At 04:41 PM 8/21/2002 +0200, you wrote:
>>Do you use PAP authentication on your network with the test-user >>attempting CHAP authentication? Or is there some reason why CHAP would >>work for you and not your test user? Look for differences in DUN/PPP >>configurations between the two PC's (the one that can connect and the one >>that cannot). > >Yes i use PAP authentication, but the user have already set up a PAP >authentication instead CHAP. >But wth do the Client a CHAP authentication ? > >>>What's really crazy is, that after disabling the radius and enabling the >>>RAS he can't connect too. >>>Any idea what might be the cause of this strange behavior. >> >>If the RADIUS server is disabled...the user cannot authenticate. >no the user can be authenticate via the RAS too. I did not know you had such an option enabled. If the user can be authenticated via the RAS and still fails, yet you can connect via RAS authentication and RADIUS authentication (with the same user-name/pass I'm assuming) then there is probably some sort of DUN configuration problem. Go through the DUN settings. Win2K sets default settings that are usually NOT appropriate for most PPP connections. For example, with Max 6000's, the Win2K DUN default setting "Nogotiate multi-link for single link connections" causes problems. Such a setting may be producing the error 43...even though that is not the actual disconnect-cause. Have the user dial-up using a terminal window. A more helpful error may be sent from the RAS directly to the user. Also...sorry, but I don't understand the question, "But wth do the Client a CHAP authentication ?" Could you rephrase the question if DUN troubleshooting does not resolve the issue? Hope that helps, Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html