Hello,

you already got this reply earlier, but here goes...

> this is the logfile output after testing with radexample:
>
> rad_recv: Access-Request packet from host 127.0.0.1:1025, id=40, length=66
>         User-Name = "testuser"
>         User-Password = "123456"
>         Service-Type = Authenticate-Only
>         NAS-IP-Address = 127.0.0.1
>         NAS-Port = 0

This is a "good" Access-Request packet. It contains a User-Name and a 
User-Password. That way a RADIUS server can check if the user is valid, i.e. 
he compares the User-Password attribute for that user with the password he 
has stored internally. The outcome of this is a binary decision: either the 
user entered the correct password and may access the network or he entered a 
wrong one and may not.

> and this is the output after trying to connect via pptpd with winxp prof.
> Ready to process requests.
> rad_recv: Access-Request packet from host 127.0.0.1:1025, id=41, length=54
>         Service-Type = Framed-User
>         Framed-Protocol = PPP
>         User-Name = "testuser"
>         NAS-IP-Address = 66.150.161.140
>         NAS-Port = 0

This is a "bad" Access-Request. _Please_ note that this packet does not 
contain the user's password; the User-Password attribute is just missing. 
Because of that, the server cannot determine whether this user may enter the 
network or not. There is absolutely nothing you can do about this _on the 
RADIUS server side_ (well, maybe except admitting blindly everybody without 
checking passwords). You will have to fix the pptpd so that it sends the 
User-Password to the RADIUS server so that the server has a chance of 
verifying the user's identity. And this is exactly the reason why you got the 
error message from the FR server:

> rlm_ldap: Attribute "User-Password" is required for authentication.

Note the word "required".

Greetings,

Stefan Winter

-- 
Stefan WINTER

Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingénieur réseau et système

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
email: [EMAIL PROTECTED]     tél.:      +352 424409-33
http://www.restena.lu                     fax:      +352 422473

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to