowed by EAP-Message =* 0x
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "EAP-Message" allowed by 1 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Message-Authenticator = 0x00000000000000000000000000000000 allowed by Message-Authenticator =* 0x
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Message-Authenticator" allowed by 1 rules, disallowed by 0 rules 
--
Thanks
 


More information about the Freeradius-Users mailing list