Anton Golubev <[EMAIL PROTECTED]> wrote: > (sorry my previous post looks bad encoded, repeating...)
It's still base64 encoded. I have no clue why some mail programs thing that base64 encoding text is a good idea. > I am trying to setup a working solution of PPTP + FreeRADIUS + MySQL. > Software involved: FreeRADIUS 0.9.3, poptop-1.1.4, pppd 2.4.2 (from > pptpclient.sf.org). Ok.. > My problem is that Windows XP box can't log in with MS-CHAP v2. I don't see why not. > FreeRadius with full debugging wrote this: > ... > rad_check_password: Found Auth-Type MS-CHAP > auth: type "MS-CHAP" > modcall: entering group Auth-Type for request 19 > rlm_mschap: doing MS-CHAPv2 with NT-Password > rlm_mschap: FAILED: MS-CHAP2-Response is incorrect That message would appear to be clear. > The most strange thing all about this is that when we change > require-mschap-v2 in options.pptp to require-chap or require-pap, > is works just fine. That says to me that you have both User-Password and NT-Password for the user in your SQL database, and that the NT-Password is wrong. Delete the NT-Password from the SQL database. The MS-CHAP module can use a clear-text password to do it's authentication. It will work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
