Hi.

I've been looking around and I can't seem to find a solution to my problem. My problem is that when I try to connect to a dot1x-network using EAP/PEAP on a win-xp-client, I can't use a users-file with encrypted passwords. I've tried to use the NT-Password attribute and smbencrypt, but the radius-server reports:

modcall: entering group authenticate for request 6
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/mschapv2
  rlm_eap: processing type mschapv2
  Processing the authenticate section of radiusd.conf
modcall: entering group Auth-Type for request 6
  rlm_mschap: No User-Password configured.  Cannot create LM-Password.
  rlm_mschap: No User-Password configured.  Cannot create NT-Password.
  rlm_mschap: Told to do MS-CHAPv2 for stokke with NT-Password
  rlm_mschap: FAILED: No NT/LM-Password.  Cannot perform authentication.
  rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
  modcall[authenticate]: module "mschap" returns reject for request 6

My users file entry looks like this:

myuser NT-Password == "C275AA106060E0D793DD673EC6620090"
myuser2 User-Password == "cleartextpw"

myuser2 works ok, but not myuser.

Surely hope someone can help me out here.

regards
Vidar Stokke

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to